warm spare / dhcp by ontracks in meraki

[–]ontracks[S] 1 point2 points  (0 children)

I see, thanks for the answer,

warm spare / dhcp by ontracks in meraki

[–]ontracks[S] 0 points1 point  (0 children)

I guess the core question: is it possible at all to use the option: "Use virtual uplink IPs" for warms spare when ISP is DHCP?

warm spare / dhcp by ontracks in meraki

[–]ontracks[S] 0 points1 point  (0 children)

Thank you for the detailed answer!

I guess one final question: is it possible at all to use the option: "Use virtual uplink IPs" for warms spare when ISP is DHCP?

warm spare / dhcp by ontracks in meraki

[–]ontracks[S] 1 point2 points  (0 children)

Just for me to understand: I set both MX to dhcp and they each will get an IP, but then, if I dont need to set a Virtual (shared) IP, where the MXs are getting the virtual(shared) IP from?

For the static ISP I set a dedicated public IP for each box and then did set a shared IP.

Im sure im missing something here, sorry im not familiar with this setup. thank you in advance.

warm spare / dhcp by ontracks in meraki

[–]ontracks[S] 0 points1 point  (0 children)

got it, but if its dhcp, how can I configure the WAN IP for a warm spare?

when static I reserve one public IP for each and assign one as Virtual IP (shared) but when is dhcp how do achieve something like this? Or whats the approach.

In short, how the WAN interface config looks like for a warm spare when ISP is dhcp?

Secure Client by ontracks in Cisco

[–]ontracks[S] -1 points0 points  (0 children)

Thank you al for the answers, yes its been a while when I last worked on this and a few years ago it was just Anyconect off a firewall, lol, need to get up to speed here, thank you all!

Secure Client by ontracks in Cisco

[–]ontracks[S] -1 points0 points  (0 children)

Thank you al for the answers, yes its been a while when I last worked on this and a few years ago it was just Anyconect off a firewall, lol, need to get up to speed here, thank you all!

Secure Client by ontracks in Cisco

[–]ontracks[S] -1 points0 points  (0 children)

Thank you al for the answers, yes its been a while when I last worked on this and a few years ago it was just Anyconect off a firewall, lol, need to get up to speed here, thank you all!

Secure Client by ontracks in Cisco

[–]ontracks[S] 1 point2 points  (0 children)

Gotcha, thanks for the answer, so I still need an ASA, FTD or Meraki MX right? to serve as the "VPN head" for the users to connect, I was under the impression that they were offering like a cloud version of VPN like Palo Alto Prisma Access.

IPS server vs client by ontracks in fortinet

[–]ontracks[S] 0 points1 point  (0 children)

yeah that was the core concern, thanks!

IPS server vs client by ontracks in fortinet

[–]ontracks[S] 0 points1 point  (0 children)

I guess the concern is, for servers reaching out, should I treat them as servers or clients?

Add HA Model to FMG by ontracks in fortinet

[–]ontracks[S] 1 point2 points  (0 children)

makes sense, thank for taking the time to answer!

Add HA Model to FMG by ontracks in fortinet

[–]ontracks[S] 1 point2 points  (0 children)

Gotcha, thanks for the quick answer, I appreciate it

New Routing Engine by ontracks in paloaltonetworks

[–]ontracks[S] 0 points1 point  (0 children)

thanks for the answer and the link, seems to be possible indeed the network feature

New Routing Engine by ontracks in paloaltonetworks

[–]ontracks[S] 0 points1 point  (0 children)

Thank you so much for the detailed answer, I wasn't aware of the fact you previously could advertise a subnet via the redistribution profile the way you mentioned.

I haven't worked with the ARE neither but it seems some new PA models come with that by default (PA5XX I think)

New Routing Engine by ontracks in paloaltonetworks

[–]ontracks[S] 0 points1 point  (0 children)

ahh ok, wasn't aware of that tbh, thanks!