Hi All   Trying to implement a static route with the 'while host responds to ping' option being used as a fail over mechanism but it isn't working as expected.   We have 9 sites inter-connected by site-site vpn in mesh mode, there are 3rd party routers for a hosted app at 2 sites and we advertise routes into the sd-wan so that the other sites can communicate to the subnet of the hosted app. There are 2 routes to the same subnet, one to be the primary and the other to be the backup route should the primary go down. The primary is a /27 route while a host in that subnet responds to ping and the backup is a /24 route via the other site. Tried disabling the interface connected to the primary router to simulate a failure but it doesn't drop the route and start using the backup, in theory this should work right or have I misunderstood?   The 2 routes work independently because if I manually disable the primary traffic routes fine over the backup. ... View more

Hi, we currently have an MPLS with another 3rd party and I'm slowly moving away from it to meraki SD-wan.   The last piece of the puzzle is routing traffic to our dealer management system (DMS, we're a car dealer) which is the 3rd party network, we are going to take away all their routers on our sites aside from 2, one is to feed all this DMS traffic out and all other sites will talk to this via the SD-wan and the other we are looking to have as a failover. The 3rd party has said we can do this but their 2 routers need to exist on the same subnet and need to be able to talk to one another, so I'm trying to implement vpn subnet translation. I have created the same subnets at sites A and B, at site A I have included the required Vlan in the VPN with translation, but how do I setup site B?   It will not let me include it at all in the vpn. I think I have misunderstood how this works.   James ... View more

Hi Guys, so we've gone full SD-WAN but we still have an old 3rd party router at each site which connects users to our dealer management system ( car industry), we did have a full MPLS with them but we have essentially taken that away by using the SD-Wan but we still need to get to the DMS. We aim to take away most of those routers apart from 2, we'd then like to route all of the other sites through these by including the routes at those 2 particular sites in the VPN and having the 3rd party setup routes to all of the subnets that need to talk. My question is, how can we force certain sites to go via one route and other sites to use the other, also if one falls over all sites to go through the other? ... View more

Hi, newbie here. We recently had someone come in and look at our network setup and he suggested we could set up our network a lot better.   Currently we have all our vlans defined on our Mx’s and use layer 3 firewall rules to separate them, he suggested we should have all the vlans on the switches themselves as all traffic is going through the mx through a 1gbps uplink and the switches should be handling local traffic.   Just wondering how you guys are setting up? ... View more