cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Two MX64 in same subnet with HUB VPN in same subnet aaatched to same switch

Comes here often

Two MX64 in same subnet with HUB VPN in same subnet aaatched to same switch

 

Dear Sir,

 

Is it possible for Two MX64 in same subnet with HUB VPN in same subnet aatched to same switch.

 

7 REPLIES 7
Head in the Cloud

Re: Two MX64 in same subnet with HUB VPN in same subnet aaatched to same switch

Hi,

Would you mind explaining your scenario?

May be with a Diagram please.

Cheers
Ajit
ajitsnw@gmail.com
https://www.linkedin.com/in/ajitkumarverma/
Kind of a big deal

Re: Two MX64 in same subnet with HUB VPN in same subnet aaatched to same switch

If the question is whether two MX's with their WAN interfaces in the same subnet and connected to the same switch can do autovpn with each other the answer is Yes.

Comes here often

Re: Two MX64 in same subnet with HUB VPN in same subnet aaatched to same switch

Hello sir,

 

I have two windows server, 1st server ip = 192.168.0.1 default gateway 192.168.0.100

2nd server ip = 192.168.0.200 default gateway 192.168.0.100.

 

Two MX64 in HUB site to site vpn, 1st MX64 HUB1, LAN ip = 192.168.0.100

2nd MX64 HUB2, LAN ip = 192.168.1.100.

 

three MX64 in spoke site to site VPN with HUB1. another thhree MX64 in spoke site to site VPN with HUB2.

 

But we want to access above mentioned both the server from all the spoke. since internet speed are less speed so we want to divide 3:3 branches(spoke). also if one HUB1 device get problem still at least three  branches will be working through. If we connect all the 6 branches (spoke) to same HUB with two wan internet load balancing will be there,  but id the device get fail than all the six branches will stop accessing the Head office.

 

So my requirement is HA with load balancing and also fail over VPN.

 

 

 

Comes here often

Re: Two MX64 in same subnet with HUB VPN in same subnet aaatched to same switch

Hello sir,

 

I have two windows server, 1st server ip = 192.168.0.1 default gateway 192.168.0.100

2nd server ip = 192.168.0.200 default gateway 192.168.0.100.

 

Two MX64 in HUB site to site vpn, 1st MX64 HUB1, LAN ip = 192.168.0.100

2nd MX64 HUB2, LAN ip = 192.168.1.100.

 

three MX64 in spoke site to site VPN with HUB1. another thhree MX64 in spoke site to site VPN with HUB2.

 

But we want to access above mentioned both the server from all the spoke. since internet speed are less speed so we want to divide 3:3 branches(spoke). also if one HUB1 device get problem still at least three  branches will be working through. If we connect all the 6 branches (spoke) to same HUB with two wan internet load balancing will be there,  but id the device get fail than all the six branches will stop accessing the Head office.

 

So my requirement is HA with load balancing and also fail over VPN.

 

Thanks and regards.

 

 

Kind of a big deal

Re: Two MX64 in same subnet with HUB VPN in same subnet aaatched to same switch

Best setup for me would be to have the hub MX's in warm spare. Their WAN ports should be connected to the two ISP's. On the LAN side you define the two subnets in which the servers reside.

 

The spokes will the build autoVPN tunnels over the two ISP's. You can load balance between those two tunnels when accessing the servers.

 

If the hub device fails, the warm spare takes over.

Meraki Employee

Re: Two MX64 in same subnet with HUB VPN in same subnet aaatched to same switch

Hi @ehsan230564 ,

 

I would agree with @BrechtSchamp for the setup. Give you redundancy on ISP as well as hardware. However, If the solution provided is not viable for you, please provide us information on the physical setup. 

Do you have any kind of network diagram as well as physical location information (i.e. are the Hub MX in the same subnet on the WAN interface and physically connected in the same room?)

If this was helpful, click the Kudos button below.
If your issue was resolved, we request you to mark the post resolved so other users can benefit in future
Highlighted
Kind of a big deal

Re: Two MX64 in same subnet with HUB VPN in same subnet aaatched to same switch

I have talked about how to do load balancing in your other thread, but it is complicated.

https://community.meraki.com/t5/Security-SD-WAN/VPN-load-balancing-mx64-and-access-the-same-server/m...

Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.