Hi, is it possible to let guest users connected to MR33 to use another external IP address. I have a /27 external (WAN) net. I have done it on other firewalls using snat, but i cant find snat on the MX64 og MX65, its the latest firmware.
I understand you have similar requirement.
Pls check the following communication.
My recommendation would be connect a second WAN to the MX, then setup a flow preference to route guest VLAN traffic out that WAN2 connection with a different public IP.
here's a pic of how we have our flow preferences setup.
SD-WAN & traffic shaping /
Global Preferences / Primary Uplink WAN1
Flow Preferences / add the VLAN Subnet(s) (attached to SSIDs) =Preferred uplink WAN2
okey, but since local lan is 10.10.10.0 /24 and wireless guest with Meraki DHCP is on 10.0.0.0 /8 then i should make 10.0.0.0 /8 as primary uplink and use flow preference on 10.10.10.0 /24? Will that work? Is there any way to setup geust wireless to use anything else than 10.0.0.0 /8
Do you have 2 separate WAN connections.. or are you trying to use 1 WAN with a block of public IP's?
Here's how I'm doing it.. with 2 WANs
Keep in mind that the flow preferences are just that: preferences. In case of issues with one of the WAN links it will still failover to the other.
Imo there's no way to do this, at least not with the default features available in dashboard. Unfortunately 1-1 NAT also doesn't help as source IP for outgoing traffic is still NATed to the MX IP. If I were you I'd reach out to Meraki helpdesk to see if any hidden feature could be enabled. If not, definitely make a wish.