Hi everyone, looking for design help building off a previous post   ISP-A/B to BR-A/B to MX250 HA pair in routed mode to Nexus 9k core using VPC where multiple SVIs and three VRFs will live. (see diagram)   How would you guys recommend I configure the lan ports on the MX250 HA routed mode pair facing the core so full redundancy can be achieved? My understanding is LAG/VPC is not supported on the MXs?   Any help on this is appreciated, thanks a ton.   ... View more

Hey guys I'm trying to understand a design presented to me. - 2x MX250 in HA as routed mode, sitting between edge router and core router in the DC -- The routed mode HA pair will be performing the Unified Threat Management/Security for all the branch site traffic  - 2x MX250 in HA as One Arm Concentrator mode hanging off the core router in the DC -- The VPN concentrator pair will be aggregating all the auto-vpn tunnels for branch sites that use MX67s Owner of this design is saying they were sold this solution because VPN concentrator pair can't do unified threat management, SDWAN, and other feature sets because it is in concentrator mode. Which is why they need a separate pair of MX to handle those feature sets. I'm new to Meraki SDWAN, but does this design sound right/make sense? Can we accomplish this with just a single HA pair? Thank you for any insight!  Incredibly Fancy and Highly Detailed Diagram   ... View more