Add MS Switch and MR AP with Fortinet as SDWAN Router Appliance

[meraki-newbie]

Dear All,

We want to deploy 

MR 46 AP > MS 350 ACCESS SWITCH > MS 410 CORE SWITCH > SDWAN Router Fortinet 600E

There are several question, :

1. What is the best possible, using MS 410 CORE or SDWAN Router Fortinet 600E as user+management gateway ?
2. If we could implement this topology above, is that NAT will be performed at Fortinet level ? due to there are no MX SDWAN Appliance.. so all MS and MR switch management will be NAT at Fortinet ?

thank you

[Brash]

It's difficult to comment directly on your design based only on a topology but I'll try to answer your questions.

1. You can use either the MS410 or the Forti as your vlan gateways. It really depends on how much inter-vlan traffic you have, and how much security you want to place between them.

Running all traffic through the Forti will provide better security options but may limit your inter-vlan throughput compared to the switch.

2. Yes, NAT for all network traffic would be performed on the Forti. The management network gateway for the MS350 and AP can be on the MS410 or the Forti (see above) but the management IP for the MS410 must have the gateway of the Forti.

Personally (assuming a small to medium sized office with SaaS workloads), I would probably use the Forti as the VLAN gateways for both data and MGMT traffic.

[meraki-newbie]

Alright that's very clear.

but for another question is, could we configure interface vlan and default route from the MS410 to Forti, using Local Status page ? due to our ISP installation is on going

[Brash]

You can only configure the MGMT IP address (or DHCP if preferred) and the MGMT vlan of the MS410 via the local status page.

Essentially the bare minimum to get it connected to the dashboard where it will pull all of the rest of the config.