Hi team, I hope you're all doing well. We want to enable a second MX in warm spare mode. Currently, the architecture is a basic ISP <- MX <-- MS <-- MR. We're now adding one more MX because a remote site will be under renovation for six months, and we'll be using that equipment temporarily at another site. A license isn't necessary because, according to my research, it's not required (but we have one anyway). Our network is small, and we have the switch where the MX connects and one MR36 access point.
I was looking at a design by @Ryan_Miles that I found interesting, but I had some questions. I don't know if Ryan see this, but I'm including credit for his designs, which I think are excellent.
Ports 9 and 10 shouldn't be trunked and should have a native management VLAN. The other VLANs should be allowed in trunk mode or with an allowed VLAN XX, YY, ZZ.
If there are any other considerations, please let me know. We don't have it in production yet, as I need to establish a timeframe for implementation. the changes in the network
Regards
Carlos.
The WAN breakout switch should be in it's OWN (separate) network - not part of your downstream switches.
Then it must be in access mode, the ports that I'm marking in blue?
I ask because I'm currently routing several VLANs through the MX and I'm curious about the design. Regarding ports 1, 2, and 3, I agree that they should be in access mode with a dedicated VLAN.
