Hi,   Can one of you kindly answer my query regarding the MX250 HA setup in "routed-mode"?   We do have a dual hand-off model Internet link with /29 IP subnet for HSRP mode of fail-over from ISP. We would want to use the WAN ports to participate VRRP heartbeat packets to define the failover since the WAN1 & WAN2 be part of same broadcast domain and moreover ISP routers and MX WAN connections are a local LAN within Data Center.   Is that something possible in MX? If yes, should we proceed to use a VIP in WAN or not?   As a note, we had single LAN connections in each MX LAN ports as a downlink and they are effectively being used for VRRP but when the downlink goes down we end up facing Active/Active role for both MX kits. ... View more

In concentrator mode you only use the first WAN port, all traffic goes through this interface and back out of it.  So the MX sits as a spur off the LAN (but using it's WAN port) which for the 250 is the SFP+ socket. ... View more

When you open up the route table for your Spoke/Branch and set it to Sort By: Priority as shown in the screenshot below.   Is the default route with the type Meraki VPN: VLAN, above the default WAN route? It should be.   Then, if it is, is the icon status showing a green circle? In my screenshot it's showing the revolving wheel icon which basically means that the needed tunnel is not yet established or not working, so it would fall back to the default WAN route.   If it is green then all packets should be routed over the VPN. If not we'll have to troubleshoot further. ... View more