MX HA WAN topology

[iores]

Hi,

I have two MXs in HA. They are connected to downstream Meraki switch. I have only one physical ISP connection.

1. Is it recommended to use downstream Meraki switch to interconnect MXs and ISP via dedicated VLAN?

2. Generally speaking, for warm spare and Virtual IP to work, do WAN ports need to be directly connected to ISP, or it can be done via switch in between?

I have seen Meraki documentation where WAN ports are connected directly to ISP.

[alemabrahao]

You can connect via switch and use a dedicated VLAN, I've done this in several implementations and it works well.

[iores]

I forgot to mention - this is L2 aggregation LAN switch, not dedicated WAN switch. Technically, I know this should work but given Meraki design requirements, I wonder if this would still be OK? I have no other options but I want to investigate all possible risks.

[alemabrahao · Accepted solution]

It will work either way.