Gents

We have a remote client conected via MPLS..........Currenly we have IPSEC tunnel to the cleint and it works perfectly. The client use to mnage there own devices but now they want us to manage the device from our own datacentre. The issue is that , that its a MPLS connection which terminates into layer 2 swicth and then it has a router and pair of firewalls.................since the IPSEC tunnel connects directly to firewall what would be the best way to manage the devices .........the switch and router.............As traffic treverse through them............what is a same interface issues with ASA someone told me that traffic entering same inbterface cant leave the ssame interface??

Thanks