Meraki MX HA Route mode over WAN in two different DC with L2 links
- Is it possible to separate one pair of Meraki MX HA Route mode over the WAN having redundant L2 links among them?
- Which is the maximum latency required to separate Meraki MX HA over WAN?
- Assuming that the VRRP heartbeat is sent from the active MX to a warm spare MX every second, could I assume the maximum latency must be less than one second?
A pair of MX in an HA configuration will use VRRP advertisements to monitor the status of the current active. In a working state, the active MX will send VRRP advertisements out to the LAN every second.
I haven't tested VRRP with such high latencies. I would believe for stability you really need a solid connection between the DC's. It would be completely illogical to have latencies higher than 150 ms between DC's since you could have alot of delay in your applications if you would have a server crossing to the failover MX.
If you have more than one hop, or excessive delays in your DC interconnect, you should consider using VPN concentrator mode instead.
But if you insist on routed mode consider following: All VLAN's must be allowed between DC's, so it's a layer 2 connection between the two. If you want to use virtual WAN IP you need to stretch the WAN subnet between DC's (this is usually possible if you have failover routers in front of the MX'es. If your WAN IP's will be different then you can't use vIP. Failover will take longer.