MX HA need to know which is active firewall serving traffic

[Mohanms]

Hello Gents ,

I have 2 MX  HA . each MX is having 2 ISP links . My question is anywhere we can find which is the active firewall serving traffic  MX01 or MX02 ? .Im really getting confused  while troubleshooting .

[DarrenOC]

Hi @Mohanms , the dashboard will tell you which MX is the Active one.

[Mohanms · Accepted solution]

Hi @DarrenOC  The situation I faced is under security &SDWAN I saw primary current master as MX1 and Spare as MX2 but MX2 is the one serving internet traffic to clients.Can you help me here 

[DarrenOC]

Hi @Mohanms , that’s not what I would expect.  The Active should be the one serving traffic.  Are your connections connected the right way round?

[MariamT]

Helo @Mohanms , MX2 is normally passive and should not handle any traffic unless MX1 is down .

 if the MXs are connected to the same ISPs  check the cabling  , check if you have misconfigured a vip for the MXs, if you disable MX2  as a spare, what's the output of the Tshoot ? are you sure that the MX1 and 2 see each other through LAN (VRRP) and are on master/spare mode ? they may be both on master mode and you have an asymmetric routing . I think that a deep Tshoot can show what's wrong in this case , if all is good, I suggest that you ask for Meraki support help .