We have a client that is bringing in a MPLS router into our network. Right now they connect to our site using a tunnel between our two firewalls. I have a policy in place that locks them down to 4 specific servers (the servers have a gateway of 10.199.1.1 w/ a subnet of /24). Keep that in mind. Now, vendor configured the MPLS router w/ a gateway of 10.199.1.250. If I plug the router into our switch, I should be able to ping the MPLS router, no? So says the vendor.

Now, let's assume that's how it works. How the heck do I pass traffic from the 4 servers throguh the MPLS router? I'll have to kill the existing tunnel but the VLAN's gateway is 10.199.1.1 so that's what the servers are defaulted to. If traffic goes through the MPLS, how can I access those 4 boxes from my internal LAN then?