WAN Configuration

[TonyBoy]

Hi All,

I am just starting in network and have a big task, migrate from Cisco ASA to Meraki MX84

here is my 1st question are public IP and wan supposed to be the same? or wan is my internal IP

General

Public IP  173.163.123.456

WAN

Status:

IP (Static)  173.163.123.456  OR my local firewall IP 192.168.123.456

[MacuserJim]

Are you supplied with a static IP from your ISP? If you ware you would likely want to make sure your MX is set up in NAT mode and you would then use the static IP settings from your ISP to configure the WAN on your MX. (That would mean the static IP from the ISP is your public IP)

[TonyBoy]

OK, lets say that the public IP from the ISP is 173.163.123.456 then

General

Public IP  173.163.123.456

WAN

Status:

IP (Static)  173.163.123.456 

will be correct, thanks !!

[MacuserJim · Accepted solution]

If it is a static IP you should have also gotten the following from the ISP:

• Subnet mask
• Gateway
• Primary DNS
• Secondary DNS

If you don't have those I would recommend calling the ISP and asking for that information. 

On the other hand if you do not have a static IP from the ISP then you would need to leave your MX WAN setting as DHCP.

[TonyBoy]

Now I have 10+ Vlans on my Cisco Core

Do I need to create the same Vlans on the MX or they will be static routes

or since the core will be directly connected to the MX there is no need

[MRCUR]

If your core Cisco switch has a default route pointing at the ASA's "inside" (LAN) IP, then you can replicate that on the MX using the "use a single LAN" option. You would create a "Local LAN" that matches the ASA's inside IP and then create static routes for all of your internal subnets and put the Cisco switch IP as the next hop. 

[TonyBoy]

This is my cisco config

-------------------------------------------------------------

router eigrp 100
 network 192.168.23.0
 network 192.168.253.0
 network 192.168.254.0
 redistribute connected
 passive-interface Vlan254
 eigrp router-id 192.168.16.1
!
ip default-gateway 192.168.23.254

---------------------------------------------------------------