configure MX HA

Solved
Shaima
Conversationalist

configure MX HA

Our MX65 is configured as PPoE. How to configure HA (Active -Active or Active - Passive) we have 2 MX65?

1 Accepted Solution
ww
Kind of a big deal
Kind of a big deal

You need to check your isp how/if its possible to connect a second mx device with PPPOE on the same line. 

>if not possible you would need to add a nat router in front of the 2 MX

 

 

Or you need another ISP line for the second mx

View solution in original post

3 Replies 3
alemabrahao
Kind of a big deal
Kind of a big deal

There is no active-active HA. Check the documentation.

 

 

Only one license is required for an HA pair. The warm spare unit does not require a separate license. Alerts for warm spare failover can be configured on the Alerts and Administration page.

Note: The secondary MX must be the same MX model as the primary. Warm spare functionality is not supported between different MX models (e.g. MX85 and MX105).

 

https://documentation.meraki.com/MX/Deployment_Guides/MX_Warm_Spare_-_High_Availability_Pair

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.
ww
Kind of a big deal
Kind of a big deal

You need to check your isp how/if its possible to connect a second mx device with PPPOE on the same line. 

>if not possible you would need to add a nat router in front of the 2 MX

 

 

Or you need another ISP line for the second mx

PhilipDAth
Kind of a big deal
Kind of a big deal

Building on @ww's answer; in short, you need to purchase an Internet circuit capable of supporting HA.  A single PPPoE circuit can not support HA.  You'll need the provider to:

 

  • Give you a circuit with at least a /29 of address space (and it won't be using PPPoE), which you'll need to plug into a switch (unless the provider supplies one in their CPE), and then plug both MX in it.  This is more of a "business grade" service and will almost certainly cost a lot more than what you are paying for now.
  • Get a pair of PPPoE circuits.  You won't have inbound failover for things like NAT, but AutoVPN and client VPN (using DNS) will be able to failover
Get notified when there are additional replies to this discussion.