Disclaimer, i'm new to the organization.  The WAN is an Verizon managed MPLS with the routers running BGP managed by Verizon.  Prior to me joining the organization another WAN solution was purchased (never designed) to sit along side the Verizon MPLS and be used for redundancy.  This secondary network isn't yet built because hardware requirements were never defined and as a result there are no routers to terminate the connect.  Enter the new network guy (me) and my recommendation of maybe the MX can help me out.  I'm looking to take this in a layered approach.  First I want to bring one remote site on MX over the Verizon MPLS with the possibility of connecting the second ENS Layer two connection into the MX.  In the DC I will put the MX on the same segment as the LAN of the Verizon router and my Core.  My core knows how to get to the remote site via the BGP redistribution into OSPF on my core.  It sounds like when I put in the MX i will need to enter a router that will instructor the core to send traffic destined to the remote site over to the MX instead of the Verizon router.  ... View more

One other question.  Assuming I go with the VPN solution for load balancing over two Private WANs (assuming in this case I have two WAN).  If a client in a remote location initiates a connection to a resource in the DC that initial traffic is encrypted and sent over the VPN.  however the return traffic would become asymmetric as the packet will be sent directly to the WAN router and never hit the MX for tunneling.   Do I make sense? ... View more