FW HA Failover Seems to Have ISP Preference

[MarcW]

I chose switching since this is where we are seeing it.  We have 2 ISP's.  They both hit the 8 port switch which then hits each of the FW's (primary and spare). 

If we fail ISP #1, the network stays up, but the switch reports as down.  How do I make the switch follow the other ISP as the primary? 

[alemabrahao]

Theoretically this is supposed to be automatic. Do you have any traffic routing rules (Flow Preferences)?

https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Load_Balancing_and_Flow_Preferen...

[MarcW]

No routing settings.

[ww]

You could give the switch a private address from the firewall lan side

Check out the slide deck shared in this post

https://community.meraki.com/t5/Security-SD-WAN/How-to-turn-MS120-into-WAN-breakout-for-2-ISPs-and-2...

[MarcW]

I will look into this.  I may have a completely different ISP setup when we move to the actual location and this will change how I can offer IP's to the switch and MX's. 

[Ryan_Miles]

Is your 8 port switch doing WAN breakout like shown in my diagram?

https://docs.google.com/presentation/d/1xsb8imtUFjN13so86kIZ04IR9f6WEKdbpUrYVON64Zg/edit#slide=id.g1... 

And if yes, is the mgmt VLAN of the switch coming from the LAN side of the MXs?

[PhilipDAth]

It will failover - but it will take MUCH longer.  Around 5 minutes.

https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/Connection_Monitoring_for_WAN_Failo...

[MarcW]

My install is next week, so unless there's a time limit, I am going to keep this open.