SD-WAN | INTERNET OVER MPLS

[fsantos]

Hi Community!

  I need your opinion about the following topology, I currently have an MX with an internet link and an MPLS link, I would like to know if you have found a way to conmute the internet over MPLS, that is, when the local internet goes down use the internet over MPLS, maybe with a default route for example . I have placed an image as a reference of the topology, at the moment according to the documentation that I have found it is not possible, but perhaps you have found a solution

[ww]

https://documentation.meraki.com/MX/Site-to-site_VPN/Configuring_Site-to-site_VPN_over_MPLS

[fsantos]

Thanks for you answer, currently i have this solution in my infraestructure.

MPLS Failover to Meraki Auto VPN - Cisco Meraki

[cmr]

We have a similar requirement and at the hub we have the MXs in single ended concentrator mode.  That allows it all to work as you wish.

[StevePF · Accepted solution]

Same here, I used this configuration as a transition from MPLS to Internet-based SD-WAN.

But I add some additional stuff, like allowing split tunnel and use WAN 1 (Internet circuit) as Primary uplink and disabled the load balancing.  I also added some SD-WAN policies to use WAN 2 (MPLS circuit) for voice and some sensitive traffic to our DC.

This was more predictable until I all the MPLS circuits were removed. After that, I used the uplink load balancing and modify the SD-WAN policies to use the best for voice or other custom performance classes.

[fsantos]

Thanks! 

[rpidcock1]

So in this scenario, did you peer any routing protocols with the MPLS provider?  Did you enable BGP on your MX?

[fsantos]

At that time there was no BGP feature, I did it with conditional static routes. Now the bgp option makes more sense.

[rpidcock1]

So are you using BGP today, or still static routing.   

[fsantos]

still static, but I am considering BGP.

[rpidcock1]

I'm actively working on trying to get a site setup with this very scenario.  My problem is that I have different ASN's at my remote branches (i.e. 646xx where xx = branch number).  I'd love to visit with you sometime if you had a few minutes to chat about the overall setup.  Maybe we could compare notes a little as to our specific network environments.

Send me a direct message if you'd like to try to link up for a brief discussion.