Meraki Mx85 How to enable NoNat

[Mytestcase]

Hello Team,

I am currently configuring a Meraki MX85 to function as a simple router. The setup includes a /30 public IP on the WAN side and a /29 public IP block on the LAN side.

My understanding is that in routed mode, the MX typically performs NAT from the LAN/VLAN side to the WAN IP.

However, in this case, I intend to use the MX85 without NAT. I want to assign a /30 public IP to the WAN1 port and use the /29 public IP block on the LAN side, which will connect to my router and SD-WAN device.

Could you please advise on how to disable NAT on the MX85 in this configuration?

Thank you,

Sateesh Billur

+91 9945789689

[RaphaelL]

Organization -> Early Access : 

Or Contact Support

[alemabrahao]

Take a look at this.

https://documentation.meraki.com/MX/Networks_and_Routing/NAT_Exceptions-No_NAT_on_MX_Security_Applia...

[PhilipDAth]

Being a /29 - I think a better solution is a little trick where you create a 1:1 NAT for the public IP addresses, where you use the public IP address as both the source and destination.

Below is an example I have configured.

I prefer this approach because it works with all Meraki features, while NO-NAT mode disables certain things (like AnyConnect).

[Mytestcase]

Hi Phillip, I will check this option and update you or here. Thanks for the information. 

[GIdenJoe]

Hehe, I wasn't aware you could perform an "identity NAT" on MX'es.  Nice to know!