Have large enterprise customer (100 remote sites) who is migrating from frame-relay to MPLS. Have a need to route all Internet-bound traffic from the remote sites to the HQ site to use the central firewall/proxy system. The traffic then routes back to the MPLS provider (via DS3)across the same circuit to the Internet connection also provided by the provider. The provider does not want the customer router to enable MPLS functionality.
I understand that the recommended approach is to either use two circuits or two subinterfaces in order to route traffic properly with the provider.
Are there any other options?