Hi Folks -
Our client is getting an MPLS set up. Normally we have had clients use MPLS for their Site-to-Site connections, and then have a distinct internet connection. So you would go Internet through an ASA, while inter-LAN goes through a L3 switch, which is connected to the MPLS. No worries.
However, this client is going to use the MPLS connection for both internet and inter-LAN connections, including VOIP traffic.
From our discussions with the ISP, it sounds like they expect us to do an 802.1Q trunk line to their MPLS router.
The client has static external IP addresses that need to be available for such things as inbound email to an exchange server, etc. They don't want to lose the security of the firewall on the internet connection.
How is this best configured? Our current plan is to use the L3 switch as the primary router for traffic, with a trunk to the MPLS router. It would route traffic for the other sites' LANs through an intermediate VLAN to the router.
Internet traffic would go from the L3 switch to the inside interface of the ASA on the data VLAN, then back into the switch on a different port connected to the outside interface on the ASA. The trunk would carry this VLAN as native, and send it to the MPLS router.
Does that sound right? Is there another way to do this? Is there a *better* way to do this? How does the exterior static IP work with this setup? Will it still work?
*Note: The ASA has a base license, so we cannot do the trunking commands on the ASA itself.
Thanks in advance!
