ps. If you want to make this really simple, setup a warm spare MX at the same location and use a VIP.  The VPN can then automatically failover between MXs.  You'll need an Internet circuit with a minimum of a /29 to accomodate this. https://documentation.meraki.com/MX/Deployment_Guides/MX_Warm_Spare_-_High_Availability_Pair   ... View more