MX port

[RahulPrasadh]

Is it possible to assign a Public IP address to port 3 of Meraki router which is under VLAN interface and how can we configure?

[RWelch · Accepted solution]

You can setup Port Forwarding and NAT Rules on the MX:

https://documentation.meraki.com/MX/NAT_and_Port_Forwarding/Port_Forwarding_and_NAT_Rules_on_the_MX

[Brash]

Public IP's are assigned only to the WAN ports on the MX.
You cannot assign IP addresses directly to LAN ports.

As said above however, you can configure Port Forwarding or 1:1 NAT rules under "Security & SD-WAN" -> "Firewall"

[PhilipDAth]

If you are trying to use a routed block of public IP address space, then you can go to Organisation/Early Access and enable "NAT Exceptions with Manual Inbound Firewall".

https://documentation.meraki.com/MX/Networks_and_Routing/NAT_Exceptions-No_NAT_on_MX_Security_Applia...

[GIdenJoe]

You can technically put a public IP there as long as it is not member of a subnet already on your WAN interfaces.  You will however not be able to NAT on your MX towards that public IP.  Your internet traffic will not use this interface unless having specific routes via a next hop on that subnet.  The rest will just go out the WAN1 or WAN2 interface.

If you mean to use public ip block behind your MX to save on IP's upstream then you will need to put a router in front of your MX that can NAT separately from your MX.

[henrry81]

Maybe using Port Forwarding, 1:1 NAT rules, or NAT Exceptions could be a way around it. Just gotta make sure you've got the right network setup and routing config.