Impact of Change in IP Address of Meraki Comcemtrator

[adten]

Hello Guys,

We are planning to upgrade the Concentrator uplinks which involves a change of Service Provider and WAN IP address. As this is the first time this is happening, please I need advise on what to expect in terms of convergence with remote sites. We have about 182 active sites connecting to the concentrators.

Many thanks 

[PhilipDAth]

They'll usually come back online in 30s once the concentrators are online.

[adten]

Many thanks PhilipDAth for the clarification.

Do you have an idea about sequence of events for the propagation of the new IP address from the concentrators (MX 100) to the remote devices? 

Additionally I will also like to know what the impact is if during the upgrade, a change in concentrator priority is required.

Many thanks for your help.

[PhilipDAth · Accepted solution]

The concentrator registers its new address with the VPN registry.  The VPN registry is used for orchestrating all the VPNs.

Changing the order or priority of the VPN concentrators is trivial and takes effect rapidly.

[adten]

Many thanks again PhilipDAth.

Sorry to bother you again, I presume the VPN registry is on the controller or is this on the concentrator.

Thanks

[ww]

Its the cloud controller

In you dashboard go to help> fw info, to see the ip

https://documentation.meraki.com/MX/Site-to-site_VPN/Troubleshooting_VPN_Registration_for_Meraki_Aut...

[adten]

Many thanks guys,

A quick clarification: is there any impact to interconnection between the two concentrators (MX 100) if the new public IP addresses are in different subnets ?

[PhilipDAth]

>is there any impact to interconnection between the two concentrators (MX 100) if the new public IP addresses are in different subnets ?

When you say "two", I'm going to assume they are in a warm spare configuration.  Otherwise, it makes no difference and they can be using different public IP addresses.

If you are using a VIP you won't be allowed to do this.

Otherwise, it will work fine.

[adten]

Many thanks PhilipDAth for your response,

The two are in separate Data Centers (one per location with no warm spare) but with high availability to allow traffic failover between the two in case of failure on either device. 

In the current configuration, both are in concentrator mode with the public IP NATed to an internal IP address for each device on a Firewall.

Each of the MX 100 is configured with the local IP addresses but the WAN IP address for each is assigned by the NAT configuration on the Firewall. This summarizes the current setup.

Thank you