MX operating in HA and Firewall 2xFPR1120-NGFW-K9 for Any connect/encryption suites and features

[SuhasKawale]

What's the recommended way to cable and configure 2x MX75/85 operating in HA and Firewall 2xFPR1120-NGFW-K9 for Any connect/encryption suites and features like posturing, etc capabilities? Any design recommendation please. 

[KarstenI]

I typically tut them parallel to each other:

• the MXes have direct WAN connection
• The VPN-Gateways have direct WAN-Connection
• LAN of both of them is in the same Transfer-Network which also connects the L3 Core-Switch

[SuhasKawale]

Thanks Karsten.

Could you please provide design for this for your expectations?

[KarstenI]

Obviously I don't have a design for your environment. But any questions on what needs to be done to build a system like this?

[SuhasKawale]

So assuming as per your previous reply that design would be like primary MX85 will have primary WAN connection and secondary MX85 will have secondary WAN connection below MX 85s 2xFPR1120-NGFW-K9 and below that MS core switches and below that access MS switch along with MR access points as I am looking for SD WAN perspective??

[KarstenI]

What do you mean with below? Behind? I would typically put all four WAN ports (2*MX, 2*FTD) directly on the internet. All four LAN ports are in the LAN connected to your MS.