Meraki MX multiple /29 Public Blocks

[Sarv]

I just want to validate this configuration will work on the MX (latest firmware).

We have a need to get a second /29 public ip block from the same (Primary) ISP.  The MX will have a public IP on its WAN interface from the first /29 block. The 2nd /29 block from the same ISP will be used for NAT forwarding. Is this a valid configuration that will work with the MX (I know it works with other FW's), this second /29 will be not be contiguous with the first /29 block.

I believe this configuration will work but wanted to ask the community if there are any gotcha's.

Thanks

Sarvjit

[Bruce]

Yes this should work fine. Note that the PAT that The MX performs will always use the address assigned to the WAN interface. The addresses in the additional /29 can be used to 1:1 NAT, or 1:many NAT configured through the Dashboard.

[Sarv]

Thanks Bruce

[KarstenI · Accepted solution]

As already mentioned, no problem with this setup. If your MX is the only device to use this IP subnet, you can ask the ISP to route it to your MX IP. It's slightly more secure and you get one more usable IP.

[Sarv]

Thank you.