That is a good question. The MXen don't care too much about the order in which you make these changes, but removing the virtual IP is a good first step. This is so the MXen don't reach out to Meraki cloud and try to use an old virtual IP for a moment before they realize that it isn't a valid IP. After the Virtual IP is removed, then you can configure both the primary or spare in any order. After they check back into dashboard, you should be able to add the Virtual IP.
I hope this helps.
... View more