Thanks for quick response. Let me add more details. we are implementing MX105 as one arm vpn concentrator. I found a documentation https://documentation.meraki.com/MX/Deployment_Guides/VPN_Concentrator_Deployment_Guide   look at Appendix-1, which says An MX Security Appliance operating in one-armed concentrator mode sends and receives traffic on a singular interface. This interface will always be the the first Internet or WAN port on the unit. A secondary port is not supported when deployed as a VPN concentrator.   Does that mean load sharing using WAN2 interface is out of the picture now.   Thanks ... View more

Thanks for quick response. Let me add more details. we are implementing MX105 has one arm vpn concentrator. I found a documentation https://documentation.meraki.com/MX/Deployment_Guides/VPN_Concentrator_Deployment_Guide   look at Appendix-1, which says An MX Security Appliance operating in one-armed concentrator mode sends and receives traffic on a singular interface. This interface will always be the the first Internet or WAN port on the unit. A secondary port is not supported when deployed as a VPN concentrator.   Does that mean load sharing using WAN2 interface is out of the picture now.   Thanks ... View more

Bruce,   I have a question regarding link aggregation. we are setting up s2s vpn using MX105, which has dual WAN connection. we are planning to put MX105 behind our company firewall and MX will be using our company owned public IP address space instead of connecting directly to ISP. since we are planning to use both WAN interface, will MX105 allow as to use two different IP Addresses from same subnet? for example lets say we have 190.100.100.0/24 block which lives on firewall on mx wan1 - I would assign 190.100.100.10/24 with gateway of 190.100.100.1 on mx wan2 - I would assign 190.100.100.11/24 with gateway of 190.100.100.1  Would MX105 allow this configuration?   if not can we bundle WAN1 and WAN2 in portchannel of some sort and assign single ip address.   thanks in advance.   let me know if I need to post this question somewhere else. ... View more