This is very helpful. Yes, the /26 is a public range, so I need a routable appliance without NAT. Talking with Meraki support they mention Beta MX15 as well, so as soon we have a chance we will probably test it on our environment. The idea is to give some internal machines real public IPs. We are teaching college hires what they have to do to secure an appliance when it is facing the internet and properly route when you they are connected via two arms, and give them the public IPs is a requirement for the program.   Back to your notes. Can I do 1:1 NAT like you did 100.100.33.194:100.100.33.194 on MX14 or should I be on MX15 Beta?   Really appreciate the community insight on this.   Best Regards ... View more