Enterprise Multi-siteSD-WAN

THE CHALLENGE

Why Multi-site Networking Is Still Hard

How do you give every location reliable, secure connectivity without building a bespoke network at each site? Whether you operate 15 branch offices or 500 retail stores, the challenge is the same. Each site needs internet access, access to central applications, site-to-site communication, and failover when the primary connection drops.

MPLS was the standard answer for years. Dedicated circuits, managed by a carrier, with guaranteed bandwidth and low latency. It works. But it is expensive, slow to provision, and inflexible. Adding a new site can take weeks. Upgrading bandwidth means renegotiating contracts. If you need temporary connectivity for a pop-up location, a seasonal warehouse, or a construction site office, MPLS simply does not fit.

SD-WAN has changed the conversation. Instead of relying on a single dedicated circuit per site, organisations use whatever connectivity is available: broadband, 4G, 5G, satellite, or a combination. The intelligence moves from the carrier network into the router at each site, and a central controller ties everything together. But not all SD-WAN platforms are built the same. Many require complex licensing, cloud dependencies, or specialist skills at every location.

Peplink takes a different approach. Routers designed for real-world deployment: rugged, simple to configure, built to run without on-site IT staff. InControl2 provides genuine centralised management. SpeedFusion bonds multiple connections into a single, resilient tunnel. Zero-touch provisioning means you can ship a pre-configured router to a new site, plug it in, and have it online within minutes.

Where This Matters Most

Multi-site SD-WAN is not a technology looking for a problem. It solves real operational pain for specific types of organisation:

• Retail chains with dozens or hundreds of stores, each needing POS connectivity, stock systems access, CCTV backhaul, and guest Wi-Fi
• Professional services firms with regional offices that need secure access to central file servers, CRM platforms, and VoIP systems
• Logistics and distribution operations with warehouses, depots, and sorting facilities spread across the country
• Healthcare organisations connecting clinics, surgeries, and administrative offices to shared patient record systems
• Construction and property companies needing temporary but reliable connectivity at project sites
• Hospitality groups managing hotels, restaurants, and venues with varying bandwidth demands

Different sectors, same requirements: centralised visibility, consistent security policy, rapid deployment, and the ability to keep sites online even when individual connections fail.

THE APPROACH

How Peplink SD-WAN Works Across Multiple Sites

A Peplink multi-site deployment has three layers: the branch routers that sit at each location, the central hub (either a physical appliance or a cloud-hosted FusionHub), and InControl2, which ties everything together from a single web-based dashboard.

Branch Routers: The Right Hardware for Each Site

Not every site needs the same router. A small retail unit with one broadband line and a 4G backup has different requirements to a regional headquarters running fibre, bonded broadband, and dual cellular. Selecting the right Peplink model for each site type keeps costs proportionate.

Every router in the range supports SpeedFusion, VLAN segmentation, content filtering, and InControl2 management. Differences between models come down to throughput, port count, and the number of simultaneous cellular connections. Match hardware to site profiles and you avoid over-specifying small branches or under-powering critical locations.

FusionHub: The Cloud or Data-Centre Hub

In a hub-and-spoke topology, branch routers build SpeedFusion tunnels back to a central point. FusionHub is Peplink's virtual appliance that runs on AWS, Azure, Google Cloud, or your own VMware / Hyper-V infrastructure. It acts as the aggregation point for all branch traffic, providing a stable public IP, centralised breakout, and a single point for security policy enforcement.

For organisations that prefer not to run their own hub, we deploy and manage FusionHub instances in the cloud region closest to your operations. For those with existing data-centre presence, FusionHub integrates with your current infrastructure without requiring changes to firewall rules or routing tables beyond the initial setup.

InControl2: One Dashboard, Every Site

InControl2 is where multi-site Peplink deployments come together. Real-time visibility into every router across your estate, from a single screen. Which sites are online, which connections are active, how much bandwidth each location is consuming, whether any devices have fallen offline.

Beyond monitoring, InControl2 lets you push configuration changes to individual sites, groups of sites, or your entire fleet. Need to update DNS settings across 200 branches? Single operation. Rolling out a new SSID for guest Wi-Fi at all retail locations? Done in minutes, not days. Firmware updates, VLAN changes, firewall rules, content filtering policies: all managed centrally.

Role-based access keeps things sensible. Your network operations team gets full control. Regional managers get read-only dashboards showing the health of their local sites. Visibility stays broad without distributing configuration risk.

ZERO-TOUCH PROVISIONING

Ship It, Plug It In, Walk Away

Site visits are one of the biggest operational costs in multi-site networking. Sending an engineer to every location for router installation, configuration, and testing adds up quickly, especially when sites are geographically spread or have limited access windows.

