MX Design Question

[Collab2025]

Standing up two MX routers in HA setup. I've seen documentation for best practices. However we have the following ISP1 ISP2 MX1 and MX2. Can we use ISP1 to WAN 1 on MX1, then use ISP2 to MX2 on WAN 2 and still operate in an HA fashion?

[RWelch]

Yes 

[chakshu]

Why would you want to connect ISP2 to MX2 on WAN 2 and not WAN1.

It might work, however:

1) You will not be able to use VIP, which provides a better failover between devices.

2) Not sure how would Anyconnect work in this scenario, incase of a failover.

This might work but is not a recommended design.

[RWelch]

@chakshu good catch...I didn't pay attention to the ISP2 using WAN2, but you are correct in using WAN1.

@Collab2025 ISP2 would need to use WAN1 for failover.

[PhilipDAth]

>2) Not sure how would Anyconnect work in this scenario, incase of a failover.

AnyConnect works fine.  MX does a DDNS update to xxx.dynamic-m.com whenever a WAN interface becomes the new primary.  Within 10 minutes, clients will see the new IP address and be able to re-connect.