MX64 MPLS/Internet

3ffdot
Here to help

MX64 MPLS/Internet

I currently have a Cisco 2811 setup at one of our branches.  It has an MPLS and internet connection on the fastethernet interface using subinterfaces (one physical connection).  I want to know if the MX can be setup in the same manner.  It doesn't seem to have this feature on it for subinterfaces but I might be missing it.  I have the router interface config and the static routes below, any advice would be helpful.  IP's are just for example purposes.

 

interface FastEthernet0/0.300
description **INTERNET**
encapsulation dot1Q 300
ip address 21.21.21.106 255.255.255.252
ip access-group INTERNET in
ip nat outside
ip virtual-reassembly
end

 

interface FastEthernet0/0.200
description **MPLS**
encapsulation dot1Q 200
ip address 11.11.11.10 255.255.255.248
end

 

ip route 0.0.0.0 0.0.0.0 216.81.55.105<---Internet
ip route 10.0.0.0 255.0.0.0 100.64.1.9<---MPLS
ip route 172.16.0.0 255.240.0.0 100.64.1.9<---MPLS
ip route 192.168.0.0 255.255.0.0 100.64.1.9<---MPLS

 

5 REPLIES 5
Adam
Kind of a big deal

Security Appliance>Addressing and VLANs.  I think you can make multiple VLANs then just assign those VLANs to the physical interface?

Adam R MS | CISSP, CISM, VCP, MCITP, CCNP, ITILv3, CMNO
If this was helpful click the Kudo button below
If my reply solved your issue, please mark it as a solution.

@Adam I thought about going that route and putting layer 3 IP's on the MX but I'm not sure it works as an actual router.  I don't think you can assign more that one WAN IP to the MX.

PhilipDAth
Kind of a big deal
Kind of a big deal

It is not easy to make this config work.

 

Configure a LAN port as a trunk port, and plug your circuit in there.  Configure another port as an access port in VLAN 300.  Then run a patch cable from this LAN port to a WAN port on the MX.  Your MX now has its Internet port connected to the correct VLAN.

 

Create a layer 3 VLAN on the MX for VLAN 200, and then add the three RFC1918 address routes.

@PhilipDAth

 

Very interesting setup. Do I create a layer 3 VLAN in VLAN 300 as well?  It also has a static IP currently.

PhilipDAth
Kind of a big deal
Kind of a big deal

No, VLAN300 should be layer 2 only.

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels