OSPF failover between a DIA link and an MPLS link?

[victoriabardy]

We have an office that has a DIA with two firewalls and a VPN to our Data center and a soon to be rolled out MPLS back up. Need some advice regarding the approach. There are two core layer 3 3650 switches in place at this site. There are dual links from the switches to the firewalls and then for the MPLS I will connect the both swtiches directly to the MPLS CPE. I am thinking of running OSPF over the vpn for the primary including the vpn interface in our data center and then adding additonal routes with a higher cost for the MPLS. Does this approach sound like it should work? Any thoughts or suggestions would be great here. Thank you. Rgds, Vicky

[Reza Sharifi]

Your solution may work but you would need to test it.  The other option would be to connect the MPLS directly to the Juniper firewall instead of the core switch.  This way you still have some protection against outside access to your network and easier to configure the links for fail over.

HTH