Hi @KarstenI ,  Thanks for the response. Can I assume, if there are multiple destination over internet to receive the stream, the flow will get load balanced, in round robin or based on the ratio set in WAN1 and WAN2 link?    Thanks you.  ... View more

Thanks @Tadpole86  will look into the document. In my setup, all switches and AP are Meraki.  ... View more

Hi @Tadpole86 ,   Thanks for your response.    Are you asking whether the gateway for guests should be on the MX or the core switch? Yes, which one is recommended. To keep gateway in MX or in Core switch. Hope got an idea from your reply, to reduce load on MX, prefer to keep the gateway on MS core.  Can MS Core switch be configured to provide DHCP IP for Guest Vlans? or it should be on MX?    The internal firewall is due to business requirement. MX will primarily serve for internet traffic and internet load balancing.    ... View more

Thank you, @PhilipDAth . Appreciate the clarification.  ... View more

  Hi, Based on the suggestions, I made some corrections to the design. Can help to confirm,if this is good?      Thanks,  ... View more

Hi @GIdenJoe  @PhilipDAth ,    Thanks for your inputs, I followed the Layer-3 recommended topology using below link. https://documentation.meraki.com/Architectures_and_Best_Practices/MX_and_MS_Basic_Recommended_Layer_3_Topology#How_is_traffic_routed_given_the_above_configuration.3F   Below are the models that will be used as core and access switch.  Core: MS425-32-HW (Main building) Access Switch: MS350 models There are some 50+ MS350 as access switch downstream to core stack.   Building 1: MS410-16-HW (transit switch for different subnets) Building 2: MS425-16-HW (transit switch for different subnets)   The distribution stack in my design are transit switches for other networks, they do not use same subnet used under core switch. I also took reference from below community link for my design, except for direct link between two MX lan ports. https://community.meraki.com/t5/Security-SD-WAN/Meraki-Network-Campus-Design/m-p/48897#M12324   Based on MX and MS Basic Recommended Layer 3 Topology, I plan to use a transit vlan between core to MX and other distribution to MX configuring as access ports. Configure STP on the switch side to avoid loops.    If I use a different transit vlan for each segment, they will have their own broadcast domain and blocking ports between core and distribution to MX.   Please advice based on these comments.    Thanks,   ... View more

Hi,  I am planning a similar design for my network with multiple stack with different subnet downstream, however all my distribution are L3 switch to do inter-vlan routing.  So I plan to use only a transit vlan between MS to MX for routing.  Would like to get feedback if below setup and connectivity will work , as I did not see any document with similar topology to validate. I have 3 distribution segment in different buildings as in below picture.    Question1 : Should I use a single transit vlan between all the distribution switch stack to MX or can I have separate transit vlan between each distribution segment to MX?   Question2: For this 4-switch stack in main building, I use switch 1&3 uplink to MX1, switch 2&4 uplink to MX2 for HA. Is this connection valid? Because, Meraki document says each MS should connect to both MX, however they use only 2 switch in switch stack, they havent provide detail on what if the stack is of bigger size.      Thanks       ... View more

Hi @CptnCrnch  It is for 2 x Internet link load Balancing within a active MX device. ... View more

Hi @Ted_E , @cmr    Thanks for your responses. The intent is to have dual internet link load balancing using MX, however each ISP provide one leg to connect. Understand that stacking those switches do not make sense as we will configure different vlan for each ISP links. Have updated the topology as below. We will also be using internal firewall for lan traffic and all internet vlan will bypass internal firewall to MX.   ... View more

Hi,  I am new to Meraki and working on connecting MX250 to two ISP providers. Each ISP provides one leg connection, so I designed the topology as in this diagram, having a WAN transit switch stack using MS350-24. I read Meraki documentation, all the design topology shows ISP links directly terminating into MX devices, would like to check if this design will work for MX HA setup.   ... View more