Firewall Controller

[Apirtle]

I have 18 locations and have one firewall MX84 at the main IT location. I need to move the controller from this firewall to another firewall at a different location. How can this be done? 

[DarrenOC]

Hi @Apirtle , could you please explain your requirement in a little more detail please?

Are you saying you have 18 different sites and you need to move your MX from its current physical location to another site?

[Apirtle]

DarrenOC, 

I have 18 locations all with MX firewalls and 1 location with Fortinet firewall. My plan is to remove the firewall that currently has the controller and replace it with a Fortinet. However, to do this I need to make one of the other firewalls the controller. 

The reason for this is that current location that has the Fortinet can't be changed and the 1 location that I want to replace has connection issues only with the Fortinet and not the other Meraki locations.   

Please keep in mind that all locations connect to the Fortinet currently however only one has issues. It will "drop" the connection for about 30 seconds at a time and reconnect. When this happens the meraki and fortinet dashboards both show the connection is active. The meraki logs shows that it is negotiating about every second. 

I'm at a loss on how to get this to work.

Thank you 

[alemabrahao]

When you say.  "I need to make one of the other firewalls the controller." Are you talking about HUB?

[Apirtle]

Yes. I don't use Meraki's every often, but I'm told our firewall is the main HUB\controller and we can't remove it without breaking our other firewalls. Without the HUB we won't have access to change the config file on each firewall.  

[alemabrahao]

You can have multiple HUBs in fact, the biggest question in your case is, if you choose another MX as a HUB and remove the current HUB, will you be able to access all the Auto VPN features?

[alemabrahao]

Here you can find some helpfull documentation.

https://documentation.meraki.com/Architectures_and_Best_Practices/Auto_VPN_Hub_Deployment_Recommenda...

https://documentation.meraki.com/MX/Site-to-site_VPN/Configuring_Hub-and-spoke_VPN_Connections_on_th...