Adding devices with different IP to MX64

Solved
GeoD
Conversationalist

Adding devices with different IP to MX64

I need to add some cameras with IP address of 10.0.0.5, 10.0.0.23 and 10.0.0.29 to my MX64, I think I want to set up a VLAN and some port forwarding, but nothing I am doing is working. I need some guidelines.

1 Accepted Solution
MerakiDave
Meraki Employee
Meraki Employee

You'll probably want to go to the Security Appliance > Configure> Addressing and VLANs page and run standard NAT mode, track by MAC (both the defaults) and then enable VLANs, click on your existing VLAN (should be 192.168.128.0/24 by default) and change it to 10.0.0.0/24 with an MX IP of 10.0.0.1 and VLAN ID 1 for example.  Unless you already have other VLANs configured then set the VLAN ID accordingly.  That should also enable DHCP on that VLAN automatically, confirm this on the Security Appliance > Configure> DHCP config page.  You should be able to connect to a wired port and get a DHCP address to confirm, then connect the cameras and ping them.  No need for per-port VLAN configuration unless you specifically need that, and by default all ports will be enabled, trunked, with native VLAN 1 (default).  Finally if you need specific port forwarding rules, that's on the Security Appliance > Configure > Firewall page.

 

You can always open a Meraki Support case for extra configuration assistance or any speed bumps you hit.

Here are some docs for more info:

https://documentation.meraki.com/MX-Z/Networks_and_Routing/Addressing_and_VLANs

https://documentation.meraki.com/MX-Z/DHCP/DHCP_Services

https://documentation.meraki.com/MX-Z/NAT_and_Port_Forwarding/Port_Forwarding_and_NAT_Rules_on_the_M...

https://documentation.meraki.com/MX-Z/Firewall_and_Traffic_Shaping/Firewall_Settings

 

View solution in original post

3 Replies 3
MerakiDave
Meraki Employee
Meraki Employee

You'll probably want to go to the Security Appliance > Configure> Addressing and VLANs page and run standard NAT mode, track by MAC (both the defaults) and then enable VLANs, click on your existing VLAN (should be 192.168.128.0/24 by default) and change it to 10.0.0.0/24 with an MX IP of 10.0.0.1 and VLAN ID 1 for example.  Unless you already have other VLANs configured then set the VLAN ID accordingly.  That should also enable DHCP on that VLAN automatically, confirm this on the Security Appliance > Configure> DHCP config page.  You should be able to connect to a wired port and get a DHCP address to confirm, then connect the cameras and ping them.  No need for per-port VLAN configuration unless you specifically need that, and by default all ports will be enabled, trunked, with native VLAN 1 (default).  Finally if you need specific port forwarding rules, that's on the Security Appliance > Configure > Firewall page.

 

You can always open a Meraki Support case for extra configuration assistance or any speed bumps you hit.

Here are some docs for more info:

https://documentation.meraki.com/MX-Z/Networks_and_Routing/Addressing_and_VLANs

https://documentation.meraki.com/MX-Z/DHCP/DHCP_Services

https://documentation.meraki.com/MX-Z/NAT_and_Port_Forwarding/Port_Forwarding_and_NAT_Rules_on_the_M...

https://documentation.meraki.com/MX-Z/Firewall_and_Traffic_Shaping/Firewall_Settings

 

GeoD
Conversationalist

Thank you

Uberseehandel
Kind of a big deal

Hi

 

Be aware that 10.0.0.0/8 is the default VLAN for the SSID WiFi guest users connect to; guests are isolated from each other. You may find it simpler to use a different VLAN for the CCTV devices if you are likely to use a WiFi guest network.

 

Robin St.Clair | Principal, Caithness Analytics | @uberseehandel
Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels