MX64 Route specific traffic though WAN2

Gus3
New here

MX64 Route specific traffic though WAN2

This is a test environment before I try it on the customers production MX64.
I have 2 Internet feeds. WAN1 is configured with one Internet provider and Port 4/WAN2 is configure with another Internet provider. I want all traffic to go out WAN1 unless it's destination is a certain IP address. I cannot seem to get this to work.

5 Replies 5
ww
Kind of a big deal
Kind of a big deal

You are talking about internet traffic outside the vpn?

 

Wan1 is primary? And load balancing disabled?

 

https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Load_Balancing_and_Flow_Preferen...

 

 

https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Load_Balancing_and_Flow_Preferen...

 

Can you share your rule? And how did you verify its not working?

Gus3
New here

WAN1 is primary, LB is disabled.  I want all traffic going out WAN1 unless it's destination is 

10.64.2.xxx, a single, no-changing IP destination.
 
My rule look s like this
 
Protocol     Source    Src Port     Destination            DST Port      Preferred Uplink
Any               Any          Any         10.64.2.xxx/32       Any                 WAN2
 
A tracert shows routing through WAN1.  In addition, the destination will only accept traffic for my WAN2 IP.  And my attempt to connect to the destination fails.  I can assign the Static IP of the WAN2 connection to a laptop and the connect works.
 
 
alemabrahao
Kind of a big deal
Kind of a big deal

Tracert is not a valid test, is based on ICMP, Look at this information:

 

Note: ICMP traffic is not subject to traffic shaping rules. As a result, Flow Preference will have no impact on ICMP traffic.

 

So if WAN1 is defined as the primary uplink tracert will go for WAN1. You can change your primary uplink for WAN 2.

 

alemabrahao_0-1667155508190.png

 

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.
ww
Kind of a big deal
Kind of a big deal

Wan2 is a mpls? 10.x is not a internet address.

 

Or is it a destination in your autovpn?

alemabrahao
Kind of a big deal
Kind of a big deal

But, just an observation, It's a rule for Internet traffic, for VPN you should have to create an SD-WAN policy:

 

alemabrahao_0-1667156252779.png

 

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.
Get notified when there are additional replies to this discussion.