one-armed Vpn Concentrator in HA - MX Uplink IP or Virtual Uplink IP

[kev2five]

Hi all, 

I have my opinion, but looking for any more reasons to add to my choice of which option to use when building my MX HA Devices. 

What is the most common choice? MX Uplink IPs or Virtual Uplink IPs?

I think you get more redundancy of VRRP heartbeats if you use Virtual

The seamless failover really only effects the cloud portal, anything else?

Thanks in advance

[alemabrahao]

For reasons of redundancy and scalability, whenever possible and of course if the client is willing to accept it, I always use VIP.

[Brash]

I could be mistaken but I though one-armed concentrators in HA must use a VIP.

This VIP is then what's used as the destination point for the dashboard connectivity, S2S VPN connection, client VPN connection etc.

[kev2five]

 MX Uplink IPs does use a VIP, the uplink communication uses the distinct non shared ip though.

[AaronMcElhinney]

This article will serve you well 

https://documentation.meraki.com/MX/Deployment_Guides/VPN_Concentrator_Deployment_Guide#:~:text=Use%....

Uplink IPs

Use Uplink IPs is selected by default for new network setups. In order to properly communicate in HA, VPN concentrator MXs must be set to use the virtual IP (vIP).