IPSEC/Non Meraki VPN failover?

[CGRE]

As I understand it IPSEC VPN on MX runs off whatever is set as the primary connection under shaping config, does it auto failover to the 2nd WAN port if the primary connection fails?

I note it has no source info detailed in config so would assume it can use the primary by default and then failover to WAN2 if WAN1 failed (in a scenario where WAN1 is primary)

Is that the case, am struggling to confirm this in Meraki docs about IPSEC.

[Inderdeep]

@CGRE : Failover occurs when the primary uplink of the MX is unable to reach the Internet. By default, AutoVPN traffic will egress the primary uplink, as configured under Security & SD-WAN > Configure > SD-WAN & traffic shaping. WAN uplink failover occurs automatically when multiple uplinks are in use.

https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-Site_VPN_Failover_Behavior

[CGRE]

Thanks but I am only talking about IPSEC/Non Meraki VPN here not AutoVPN

[PhilipDAth · Accepted solution]

Yes it does.