Zero-touch provisioning removes that requirement for the majority of deployments:

1. We configure the router's full settings in InControl2 before the hardware ships: WAN profiles, VLANs, firewall rules, SpeedFusion tunnels, Wi-Fi SSIDs, and any site-specific parameters.
2. The router is shipped directly to the site. It can go to a store manager, a warehouse supervisor, or even a third-party contractor.
3. The person on site plugs in the power cable, connects the WAN port to the broadband line, and inserts any SIM cards if cellular backup is required.
4. The router powers up, contacts InControl2 over whatever internet connection is available, downloads its full configuration, and establishes its SpeedFusion tunnels.
5. Within minutes, the site is online, fully configured, and visible in the central dashboard.

No on-site IT knowledge is needed. No serial console access. No phone call to talk someone through a configuration wizard. The router arrives, gets plugged in, and configures itself. For organisations rolling out dozens of sites per month, this approach cuts deployment timelines from weeks to days.

REPLACING MPLS

The Business Case for Moving Away from MPLS

MPLS still has its place for specific use cases: ultra-low-latency financial trading, for example, or legacy applications that depend on guaranteed bandwidth. But for the vast majority of enterprise branch connectivity, MPLS is being replaced by SD-WAN for straightforward commercial and operational reasons.

• Cost: MPLS circuits typically cost three to five times more than equivalent broadband plus cellular. For a 100-site estate, the annual saving from switching to Peplink SD-WAN can be substantial.
• Provisioning speed: A new MPLS circuit takes four to twelve weeks to install. A Peplink router with zero-touch provisioning can be operational within 48 hours of the order being placed.
• Resilience: MPLS gives you one path. If the circuit fails, the site is offline. Peplink SD-WAN with SpeedFusion bonds multiple connections, so the loss of any single link is handled transparently, with no interruption to users or applications.
• Flexibility: Adding, removing, or relocating sites is a configuration change, not a contract renegotiation. Pop-up locations, seasonal sites, and temporary offices become practical rather than prohibitively expensive.
• Bandwidth: MPLS bandwidth is fixed and expensive to upgrade. With SD-WAN, you can combine broadband and cellular to deliver aggregate throughput that exceeds what most organisations would pay for on a dedicated circuit.

The transition does not have to be all-or-nothing. Many organisations run a phased migration, moving sites from MPLS to SD-WAN as circuits reach contract renewal. We design the Peplink deployment to coexist with existing MPLS during the transition period, ensuring no disruption to live operations.

SpeedFusion: More Than Simple Failover

Standard failover means your backup connection takes over when the primary fails. Switchover takes seconds, sometimes longer, and active sessions often drop. SpeedFusion works differently. It bonds multiple WAN connections into a single encrypted tunnel, distributing packets across all available links simultaneously.

When one link degrades or drops entirely, traffic continues flowing over the remaining connections without interruption. VoIP calls stay connected. Video conferences continue without freezing. Cloud application sessions remain active. Users at the branch notice nothing.

Forward Error Correction duplicates critical packets across multiple links to protect against packet loss. For voice and video, where even brief quality drops are noticeable, this makes a measurable difference.

HOW WE HELP

What The Tech Factory Delivers

Whether you are planning a greenfield rollout across 50 new locations or migrating an existing MPLS estate to Peplink, we bring the design expertise, deployment experience, and ongoing support to make it work. As a Peplink Gold Partner, we have direct access to Peplink engineering and priority support channels.

Network Design and Site Profiling

First step is understanding your site portfolio: how many locations, what connectivity is available at each, what applications need to run, and what your resilience requirements are. From there we design a network architecture that matches hardware to site profiles, defines tunnel topologies, and sets bandwidth and failover policies per location type.

Hardware Procurement

All Peplink hardware is available through our UK shop at competitive pricing, with free delivery on orders over £500. Common branch routers are held in stock; large orders ship on short timescales. Browse our full range of Peplink routers.

Configuration and Staging

Every router is pre-configured before it leaves our facility. WAN profiles, VLANs, firewall rules, SpeedFusion tunnels, Wi-Fi settings, and InControl2 enrolment are all completed and tested before the hardware ships. When the router arrives at site, it works immediately.

Deployment and Commissioning

For sites that require on-site engineering, whether due to complex cabling, rack installation, or integration with existing infrastructure, we provide nationwide deployment services. For simpler sites, zero-touch provisioning handles everything remotely.

Managed Services and Monitoring

After deployment, we offer ongoing managed services including 24/7 monitoring, proactive alerting, firmware management, configuration changes, and quarterly network health reviews. Our team monitors your estate through InControl2 and responds to issues before they affect your operations. Learn more about our managed services.

Training

Your internal IT team gets training on InControl2 administration, SpeedFusion configuration, and day-to-day router management. The goal: confidence to handle routine tasks, with expert support available when needed. See our training options.