Hub priority and default route

New here

Hub priority and default route


I have an MX64 that is configured as a spoke ( to two hubs:


HUB1 is a MX64 that only has its local LAN (


HUB2 is my core MX400 from here I advertise all private address spaces: (large MPLS network)


I want traffic sourced from the spoke( to go directly to the network. The problem is it is traversing HUB2 to get there.


When traffic is sourced from HUB1 to the spoke it works correctly.


I was assuming that the more specific route would be chosen? That would take priority over I also have HUB1 listed first.  Not sure what I am missing here...


All routes are green in the route table.


Also, a simpler question: Not having a default route selected will dump all public traffic out the local internet connection, correct? I don't want to move that traffic across a VPN.


Thanks in advance for you help.




Kind of a big deal

Re: Hub priority and default route

On your Spoke go "Security Appliance/Route Table".


That will show you how it is going to route the traffic back to the hubs.  Is the routing table correct her for traffic going to HUB1?


Another twist you could try is making this single spoke a hub and see if that has any impact.



My personal guess is that the spoke will only connect to the primary hub, and wont connect to the second hub unless the primary is down.

Here to help

Re: Hub priority and default route

How about trying the following?


Look at the following red square. If you specify one device to be your default route, all traffic will be routed there by default.


As for getting your internet traffic over the WAN internet interface, perhaps the following Allow ACL list would fix that:



Here to help

Re: Hub priority and default route

@Majortek128 I think you have to define in concentrator priority and place the HUB1 at the top as compared to HUB2.

Kind of a big deal
Kind of a big deal

Re: Hub priority and default route

How about setting up the spoke site as a hub.  If you only have 3 sites then the only reason to have a spoke is to force internet traffic over the SD-WAN to the hub.  As you want it to go out of the WAN port directly, changing the spoke to a hub fixes that as well.

Here to help

Re: Hub priority and default route

Did you ever find the solution to your issue?

Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.