cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Existing Traditional MPLS Site Meraki Deployment

Highlighted
New here

Existing Traditional MPLS Site Meraki Deployment

We have following set up in our branch offices .


Branch Router ---MPLS and Internet using sub interfaces for VRF connection but we have a single physical link with two VRF terminated to our CE router.

 

Q1. Can the exisiting set up be used for setting up Meraki SD-WAN?

Q2. Is new public IP is required to set up the SD-WAN?
Q2. Can we use MPLS or Internet VRF for site to site connection between branches using Mx100/Mx64?
Q3. Can we use only MPLS VRF for site to site connection between branches using Mx100/Mx64?

 

Thanks,
P

2 REPLIES 2
Highlighted
Kind of a big deal
Kind of a big deal

Re: Existing Traditional MPLS Site Meraki Deployment

1. yes, as long as the WAN/DIA are presented separately on LAN side of CE

2. no, if you want to use MPLS for SDWAN

3. Both if DIA has spare public IP

4. Yes if 1.

 

Highlighted
Kind of a big deal

Re: Existing Traditional MPLS Site Meraki Deployment

There are some complications, because you are presenting the Internet and MPLS circuits on the same port using VLAN tags.  You'll need to break these into seperate ports.

 

Lets pretend your provider is using the tag 2000 for the Internet circuit and 2001 for the MPLS circuit.  You would need to plug this info an MX LAN port configured as a trunk port.  You would then configure another port as an access port in VLAN 2000 and run a cable from that to the "Internet1" port on the MX.

 

How you treat the MPLS circuit depends on weather you want to run AutoVPN over it, as in this case:

https://documentation.meraki.com/MX/Site-to-site_VPN/Configuring_Site-to-site_VPN_over_MPLS

This is the most difficult to deploy case, but the most sophisticated and provides the most SD-WAN configuration options.  If you used this case you would run a second cable in VLAN2001 to "Internet2" on the MX.

 

The second way is to treat the MPLS as a simple routed circuit and only use the Internet circuit for failover, as in this case:

https://documentation.meraki.com/MX/Deployment_Guides/MPLS_Failover_to_Meraki_Auto_VPN

In this scenario you would simply configure the VLAN2001 as a layer 3 VLAN on the MX.

Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.