Building on @ww's answer; in short, you need to purchase an Internet circuit capable of supporting HA. A single PPPoE circuit can not support HA. You'll need the provider to: Give you a circuit with at least a /29 of address space (and it won't be using PPPoE), which you'll need to plug into a switch (unless the provider supplies one in their CPE), and then plug both MX in it. This is more of a "business grade" service and will almost certainly cost a lot more than what you are paying for now. Get a pair of PPPoE circuits. You won't have inbound failover for things like NAT, but AutoVPN and client VPN (using DNS) will be able to failover
... View more