topic Re: MX84 WAN2 setup in Cloud Networking Platform

MX84 WAN2 setup

RGN — Tue, 31 Oct 2023 03:30:44 GMT

I have an MX84. ISP has provided multiple static public IP addresses.

I have WAN1 connected to the modem/gateway from ISP. All traffic bypasses modem/gateway, into MX85 through WAN1.

Is it possible to configure WAN2 with a second static public IP and have specific clients flow through WAN2?
The goal is the following: 3rd party compliance vendor wants to isolate specific web traffic.

Thanks!

Re: MX84 WAN2 setup

MerakiGnome — Tue, 31 Oct 2023 09:15:48 GMT

Hi @RGN - this configuration is indeed possible. Under SD-WAN and Traffic Shaping look for flow preferences. Here you can configure your source and destination (including ports) and specify which WAN port to traverse.

Re: MX84 WAN2 setup

aleabrahao — Tue, 31 Oct 2023 11:02:59 GMT

Refer the documentation.

https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Load_Balancing_and_Flow_Preferences#Enabling_and_Configuring_WAN_2

Re: MX84 WAN2 setup

RGN — Tue, 31 Oct 2023 15:15:40 GMT

Thank you for the info. Using the link provided by @alessandrodematos my layout looks like this:

I only have path going in and out provided by ISP. Still doable???

Re: MX84 WAN2 setup

aleabrahao — Tue, 31 Oct 2023 15:21:36 GMT

Yes, but keep in mind that it is the same ISP, if any type of failure occurs you will be left without access anyway. So I don't see any advantage in configuring the second link with the same ISP, it would make much more sense if you had a different ISP.

Re: MX84 WAN2 setup

RGN — Tue, 31 Oct 2023 15:24:31 GMT

For sure, having a second ISP would be the key factor, but limited at the moment. Fiber from ISP, existing equipment from ISP doesn't provide an extra WAN/Internet port from their equipment. Focus is more on isolating web traffic versus having redundancy with two ISP's.

Re: MX84 WAN2 setup

aleabrahao — Tue, 31 Oct 2023 15:28:43 GMT

I got it, and yes you definitely can try this way.

Re: MX84 WAN2 setup

RGN — Tue, 31 Oct 2023 15:37:26 GMT

Thank you, will share feedback later on.

Re: MX84 WAN2 setup

Philip D'Ath — Tue, 31 Oct 2023 20:16:35 GMT

>The goal is the following: 3rd party compliance vendor wants to isolate specific web traffic.

Check your compliance requirements - but if you need separation, you might need a separate MX appliance for reporting and auditing purposes.

Re: MX84 WAN2 setup

RGN — Wed, 14 Feb 2024 05:31:30 GMT

Summary on my results:
From ISP into an unmanaged switch.

From the unmanaged switch, one patch cable to WAN1, second patch cable to WAN2 on Meraki.

Each WAN with a static IP provided by ISP.

Designated a specific VLAN for WAN2 by way of traffic flow rules.

Thank you all for the help and advice!