Only a select few switch can handle NAT and that is then limited to the TCAM space they have.  A C1300 is too limited a switch to do NAT. I can perfectly understand if you use an upstream router for each ISP and they NAT to a private "WAN" space but then your MX will NAT again to the internal network, unless you place the MX'es as transparent (passthrough). I think you need to think your design through because it is making less and less sense 😉 ... View more

  Thank you Karstenl for sharing this.   I particularly like Option 6: Two MX, two ISPs (4), which ensures that there is a backup for each component (FAI, Switch and MX)     Pros: - redundancy and reliability. - minimum single point of failure.   Cons: - Requires physical intervention if a switch fails, as the ISP connection needs to be moved manually from the damaged switch to the working one. - Having two links from the ISP is not common and may not be feasible for all setups.   Despite these potential drawbacks, I believe the added redundancy makes this option the best choice. ... View more