Why would you need to provide a public IP? You could create a link network between the Firewall and the Switch, set the firewall as the default gateway, and restrict what the switch can access on the firewall.
Wouldn't that work for you?
I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.
Please, if this post was useful, leave your kudos and mark it as solved.