Hi! I'm trying to move an older set of manual routes and VPN from a super old Cisco ASA to a Meraki MX100. The Site-to-Site VPN works fine but for security purposes it's being requested that I NAT our traffic that is accessing this specific traffic. I know within a Sophos XG135 I can simply check a box and provide the public IP we would use then what we want it converted to. However, on the MX100 I am seeing the 1:1 and 1:Many options within the Firewall settings. I'm having a bit of an issue seeing how I'd map out the ruling for this situation. Would "Public IP" be the IP I want to use for this traffic or the external IP for this tunnel? Also is "LAN IP" here what's being used for the tunnel? Should I be using 1:Many - Public is the external IP used on the tunnel and LAN would be internal subnets that I want to access this route correct? I apologize if this seems like a dumb question, I would just like to wrap my head around it since it's a tad different from how I usually set this up. Cheers! ... View more