Prioritizing MPLS over internet

[Lourdes]

We have two kinds of set up. 

1. MPLS is connected to WAN1. Internet is at WAN2. 

2. MPLS is connected to LAN port 3. Internet is at WAN2.

Both of them applies site to site VPN.

How do you prioritize MPLS connection for both set up?  There should also be failover if either MPLS and internet connection went down.

[ww · Accepted solution]

setup 1: WAN1 should be set to primary wan (default), and load balancing disabled. if you want load balancing enabled you should create a policy to send vpn traffic over wan1 https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Load_Balancing_and_Flow_Preferen...

setup2: static routes are prioritized over other routes. so this should also work.

[Lourdes]

Oh , so this things works?

I will try it tomorrow and update you. 

Thanks!

[ww]

Yes.

But on setup1 you need a internet gateway on mpls. And you build a vpn tunnel over mpls.

Setup2  dont need internet on the mpls/lan port, you just route your traffic over the mpls  directly.

[Lourdes]

Can you give an example for setup 1?

[ww]

setup 1  :  https://documentation.meraki.com/MX/Site-to-site_VPN/Configuring_Site-to-site_VPN_over_MPLS

setup 2 : https://documentation.meraki.com/MX/Deployment_Guides/MPLS_Failover_to_Meraki_Auto_VPN

[Lourdes]

I did the setup 1. Make MPLS the priority and then configure the flow preference. 

So, how do you know if the MPLS is the priority when a PC is trying to connect to the main connection/hub of the MPLS network? 

[ww]

You can see the uplink decisions if you browse to the spoke network. and go to sdwan > vpn status

https://documentation.meraki.com/MX/Monitoring_and_Reporting/SD-WAN_Monitoring#Overview

[Lourdes]

Hi Ww,

Thank you for your answer. This helps us a lot.