MPLS connection between sites.

Greg_Gilbraith

I have an MPLS connection from my network to another site. How do I set up my Firebox to allow connections?

Greg_Gilbraith

Allowing the traffic is fairly simple - you can allow connections to or from interfaces, subnets, etc.

The tricky part is generally the routing. For best results, connect your MPLS router to a Firebox interface by itself, and the have a static route to the remote network through that router.

So if your firebox LAN network is 10.0.1.0/24, and the remote network is 10.50.1.0/24, you could conifgure one of the other Firebox interfaces with a subnet like 10.0.5.1/24, and give the MPLS router an IP address on the same subnet, 10.0.5.2.

Create a static route on the firebox for 10.50.1.0/24, with gateway 10.0.5.2. This tells the Firebox to send traffic for the remote subnet to the router at 10.0.5.2, and makes sure that connections from the remote network will come back from that router.