LAN VLAN AND MPLS

[WALVAREZ]

Hello   Guys,  I have a topology of MPLS ( two routers in VRRP), one switch to VRRP, and one Cisco Meraki MX67 whit one Internet channel in the WAN port and MPLS Channel in PORT 2 interface IP (172.19.236.214) VLAN 118,  in my LAN  172.19.249.128/27 reach the network  172.18.10.10/24  up, all fine,  but since the ips range has been exhausted ( 172.19.249.128/27 only 30 ips), I have decided to change to one with a 24 mask ( 10.67.103.0/24).

According to the graph,  Is there any way to have network 10.67.103.0/24 and from there reach network 172.18.10.0/24 without making configurations in the MPLS routers. That is, with some type of masking or some internal NAT technique in the Meraki MX67?   For example,  the ip 10.67.103.66 is routed with ip 172.19.236.214 and reaches the network 172.18.10.0 or no is possible?

[Brash]

As far as I'm aware the MX can only perform outbound NAT when going from LAN to WAN.

If I'm understanding correctly, your main issue is network traffic routing across the MPLS towards the new LAN.
If there is a default route set already (as the internet exit point is on the MX67), this shouldn't be an issue.
If there's no default route towards the MX, you would need to add a route somewhere to send the traffic back.

[Badr-eddine · Accepted solution]

Hello, 

You can implement the solution you mentioned, which involves NATing the inside subnet 10.67.103.0/24 to the IP address 172.19.236.214. Ensure that PORT2 is configured as the WAN port, as by default, Meraki performs NAT for traffic going outside using the WAN interface.

Please let me know if this resolves your issue.

[WALVAREZ]

Hello, I was analyzing and  the network announced in the MPLS is 172.19.249.128/27 as the  graphic show, so I need to make NAT Inside over any ip in this range,( for example: 10.67.103.0/24 -->  172.19.236.128/27) in order to be able to go out with that IP to the MPLS network.  Is this configuration possible or what should I modify to have communication with the server 172.18.10.10 in the MPLS and also have Internet through the WAN1 port??  Thanks  for yout reply.