High Availability (HA) mode, with their operational mode set to "Passthrough or VPN Concentrator."

[jOMeraki2]

I have two Meraki firewalls configured in High Availability (HA) mode, with their operational mode set to "Passthrough or VPN Concentrator."

When I connect devices to both the primary and secondary firewalls simultaneously, the devices work normally and receive IP addresses without any issues. It seems that the secondary firewall does not block any ports or interfere with the traffic in this setup.

I would like to confirm if this behavior is normal for such a configuration, or if there might be an issue with the setup.

I appreciate any insights or guidance from the community.

Thank you!

[rhbirkelund]

If the MX'es are in Passthrough Mode, you should only connect one port to the network. In Passthrough mode the concept of Internet port and LAN port goes away, as both MX'es are only connected to the network via the Internet port. Any other port connected to the network besides the internet port, would result in some unexpected behaviour, and should be avoided.

In the first screenshot that yo've shared I see port 2 as up. You should disconnect this port.

[jOMeraki2]

I was surprised because, usually, in this setup, only one firewall is active, and the other takes over during failover. Even if something is connected to it, the port is supposed to remain inactive.

[rhbirkelund]

It depends on what kind of HA you’re expecting.

The MX’es are using VRRP.