Hi guys,
I am totally new to Meraki and trying to learn how to deploy a hub-and-spoke network with 2 hubs: one is the physical "DC" and the other is Azure Cloud:
I'm just starting to read the documentation and already have a few questions:
1. From my understanding, 2 x MX250 should be configured in routed mode. Am I correct?
2. I learned from the VPN Concentrator deployment guide that one-arm concentrator is the recommended configuration for MX appliances serving as VPN termination points into the datacenter. May I know why? From the General MX Best Practices, I understand that it ensures easy integration into an existing network that may already have layer 3 functionality and edge security in place. Is that the reason why one-arm concentrator is recommended compared to routed mode? Is there any features that one-arm concentrator mode supports and routed mode does not?
3. I read quickly the DC-DC failover deployment guide. Is is possible that MX appliances are configured in routed mode in the DC1 and in one-arm concentrator mode in the DC2 or it should be the same mode in 2 DCs?
Many thanks.
Solved! Go to Solution.
I would use routed mode for your DC.
Azure will use VPN concentrator mode.
The two systems will use unique subnets. So Azure will have different subnets to on-premise.
You don't need to worry about DC to DC failover - the clients will have to decide which servers to connect to - Azure or on-premise.
I would use routed mode for your DC.
Azure will use VPN concentrator mode.
The two systems will use unique subnets. So Azure will have different subnets to on-premise.
You don't need to worry about DC to DC failover - the clients will have to decide which servers to connect to - Azure or on-premise.
That's cool, thanks for your swift reply.