IP Obfuscation for Guest VLAN

[Vaibhav Vishnoi]

Hi Experts - need your advice on following situation.

We need to create a GUEST VLAN in our Meraki Setup, and my project manager requesting if we can obfuscate the public IP for Guest users.

Is there a possibility with a setup where we have only Meraki MS Switch and Meraki WAPs .. uplink firewall is not from meraki.

Please let me know.

[aleabrahao]

What do you mean with obfuscation? Could you please explain it better?

[Brash · Accepted solution]

There's really no way to do this with the Meraki gear.

Users will always be able to lookup their public IP address by going to a page like Instant IP Address Lookup (whatismyipaddress.com)

The only options that come to mind are:

• Tunnel all traffic to a SaaS gateway/VPN (Cisco Umbrella, ZScaler, Cloudflare etc.) so that their public IP is what will show, not your one.
• ISP configured CG-NAT, in which your outbound IP address will actually be a private IP NAT'd to the ISP's public IP.

That being said, I don't think either of these options are justifiable for that specific purpose alone.

[Vaibhav Vishnoi]

Thanks Brash - You are correct, I have done Obfuscation using the mentioned options. Was just wondering if Meraki has any magical feature. Thanks so much for the time and updating the answer. Much Appreciated.

[DainBrammage]

Why does a project manager have any say at all.😁 Foe what reason would you want to hide their egress point to the Internet? If the circuit is also used for your corporate /business traffic then you are far better served installing a local Internet egress circuit on an MX or some other gateway that serves GUESTS only, IMO