MX85 - How to SNAT our LAN to other party subnet over transfer interface?

[PhilippGreindl]

Hello there,

we have a MX85 with different subnets. For simplicity I will just use one in my example.

The MX is installed in a data center where other partys are connected to.

We have a transfer interface with a static route to the other party.

Our subnet: 10.10.200.0/24

Transfer interface to other party: 100.64.26.1/30

Other party subnet: 172.16.23.0/24

Screenshot static route:

Now we want to SNAT our subnet 10.10.200.0/24 and mask it so it shows as 100.64.26.1./30.

That should be a pretty basic feature because others partys can't always work with our subnets (Duplicate subnets or compliance reasons).

But somehow I am unable to find it...

Thank you for you help!

Regards

Philipp

[alemabrahao · Accepted solution]

Source NAT is not support.

But maybe you can ask the Meraki support to see if they are able to enable it.

[CptnCrnch]

You could be using Site-to-Site VPN translations, but IIRC this is an AutoVPN only-feature.

[PhilipDAth]

You would need this to be connected to a WAN interface on an MX.  Additionally, that WAN interface would need to be able to get to the Internet otherwise it will be marked as down.

[PhilippGreindl]

Well that is underwhelming.

But thanks for your answers, we will try to solve this with a workaround.