MX100 & Multiple WAN IP's?

[wfurgason]

I am trying to find out if it is possible to configure the MX100 to have multiple WAN IP's on its internet Interface.  I'd like to map each VLAN to its own WAN IP so that I can have different DNS filter policies per VLAN.

WAN IP: 222.22.2.20 => VLAN network 192.168.22.0/24

2WAN IP:111.11.1.10 => VLAN network 192.168.11.0/24

Can this be done on an MX100 (only one internet uplink port)

Maybe using a 1:Many NAT configuration?

[Raj66 · Accepted solution]

The MX100 comes with an Internet port and a dual purpose port (port 2 can be used as an Internet port or a LAN port; This setting needs to be changed from the local status page under the configure tab).

So, one way I can see you achieve this is by applying those two IPs to two uplinks respectively and then configure flow preference so that VLAN 2 will use WAN IP 2 while VLAN 1 will follow the default WAN IP 1

https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Load_Balancing_and_Flow_Preferen...

[PhilipDAth]

>I'd like to map each VLAN to its own WAN IP

On the whole no.  The only special exception is what @Raj66 has mentioned, which would let you configure a second WAN port and an IP address on that and use flow preferences to direct specific VLANs out specific WAN ports.

https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Load_Balancing_and_Flow_Preferen...

But on the whole, unless you only have two WAN IP addresses, this wont be a solution.

[whistleblower]

so it`s not possible to use a public IP-address (- which is not configured as a WAN-IP) for local-LAN -> Internet PAT as a whole?!

[cmr]

@whistleblowerthat is correct, you can only do 1:1 mapping, no PAT other than the interface IP