MX65 Connect to non Meraki firewall or router

Solved
j_e_m_67
Here to help

MX65 Connect to non Meraki firewall or router

Hi, new to Meraki here. I am needing to connect an MX65 to another network device at the site. It is a layer 3 device which I will need to route some networks over, not technically a WAN and not an Internet connection. Would I still use an uplink port for this? 

 

Thanks!

jem

1 Accepted Solution
alemabrahao
Kind of a big deal
Kind of a big deal

In Meraki you do not configure IP on a physical interface but a logical interface (an SVI in this case, vlan, etc.)

 

https://documentation.meraki.com/MX/Networks_and_Routing/Configuring_VLANs_on_the_MX_Security_Applia...

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.

View solution in original post

11 Replies 11
alemabrahao
Kind of a big deal
Kind of a big deal

Yes you need to connect the WAN port, Meraki has cloud management, and needs to have an internet connection to register in the dashboard.

 

https://documentation.meraki.com/MX/MX_Quick_Start

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.
j_e_m_67
Here to help

Sorry, I should have mentioned it does already have an Internet connection on Uplink port 1. I am needing to add connection at the local site.

alemabrahao
Kind of a big deal
Kind of a big deal

Take a look at the documentation.

https://documentation.meraki.com/MX/Networks_and_Routing/MX_Routing_Behavior

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.
j_e_m_67
Here to help

Thanks for this documentation that is very helpful! 

cmr
Kind of a big deal
Kind of a big deal

You can use the LAN ports and simply set a static route to the next hop (the other layer 3 device).

If my answer solves your problem please click Accept as Solution so others can benefit from it.
j_e_m_67
Here to help

cmr, I don't see where to change a LAN port to a routed port where I can set an IP address on it. 

cmr
Kind of a big deal
Kind of a big deal

The router's IP address is available on all LAN ports

If my answer solves your problem please click Accept as Solution so others can benefit from it.
alemabrahao
Kind of a big deal
Kind of a big deal

In addition to @cmr  said.

Here are the steps to set a static route on your MX:

 

Navigate to Security & SD-WAN in the Meraki dashboard.
Select Addressing & VLANs under the Configure tab.
Scroll down to the Routing section.
Click on Add a static route.
Enter the Name, Subnet, and Next hop IP.


The Subnet is the network you want to route. The Next hop IP is the IP address of your Layer 3 device. This will allow the MX to route traffic to the Layer 3 device.

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.
j_e_m_67
Here to help

Thank you I am still confused about where to set the interface address for the intermediate network for connecting to the new layer 3 device. 

alemabrahao
Kind of a big deal
Kind of a big deal

In Meraki you do not configure IP on a physical interface but a logical interface (an SVI in this case, vlan, etc.)

 

https://documentation.meraki.com/MX/Networks_and_Routing/Configuring_VLANs_on_the_MX_Security_Applia...

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.
j_e_m_67
Here to help

Okay, got it thanks!

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels