- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
MX450 Internet redunduncy
Hi, I have MX450 with direct internet. I have L2 link to Datacenter with internet. How should I use / setup to use direct internet as primary link but when primary direct link fails I want internet traffic to failover to use Datacenter link and internet from Datacenter. Any suggestion on physical topology and achieve failover configuration for internet please? Thank You,
Solved! Go to solution.
- Labels:
-
Firewall
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
From what I can see, if you plug your direct internet link into WAN1 and your link to your DataCenter (with Internet breakout) into WAN2, it will just work as you want it to, assuming you retain the default settings - WAN1 is primary. You have to ensure that both links provide Internet access to the Meraki cloud resources shown under ? ? Firewall info - plus the WAN uplink test resources detailed here: https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/Connection_Monitoring_for_WAN_Failo...
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This would the be essentially the same as integrating MPLS:
https://documentation.meraki.com/MX/Site-to-site_VPN/Configuring_Site-to-site_VPN_over_MPLS
The documentation shows a topology example.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
From what I can see, if you plug your direct internet link into WAN1 and your link to your DataCenter (with Internet breakout) into WAN2, it will just work as you want it to, assuming you retain the default settings - WAN1 is primary. You have to ensure that both links provide Internet access to the Meraki cloud resources shown under ? ? Firewall info - plus the WAN uplink test resources detailed here: https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/Connection_Monitoring_for_WAN_Failo...
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thank you both Mloraditch and Greenman fore your inputs.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@ChiragPatel simply assign an IP on the MX and one in the same subnet on the other end. If the other end is a core switch, create a transit VLAN with an SVI using a new small subnet and set the port that links to the MX to access mode / untagged.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Right Vlan with IP.
Appreciate your inputs.
Thank You,
