Meraki MX HA (Warm Spare) Internet Failover Delay

AMackie
Conversationalist

Meraki MX HA (Warm Spare) Internet Failover Delay

We're testing internet circuit failover on a pair of MX84s in HA (warm spare). When triggering a failure on the primary circuit we're seeing packet loss for up to 2-3 mins before connectivity is established on the secondary circuit. This seems a lot considering the auto-vpn requirements from multiple branch sites to the head-end. Is this normal behaviour for the Meraki MX84/100 appliances? If so, can the connectivity test period be reduced?

2 Replies 2
ww
Kind of a big deal
Kind of a big deal

Can be up to 5 minutes depending on your design and how you simulate  the failure.  When you just unplug the wan1 it should be fast.

https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/...

cmr
Kind of a big deal
Kind of a big deal

@AMackie if you use load balancing for auto VPN the traffic should failover pretty much instantly.  We have circuits go down for planned maintenance regularly and the users at the site don't get Citrix or VDI sessions disconnected and there is no interruption to surveillance live viewing

If my answer solves your problem please click Accept as Solution so others can benefit from it.
Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels