MX95 WAN CONNECTION BEST PRACTICE

[Mazide]

Hello everyone,

I'm seeking advice on best practices to set up a robust network at our branch office to minimize downtime.

Here's our current setup:

• We have two separate internet connections from 2 different providers.
• Each internet connection terminates on a separate port on our MS120 switch.
• Each MX95 device is connected to the MS120 switch via a separate port.
• Additionally, each MX device has two links to the LAN.

Could anyone advise on the best configuration practices using these components to ensure reliable connectivity and seamless failover? Any insights or recommendations would be greatly appreciated.

Thank you!

[GIdenJoe]

If at all possible if both ISP's use devices (routers or modems) with multiple ports try to connect your MX devices directly.
If this is not possible due to remote location you can use switches to split the connection.

I recommend using a separate switch for each ISP.  Or separate switches in a stack where ISP 1 with both MX WAN-1 ports is on one switch and the other ISP router with both MX'es is on the second switch.  This way if one switch dies or needs to go into service you don't lose both ISP's at the same time.

Due to client tracking issues it might be a good idea to use non Meraki switches or Meraki switches in a different dashboard network so the WAN IP's don't mix and have some adverse effects on your clients page.

[Mazide]

I like the idea of using a separate switch for each ISP with non meraki switches.

Do you recommend having a direct link between the two MX devices for the HA ?

Yes, we do have that effect on the client dashboard with public IPs.

Thank you for your advice.

[PhilipDAth]

I would not run a direct link between the MXs, as it can cause spanning tree issues.

If you can't buy a second switch, you can also just run the secondary ISP into WAN2 on the primary MX.

[rhbirkelund]

I tend to keep the ISP/WAN switches in a dedicated Network, outside of the site's network. Otherwise, the Application Visibility has a tendency to show skewed data.

[KarstenI]

This is what I do in these situations: