Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About LuigiJuve
LuigiJuve
Here to help
Member since Oct 27, 2019
Aug 17 2020
Community Record
12
Posts
0
Kudos
0
Solutions
Badges
Jul 6 2020
9:38 PM
thank you.. I was using this guide when setting these up. https://www.willette.works/mx-warm-spare/ not all my setups have this dedicated VLAN approach, but most do. I know understand it is kind of pointless and will remove this for future deployments. As for the direct connections between MX units I will test more but it seems to work well and always worked well even with the LAN based failover recommended by Meraki..
... View more
Jul 6 2020
9:24 PM
jdsilva, so what do you mean my 15 installations are not working please explain.. In my setups I am not using Meraki switches but either Arista or Cisco Nexus not using Stacking but using MLAG or VTP. Sure I get it, you do not need a set a VLAN to determine the heartbeat because VRRP is used on all VLANs sure but what if you connect the MX pairs to the south facing switches with only certain VLANs only and not the one VLAN you set for the heartbeat like in my example.. I know Meraki removed the peer link between MX HA pair but no one can explain to me why this is bad and why the failover will not occur when it happens.. You seem to know all the answers so explain it.
... View more
Jul 6 2020
12:18 PM
Like I said I use a direct link between the two MX units. I specified a direct VLAN for only that link and setting it was the native vlan trusting all vlans to be used as the heartbeat. maybe it only works logically so be it but it works for over 15 setups flawlessly once I did it this way and the LAN base links if one of them goes down and helps prevents the Master to Master HA issues.. Try it, if you don't like so be it figure it out another way.
... View more
Jul 4 2020
11:31 AM
does the LTE failover only work when the MX WAN1 and WAN2 physical links are down only? I am seeing weird instances when the WAN links can still connect and ping their gateway to their connection to the cable modem or circuit ISP router that is still online but the internet peering next hop is down. From there it does not failover to the LTE. what steps does the MX try before it determines this? Does it do some sort of SLA?
... View more
Jul 3 2020
12:56 PM
Jul 3 2020
12:48 PM
I tested many scenarios but the best to get this to work is to have a designated vlan set on the MX for the heartbeat for example vlan 1111 ip 1.1.1.1/30. then connect a cable between each MX for example MX1-e3 to MX2-e3 and set it as a trunk with the native vlan 1111 and allow all vlans (do not prune or pick any other vlans specified in your MX) then your connections from the MX to the Skitch facing switches. Also if you are not using a Meraki switches like Cisco Catalyst or Arista then I set the Spanning of tree cost for the primary port to be 100 and the second link to the MX to 200 MX1-E4 —> SW1-E4 MX1-E5 —> SW2-E4 MX2-E4 —> SW1-E5 MX2-E5 —> SW2-E5
... View more
Mar 25 2020
1:32 PM
to be clear in my data centers I an MX configured as one-armed VPN concentrator mode connecting eBGP to my internal network. I am trying to understand on the branch side with my MX configured as a spoke VPN here is a diagram.
... View more
Mar 25 2020
8:07 AM
I have a new site I plan to build out that is huge and needs 10GB of bandwidth. I have all my IDF L2 switches connect to the L3 pair that have all my SVIs on a 172.30.128.0/21 le 24. I want to install Palo Alto firewalls to handle my outbound 0.0.0.0 and NATing but want to still use a Meraki MX250 for the VPN trusted traffic and auto VPN SD-WAN in a bgp DC to DC failover I have implemented. usually I build out sites with the MX being the main source of LAN SVI and routing and put it between Layer 2 switches and the edge routers. the MX has all my different VLANs and I choose what goes through the VPN and has the ARP table. in this scenario attached I do not want that. how do I point the routing to work this way and choose what networks route over the SD-WAN autovpn?
... View more
Oct 27 2019
9:52 AM
Has anyone configured a MX one-armed VPN warm spare with BGP in DC to DC failover design? I have a currently a single MX one-armed VPN in a DC to DC failover with BGP peering to my data center at each location but was wondering if I did a warm spare would work. A MX one-armed VPN warm spare is setup with each unit with it’s own IP so I am not 100% sure how the bgp peering would work.
... View more
© 2024 Cisco Systems, Inc.
