Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a netgear FVX538 firwall/gateway, 20mbps optic fibre link connected to WAN1, no connection on WAN2 and a link which I suppose to be a 2mbps MPLS line into a Cisco 1841 and in turn connected to one of the eight 10/100 LAN ports on the FVX538.

I thought that having the MPLS line means VPN connections i.e. between local LAN 192.168.3.x and remote LAN 192.168.2.x go through that 2mbps line instead of the 20mbps optic fibre link. In other words, packets switch into that 10/100 port.

However, in the web interface of FVX538, it has a VPN configuration. Amongst the various settings, it requires me to set the local client and remote host IP. For local, the choices must be either WAN1 or WAN2 or some fixed IP visible to the WAN. It is currently set to WAN1.

It confuses me as to which line the VPN connnections were actually going through, or if they were interdependent. Anyone can enlighten me please? Or, maybe the 2mbps line should actually be connected to WAN2?


More information

Before we had the 20mbps optic fibre link, our WAN1 was an ADSL 10mbps/768kpbs. At that time, our video conferencing was choppy and disconnect frequently. The ADSL WAN1 was blamed and thus it was upgraded. The video conferencing goes by SIP and we connect to 192.168.2.X or 192.168.3.x (depending which side is calling). If I were correct, we should instead upgrade the 2mbps, not the ADSL.

Question is, am I correct?

share|improve this question
add comment

1 Answer 1

up vote 0 down vote accepted

If your video conferences are with your colleagues in other branches, it goes through the mpls line (which is a vpn).

From what I understand, your fiber wan and the netgear are used only for Internet access.

So yes, if video quality is poor, you should upgrade the mpls link, or at least see if your mpls provider can prioritize the video flow over their mpls cloud.

share|improve this answer
    
Does the VPN config in the firewall have anything to do with the MPLS line connected to the 10/100 port? Any difference if the MPLS is connected to the WAN2 and firewall to configure VPN on WAN2? –  Jake Jul 3 '11 at 6:15
    
The firewall can be used to establish a VPN over internet (much cheaper than the mpls link). You already have a vpn with the mpls router, you don't need to plug it into WAN2. –  petrus Jul 3 '11 at 12:34
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.