Layer 3 MPLS VLan routing

Question

Hi There, 
 
 I have two sites which are having Data Port of MPLS Layer 3 Vlan. 
 
 Site A: VLAN : 192.168.10.0 /24 
 site B Vlan : 192.168.11.0 /24 
 
 so the Goal is to connnect from Site B to Site A Network for FTP Services. 
 IN SITE A: 
 I have Created a new Interface with MPLS Data port from CE Router on the Firewall. 
 
 Interface IP : 192.168.10.10 /24 
 and then i have FTP Server in other VLAN eg: 192.168.15.10 /24 , so for that i have created a NAT rule. 
 
 if traffic comes to 192.168.10.10 (Firewall) interface then route the traffic to the 192.168.15.10 FTP Server and so and this is Also working if i make connection through filezilla when i am in 192.168.10.10 network. 
 host: 192.168.10.10 
 user name and password then i can access the FTP Server which is 192.168.15.10 , 
 SITE B 
 but the Problem is when site B is trying to connect to the Same way they can't access. 
 SITE B IP : 192.168.11.10 /24 
 they are not able to connect to the 192.168.10.10 , 
 
 Question: 
 
 Do i need any static routing in Site A ? 
 and if yes can someone please Help me how can i set it ? 
 
 or SITE B needs route on their firewall for the destination 192.168.10.0.0/24 over next hop 192.168.11.10 
 thanks

Aditya Patel · Answer

HI sanjayyadav, 
 First you may need to check the traffic from any of the location and trace the connection.. 
 Step 1: Check via Ping , if you are able to ping the remote device then you may need to check via Packet Capture or console. Console > tcpdump 'host <IPaddress> and proto ICMP 
 Step 2: If the Traffic is not forwarded to the next Hop/device then you may need to initiate a ping from that device and check if there is a Firewall rule to allow such traffic . 
 Step 3: If the Rules are in Place and if the traffic is not forwarded , you may add a Static Route for the same.