I'm close to moving to Meraki as our primary firewall solution, but there's one feature holding us back. We need to be able to NAT a group of internal IP's (preferably a Group) that are destined for a certain protocol/port to a single IP. There doesn't seem to be an ability to do that currently and was wondering if that is something Meraki would be able to do in the future?
You are looking for SNAT, which Meraki can't do for some reason even though most $100 firewalls can do it. We are considering leaving Meraki because of this. It makes it really difficult to do IP allow-listing because your guest network goes out the same IP as your corporate network. It's embarrassing that this hasn't been implemented yet.
It's so weird that Meraki has made so many strides on the switching, routing and VPN side and left their firewalling features below even basic. It's clear the only usefulness of their MX series is in site-to-site connectivity via SD-WAN/VPN.
Hi John. I hope Meraki will reply to limit of SNAT. I have the same issue with routing and unfortunately Meraki is a very basic device. I was told by Meraki support to achieve a separate IP presentation by creating a separate WAN interface from my WAN IP subnet. This approach is quite unsustainable making the whole hardware and availability setup a nightmare.
Get notified when there are additional replies to this discussion.
