cancel
Showing results for 
Search instead for 
Did you mean: 

MX 65 with dual active VPN uplinks

New here

MX 65 with dual active VPN uplinks

Hello,

 

I'm deploying a solution of vpn concentrator with MX65 on my branches. 

I'm going to have dual active VPN uplinks and I won't manage the subnets between my MX WAN interface and the both ISP routers. 

So if the two routers provide the same IP address to the both WAN  interfaces, Can the MX manage it without trouble ? 

Or I must have two differents subnets on the both interface? 

 

Thanks.

 

 

4 REPLIES 4
Kind of a big deal

Re: MX 65 with dual active VPN uplinks

So are you meaning a LAN type IP on the WAN interface or a public IP?  If it is a LAN type IP on the MX WAN interface that should be fine.  The use case I can think of for this is plugging in a DSL modem etc and having it hand out 192.168.0.x type addresses.  All of your traffic shaping rules etc allow you to just specify WAN1 and WAN2 so the IP based routing wouldn't be an issue. 

Adam R MS | CISSP, CISM, VCP, MCITP, CCNP, ITILv3, CMNO
If this was helpful click the Kudo button below
If my reply solved your issue, please mark it as a solution.
Highlighted
New here

Re: MX 65 with dual active VPN uplinks

Hello Adam, 

 

Thank you for your response. 

 

It's exactly what I mean. 

The TAC answer me that will confuse the MX: 

"Having two of the same IP would confuse the MX and it would not know how to route its traffic"

Head in the Cloud ww
Head in the Cloud

Re: MX 65 with dual active VPN uplinks

there is a difference in same ip address and address in same subnet.

Kind of a big deal

Re: MX 65 with dual active VPN uplinks


@ww wrote:

there is a difference in same ip address and address in same subnet.


^Brings up a good point.  Will it be exactly the same IP or can it be same subnet different IP?

Adam R MS | CISSP, CISM, VCP, MCITP, CCNP, ITILv3, CMNO
If this was helpful click the Kudo button below
If my reply solved your issue, please mark it as a solution.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.