MPLS setup at firewalla gold

Follow

nnick4755

• December 22, 2022 06:54

Hello,

We are evaluating to use firewalla gold at our infrastructure, we will use router mode.

At our existing infrastructure, MPLS between site is configured.

Our existing MPLS setup follow this guideline. https://www.sonicwall.com/support/knowledge-base/how-to-configure-sonicwall-to-access-mpls-network/170915120106758/

it is some LAN routing in between MPLS router

Just want to double confirm does firewalla gold support similar setup.

I checked Firewalla Policy & Content Based Routing, https://help.firewalla.com/hc/en-us/articles/360061592433-Firewalla-Policy-Content-Based-Routing

The route can only specify interface but cannot specify gateway? is route gateway / next hop setup at different page? or can we use ssh cli to achieve?

Thank you.

0

• 

  Firewalla

  • December 22, 2022 16:55

  Firewalla does not support MPLS. If you want MPLS tunneling coming from firewalla, it just won't work. But if you have another gateway, routes probably can forward traffic just as if it is another WAN.

  0

  Comment actions Permalink
• 

  nnick4755

  • December 23, 2022 07:51

  Thanks for reply.

  There will be another gateway managing MPLS, 192.168.99.1

  At existing firewall, we used to setup a port as LAN for this purpose , IP as 192.168.99.2. 

  route setup like this:

  Source (On): any

  Dest (Matching): remote site LAN range

  Interface: firewall interface for MPLS

  Gateway (no this option at FWG at apps route page): another gateway, 192.168.99.1, it is an custom IP address object

  At FWG route, we can only specific "matching", "on", "Interface".

  We need to route traffic to another gateway, 192.168.99.1

  Can we setup custom IP route gateway / next hop at FWG route?

  Thank you.

  0

  Comment actions Permalink
• 

  Firewalla

  • December 23, 2022 16:57

  Would you mind draw a quick picture? It is hard for me to visualize the MPLS part. 

  0

  Comment actions Permalink
• 

  nnick4755

  • December 23, 2022 18:14

  Thanks for reply.

  Diagram added.

  Anyway, just found a youtube link which tried to add LAN route on firewwalla.

  I thought we can only specific "matching", "on", "Interface" at route page.

  The youtube link showed we can add next hop after selecting the LAN interface.

  It is what we need. Thanks.

  

  Diagram

  

   

  0

  Comment actions Permalink

Please sign in to leave a comment.