Hi guys Thank you for your answers, that has already helped me. On the WAN side I have an EdgeRouter at ISP 1. Currently there is only one port active but I can call the ISP and have a second port activated. ISP 2 has only provided me with a cable modem, I have to work with a WAN switch there. At ISP 1 I have 8 IP addresses (/28), ISP 2 provides me only one usable IP address (/30). So I also have to take care of it and make a phone call. Connection from MX to MS: Should the links be aggregated or should I configure it as individual links? @PhilipDAth The MX100 are used for inbound NAT as well as for client and site-to-site VPN. By outbound NAT do you mean the setting Security appliance -> Traffic shaping -> Flow preferences -> Internet traffic? There are some devices that should only communicate to the outside via a special ISP.(for reasons of upload speed) So yes, 2-3 settings will certainly be made here. I am switching from Sophos UTM220 (EOL) to Meraki and want to map the configuration to the Meraki firewall 1:1 before putting it into operation.
... View more
