SLA Monitoring to check the ISPs?

[Marc_Abaya]

Before moving all our sites to MX, I have this capability on my previous firewalls to track the SLA of ISPs connected to WAN and they'll be brought down temporarily if not meeting the SLA. For example, I will monitor the Packet Loss of ISP1 and if it's more than 10%, it will be disabled automatically so that all traffic will use the second ISP2.

I don't seem to find this option with the MX. What's your work-around? Some of our sites are in rural areas and on bonded DSL and we often see them 'flapping' or with high Packet Loss. But the MX keeps on using them still.

[BlakeRichardson]

What you are talking about is SD-Wan, you probably need a different license. 

https://documentation.meraki.com/General_Administration/Licensing/Meraki_MX_Security_and_SD-WAN_Lice...

[Marc_Abaya]

Yep, but I don't see a way to do that on the SDWAN page (unless I'm missing something). I think that works for L2L VPNs, but just a regular internet traffic?

[Mloraditch · Accepted solution]

https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Load_Balancing_and_Flow_Preferen...

https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/...

Flow preference options are the closest equivalent. The second link is only possible if you have SD-WAN+ level licensing.

[Marc_Abaya]

Thanks, but under SD-WAN policies (as described on the first link) doesn't that apply to VPN traffic only?

[Marc_Abaya]

We don't have SD-WAN+, but that's probably what we need.

[JeroenVercoulen]

You need to have SD-WAN+ to utilize SD Internet. This is what you are describing.

https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/...)

[cmr]

This is what a policy looks like if you have the SDWAN+ licence:

[PhilipDAth]

Have a read over the uplink monitoring for failover.

https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/Connection_Monitoring_for_WAN_Failo...