MPLS through DMZ zone...

[fdetoma]

Hi,

we're creating this firewaaling scenario:

Inside Network -> L3Switch -> Firewall -> Outside -> ISP Router               (for Internet traffic)

                                                         |____>   DMZ->      MPLS ISP Router     (for MPLS traffic)

In this case, we must set Core Switch default route to Firewall inside Interface;

Firewall default route to ISP Router's Ip addres, via Outside interface;

all MPLS remote network route to MPLS Router's IP addres, via DMZ interface.

So, we'll be able to apply ACL also to/from MPLS traffic, if needed.

We think that this routing scenario works regularly,

Correct..?

Thanks!

[Flavio Miranda]

Hi,

 Why not?  I dont see any problem with that. 

[fdetoma · Accepted solution]

Hi,

I suppose..,

it was only for project "certainty"...!

Thanks!