Hello All We are in the process of switch over to Meraki. I have our first phase in testing currently for Switches   What we are looking to do is add an MX250 Firewall to this phase, and are looking at putting between our Core Switches MX425-32 and our current Watchguard  FW. The WG is currently set up with several interfaces 2 interfaces are ISP connections ( one main and 2nd as back up if 1st fails- we also use the 2nd connection for guest connections more on that later). The other interfaces are Gateway static IP's for 3 of our Vlans - these will be moved away from the WG onto the Core switch which will be doing All layer 3. So the WG will be our main ISP connection which will then connect to the MX250 WAN 1 port.  Wan 2 port on MX250 will be statically assigned and connected to the 2nd slower ISP connection.   I have the routing figured out for the main ISP connection for our network between the MX and WG the WG IP on a trusted interface is 10.75.98.10/29 MX250 has Vlan97 set with IP 10.75.98.14 as its a /29 subnet Core SW has Vlan97 set with IP 10.75.98.9 MX has reverse route to 10.75.98.9 for required subnets Core SW has route 0.0.0.0/0 to 10.75.98.10 This should give required Vlans access to the internet via MX then to WG then to ISP and visa vera   Now for the 2nd Wan connection, we want to use this as our Guest internet connection so if someone connections to our Guest WiFi on our AP's they should get an IP address via the Guest Vlan which again is set in the core layer 3 switch ( will set DHCP on the core switch) and then is routed to the MX to use the 2nd Wan ISP connection this is where I'm getting confused for the routing as we only need the guest VLAN to use the 2nd Wan connection on the MX250   Hope I explain clear enough for you 🙂 And thanks in advance for the help /suggestions 🙂   ... View more