Meraki

thomasthomsen · ‎Aug 31 2021

Just got my first set of MX105's ... nice 🙂

What's not to like.

Redundant field replaceable PSU's in the box, both copper and SFP WAN ports, all good.

Until i configured them for HA in VPN concentrator mode.

Now they are just stuck in Master / Master ... very strange.

Im thinking it might be the MAC address VRRP bug thing, but I have not experienced that bug yet, and don't really know what to look for in packet captures here.

And you cannot downgrade them to 15.xx

The network Im working with here is pretty simple.

It's just for getting them online and such.

Connected WAN 3 on each boks (in the configuration these then become WAN1) to a switch in the same VLAN and then to the internet.

It's just a "stupid" switch with not port security or anything configured on it. Just a flat vlan to go to a gateway for internet access.

Configured HA and then VPN Concentrator - pretty straight forward. But now stuck in Master / Master.

Its very strange.

PS.

Both of them claims that there is a connection on their USB port in the dashboard.

I dont know why. Maybe a UI bug. - Because there is NOTHING connected to that port on either of them.

/Thomas

thomasthomsen · ‎Aug 31 2021

I found my mistake:

The devil WAS in the what I called : "it's just a "stupid" switch with not port security or anything configured on it."

Used an MS for that, default configured.

In that default configuration : "Flood unknown multicast traffic" is not enabled".

So ... of course VRRP is having a semi hard time.

That fixed it.

Thanks for listening to my worries / rants.

View solution in original post

ww · ‎Aug 31 2021

The usb gui bug is also on mx95.

What fw they use?

Did you try reboot both?

thomasthomsen · ‎Aug 31 2021

In front of this, right now, is just a MX84 with no rules.

So I dont get why they are in Master / Master it does not make any sense ...

thomasthomsen · ‎Aug 31 2021

Ahhhh .. Think I figured it out.

Stand by, I'll let you know ...

thomasthomsen · ‎Aug 31 2021