vMX Interfaces Question

[NewMerakiGuy]

I installed new vMX on the AWS cloud environment. I'm trying to add second interface for the LAN network to connect a pc behind the firewall (as a LAN)  but I don't see any option so far to add second interface via AWS and I see only "Internet" port in the Dashboard.

Is it possible to have two interfaces on vMX ? if yes, please can you guide me to the instructions

[ww]

Is it running in nat mode?

https://documentation.meraki.com/MX/MX_Installation_Guides/vMX_Setup_Guide_for_Amazon_Web_Services_(...

[NewMerakiGuy]

Yes.

[ww]

I never used it, but this doc states its currently just 1 interface

https://documentation.meraki.com/MX/Other_Topics/vMX_NAT_Mode_Use_Cases_and_FAQ#FAQs

[MyHomeNWLab]

vMX can only have one NIC regardless of the mode.

[NewMerakiGuy]

@MyHomeNWLab  thanks for the feedback. So, the vMX capabilities are limited and it is not supporting standard firewall traffic inspection ?

[MyHomeNWLab]

First of all, you are selecting Limited NAT Mode.

The Limited NAT Mode (NAT Mode of vMX) comes with restrictions, as the name suggests.
For example, redundancy with DC-DC failover is not supported.

The One-Armed Concentrator does not have that restriction.

If we had no particular reason, we would choose the One-Armed Concentrator.

Instead of focusing on individual functional aspects, you might want to talk about what you want to do.

If we don't know what you want, we don't know if it is the right mode choice, or if Meraki should be chosen in the first place.

[NewMerakiGuy]

Hey @MyHomeNWLab  I just need to add additional interface for the LAN (internal network) on the vMX, but based what I see and what you mentioned, the vMX is supporting only one interface (Internet) and that's indicating the vMX is not supporting that, right ?

Also, within the AWS vMX setup, it is required the Private IP, therefore the Internet Interface has both Private and Public IPs.

[MyHomeNWLab · Accepted solution]

vMX only recognizes port for Internet port even if multiple vNICs are added.

Therefore, regardless of the mode, the NIC cannot be divided into Internet-side and LAN-side roles.

Even in limited NAT mode, all traffic is communicated through the Internet port.