Meraki mx 250, catalyst switches and HA

[ikkyu]

HI, I currently have a single mx250 and 3 catalyst switches connected via access ports each running separate VLANs. The switches have no config and are not linked directly to each other and are not stackable.

If I want to introduce a 2nd mx for HA what is the best way to do this. I can config the switches with the vlans and the uplink ports to trunk with the remaining ports as access to end devices but according to the documentation the switches need to be also linked. If this was the case would STP not kick in a stop the VRRP packets from passing between the MXs?

[PhilipDAth]

You can keep your current config. Just plug in the warm spare MX to the same switches using the same ports as on the primary.

[ikkyu]

Really? So just to confirm.... currently the catalyst have the default config and are connected as access ports to the 250.

No links between the switches, trunks or stp needed and no loop will occur? It really would make things easier if that's the case. Thank you for your reply. @PhilipDAth 

[RSindhu]

Correct me, Your first switch is receiving all uplinks and acting as VTP server? Now if you do the warm stacking from the back plain , it would provision as stack member and would share the same configuration. In this condition is that you need same kind of switch.

Second option, it if you have a spare catalyst switch, then connect as it on etherchannel from the front and follow the design guide to configure GLBP on both. 

https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Campus/HA_campus_DG/hacampusdg.html

[PhilipDAth]

To be more explicit; lets say your second catalyst switch is only used for VLAN100.  You don't have VLAN100 configured on this switch, or any other config. It has the default config.

You currently have (lets pretend) port two of your MX250 configure as an access port in VLAN100 plugged into this switch.  When you add the second MX250 as a warm spare, you plug the same port 2 on the warm spare MX into that same Catalyst switch.

Repeat for the other switches and VLANs.

You don't require links between the switches, because each single switch is dedicated to a single VLAN. Your solution is loop free so you don't have to worry about spanning tree.

[ikkyu]

Really? So just to confirm.... currently the catalyst have the default config and are connected as access ports to the 250.

No links between the switches, trunks or stp needed and no loop will occur? It really would make things easier if that's the case. Thank you for your reply.

[ikkyu]

Really? So just to confirm.... currently the catalyst have the default config and are connected as access ports to the 250.



No links between the switches, trunks or stp needed and no loop will occur? It really would make things easier if that's the case. Thank you for your reply.

[RSindhu]

You can stack second switch and dual home access switches to it. Don't forget to order 2 extra SFP's for first switch if required.