Hi All,
I am just starting in network and have a big task, migrate from Cisco ASA to Meraki MX84
here is my 1st question are public IP and wan supposed to be the same? or wan is my internal IP
General
Public IP 173.163.123.456
WAN
Status:
IP (Static) 173.163.123.456 OR my local firewall IP 192.168.123.456
Solved! Go to solution.
If it is a static IP you should have also gotten the following from the ISP:
If you don't have those I would recommend calling the ISP and asking for that information.
On the other hand if you do not have a static IP from the ISP then you would need to leave your MX WAN setting as DHCP.
Are you supplied with a static IP from your ISP? If you ware you would likely want to make sure your MX is set up in NAT mode and you would then use the static IP settings from your ISP to configure the WAN on your MX. (That would mean the static IP from the ISP is your public IP)
OK, lets say that the public IP from the ISP is 173.163.123.456 then
General
Public IP 173.163.123.456
WAN
Status:
IP (Static) 173.163.123.456
will be correct, thanks !!
If it is a static IP you should have also gotten the following from the ISP:
If you don't have those I would recommend calling the ISP and asking for that information.
On the other hand if you do not have a static IP from the ISP then you would need to leave your MX WAN setting as DHCP.
Now I have 10+ Vlans on my Cisco Core
Do I need to create the same Vlans on the MX or they will be static routes
or since the core will be directly connected to the MX there is no need
If your core Cisco switch has a default route pointing at the ASA's "inside" (LAN) IP, then you can replicate that on the MX using the "use a single LAN" option. You would create a "Local LAN" that matches the ASA's inside IP and then create static routes for all of your internal subnets and put the Cisco switch IP as the next hop.
This is my cisco config
-------------------------------------------------------------
router eigrp 100
network 192.168.23.0
network 192.168.253.0
network 192.168.254.0
redistribute connected
passive-interface Vlan254
eigrp router-id 192.168.16.1
!
ip default-gateway 192.168.23.254
---------------------------------------------------------------