Secondary WAN-Uplink

[MrSmith]

Hello all, 

i configured a second wan uplink to my MX64 in load sharing mode. Both Uplinks running in Nat Mode.

The internet traffic is split across both links.

My Problem is, that i can only access the Web Interface of the first Uplink Router. For the second one i get a time out.

I seems something wrong with the routing?! 

In a trace i can see that all request to the 2nd router are forwarded to the 1st one.

Can someone help me?

[Adam]

Are you accessing it from the outside?

[MrSmith]

yes its works

[Adam]

I think if you go to Security Appliance>Appliance Status you can use the hostname and it'll be dynamic so you don't have to guess or rely on which WAN is online.  But what are you trying to get to it directly to manage?  As long as one of the uplinks is online can't you manage it from the Meraki Dashboard?

[MrSmith]

Yes when i try to connect with the hostname, ich can reach each Uplink Router. 

But from inside the local lan i can only connect to the router which is connected to the Wan1 Uplink

[MrSmith]

Yes when i try to connect with the hostname, ich can reach each Uplink Router. 

But from inside the local lan i can only connect to the router which is connected to the Wan1 Uplink

[Adam]

From the inside you can connect to the LAN interface. No need to use the WAN interfaces unless you are on the outside. 

Note:  Make sure under Security Appliance>Firewall that you have the 'Web (local status & configuration)' set to allow whatever client you are connecting from.

[MrSmith]

Hi Adam,

My Config. 

MX64 NAT Local LAN: 10.49.10.0/24

Wan1 Uplink ISP-Router: 

local lan: 192.168.2.0/24 (Transfernet)

Wan2 Uplink ISP-Router:

local lan: 192.168.3.0/24 (Transfernet)

Mx64 Wan1 192.168.2.2 GW 192.168.2.1 (Uplink Router 1)

MX64 Wan2 192.168.3.3 GW 192.168.3.1 (Uplink Router 2)

I can connect from 10.49.10.x/24 to the web interface of Uplink router 1 (192.168.2.1)

I can not connect from 10.49.10.x/24 to the web interface of Uplink router 2 (192.168.3.1)

Maybe i would be clear what my problem is. 😉

[Adam]

Sorry if I'm asking a lot of question but I'm just trying to be clear on what you are trying to accomplish.  So you are trying to be able to login to each of the ISP Modem/Routers?

[hoempf]

Hi 

I assume the routers you're mentioning (ISP side) are managed by you or at least you have some sort of web access to them and you want to access this page on each of those routers.

Now if you have WAN1 on 192.168.2.0/24 and this is the primary WAN interface, then all traffic will flow over this WAN port, also traffic destined to 192.168.3.0/24.

What you need is an Internet traffic flow preference rule (Appliance -> Traffic Shaping). There you set traffic destined to 192.168.3.0/24 to use WAN2 and not WAN1.

This is roughly the same as configuring a static route to WAN2 for this subnet (192.168.3.0/24) on a Cisco IOS router.

Please note that the MX only routes TCP and UDP traffic according to this rule, not ICMP. Don't try to ping or traceroute it from 10.49.10.0/24, just connect to the web interface you want to reach.

HTH

(I hope I understood what you want to achieve, please let me know if I'm wrong 🙂 )

[Adam]

I was thinking the same thing as @hoempf

At one of our sites we have two WANs and occasionally need to get to the management web interfaces.  So we just created 2 flow preferences.  

[MrSmith]

Hey guys, 

thank´s for your Feedback. 

I already created two flow preferences and falsely i tried to ping. damn.

Okay but i can confirm that i can reach the web interface.

Thank you!

[MrSmith]

Hey guys, 

thank´s for your Feedback. 

I already created two flow preferences and falsely i tried to ping. damn.

Okay but i can confirm that i can reach the web interface.

Thank you!