Branch Office over MPLS



  • I have been trying to get a connection from my main office to my branch office over OpenVPN to stabilize over the last month. In the mean time, I want to revert back to the MPLS link that is still active. Let me illustrate my network (setup before I arrived on the scene…). I searched, but can't quite find the scenario I'm working with as you will see below (MPLS IP address).

    Home office:
    10.0.0.0/24 (em1)
    Gateway is 10.0.0.254 connected to BrightHouse 74.x.x.x (em0)
    OpenVPN interface is 10.0.8.1
    10.0.0.47 (em2) connected to MPLS interface 10.0.0.100 (disconnected at the moment)

    Branch Office:
    10.0.1.0/24 (em1)
    Gateway is 10.0.1.254 connected to BrightHouse (em0)
    OpenVPN interface is 10.0.8.2
    MPLS interface is 10.0.1.100 (disconnected at the moment)

    I want to keep the BrightHouse Internet at the Home office and route all traffic from the Branch Office over MPLS to the Home Office for either the 10.0.0.0/24 network or the Internet. I tried this by setting a static route from the Home office to Branch over the MPLS via em2, but I suspect that there is a problem with routing.

    I can change the default gateway for all of the computers at the branch office to 10.0.1.100 no problem. The problem is what to do on the Home office side. I need to be able to go from Home Office to Branch Office and Branch Office to Home office and both locations to the Internet.

    I can put together a diagram if that would help. Any thoughts?

    Thanks
    Rick



  • Im trying to remember how this is set up between a couple of our sites.

    I believe that our "remote" site is connected to the MPLS via its WAN port and that on the opposite "home" site connects to a LAN port. However this is a vendor setup and is actually routing VOIP circuits on another type of router. Everything is static.  Might be worthless information or give you ideas. Either way…    :)



  • Before I inherited this setup, the MPLS link was from the telco equipment to the local switch at the remote location and to the third NIC in a custom Linux firewall solution on the Home Office side. That firewall died the day I took over (oh the joy) so I don't know how it was configured.

    I am still trying to figure out the routing logic on this one and am open to almost anything at this point. I may even call Windstream and get them to change the LAN interface IPs to something like 10.0.10.0/24 to get it out of the LAN subnet on each network.

    rick



  • https://forum.pfsense.org/index.php?topic=69588.msg380413#msg380413    Ive got several of these (openvpn) links working into my primary box. Works very well.  :)

    Looks to me that at your home office your em1 and em2 interfaces need to be bridged.  Then into the remote side with a 10.0.0.0/24 address on a WAN port. I also believe that MPLS needs VLAN tagging but there again I could be wrong.


Log in to reply