DataCenter MX with VPN Concentrator mode

[Spooster]

Hello Experts,

We are planning to introduce Miraki SD-WAN in our environment. I have read in Meraki SDWAN CVD stating that at the datacenter, it is compulsory to configure VPN with a single ethernet connection(one armed concentrator). Can someone help me to understand what does that means? 

[PhilipDAth]

It is not compulsory.

If you pretend the DC is the same as every other branch, then you can connect it up the same.  You can use VLANs, and dual Internet feeds.  This is by far the most common deployment method I used for DC's.

In one-armed mode you rely on the rest of the infrastructure in the DC to do the routing and firewalling for you.

You can check out this guide for a single DC:

https://documentation.meraki.com/MX-Z/Deployment_Guides/VPN_Concentrator_Deployment_Guide

And for a DC and a DR site:

https://documentation.meraki.com/MX-Z/Deployment_Guides/Datacenter_Redundancy_(DC-DC_Failover)_Deplo...