IDS on Meraki MX in bridge mode and tagging traffic (trunk)

tonyavk
Here to help

IDS on Meraki MX in bridge mode and tagging traffic (trunk)

Hello Community! 

 

I have few internet uplinks that have own firewalls and sdwan cpe that needs public IP but I want to have more visibility on traffic and thinking to use Meraki MX with advance security license in bridge mode to have passive IDS.

I understand how it works in theory with one internet feed but is it possible to connect thought meraki multiple internet uplinks? 

 

It will be like: switch trunk port -- mx wan port -passive IDS- mx lan port -- switch with trunk mode. 

 

Will it work ? 

tonyavk_0-1745372506652.png

 

2 Replies 2
alemabrahao
Kind of a big deal
Kind of a big deal

It is not possible to configure the WAN interface in trunk mode.

So I'm afraid it won't work.

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.
PhilipDAth
Kind of a big deal
Kind of a big deal

https://documentation.meraki.com/MX/Networks_and_Routing/Passthrough_Mode_on_the_MX_Security_Applian...

 

"VLANs cannot be configured. The MX/Z1 will act as a bridge between the Internet and LAN ports"

 

"Tag the IP address configured on the WAN interface of the MXs in passthrough mode with the appropriate VLAN ID if the upstream port is expecting only tagged traffic."

Get notified when there are additional replies to this discussion.