We have a global MPLS network that I would like to backup utilizing VPN tunnels on our Firepower appliances. Our MPLS network utilizes BGP for routing. When I try to configure a full mesh VPN network in Firepower Management Center and deploy it to the firewalls, all traffic stops. It won't flow over the VPN tunnel or MPLS. I think the reason is the Firepower is advertising itself as the route for the VPN tunnels and that gets advertised to the core switches which do the routing for the MPLS. The problem is since traffic doesn't flow over the tunnels, I then lose access to the Firepower management interface to send an updated config. I'm wondering what I have to do to force the VPN routes to be a lesser priority than the MPLS routes learned over BGP?
