Enterprise Multi-siteSD-WAN

THE CHALLENGE

Why Multi-site Networking Is Still Hard

Distributed organisations face a persistent problem: how to give every location reliable, secure connectivity without building a bespoke network at each site. Whether you operate 15 branch offices or 500 retail stores, the underlying challenge is the same. Each site needs internet access, access to central applications, site-to-site communication, and some form of failover when the primary connection drops.

For years, MPLS was the standard answer. Dedicated circuits running between sites, managed by a carrier, with guaranteed bandwidth and low latency. MPLS works. But it is expensive, slow to provision, and inflexible. Adding a new site can take weeks. Upgrading bandwidth means renegotiating contracts. And if you need temporary connectivity for a pop-up location, a seasonal warehouse, or a construction site office, MPLS simply does not fit.

The shift to SD-WAN has changed the conversation. Instead of relying on a single dedicated circuit per site, SD-WAN allows organisations to use whatever connectivity is available: broadband, 4G, 5G, satellite, or a combination. The intelligence moves from the carrier network into the router at each site, and a central controller ties everything together. But not all SD-WAN platforms are built the same. Many require complex licensing, cloud dependencies, or specialist skills at every location.

Peplink takes a different approach. The routers are designed for real-world deployment: rugged, simple to configure, and built to run without on-site IT staff. InControl2 provides genuine centralised management. SpeedFusion bonds multiple connections into a single, resilient tunnel. And zero-touch provisioning means you can ship a pre-configured router to a new site, plug it in, and have it online within minutes.

Where This Matters Most

Multi-site SD-WAN is not a technology looking for a problem. It solves real operational pain for specific types of organisation:

• Retail chains with dozens or hundreds of stores, each needing POS connectivity, stock systems access, CCTV backhaul, and guest Wi-Fi
• Professional services firms with regional offices that need secure access to central file servers, CRM platforms, and VoIP systems
• Logistics and distribution operations with warehouses, depots, and sorting facilities spread across the country
• Healthcare organisations connecting clinics, surgeries, and administrative offices to shared patient record systems
• Construction and property companies needing temporary but reliable connectivity at project sites
• Hospitality groups managing hotels, restaurants, and venues with varying bandwidth demands

In each case, the requirements overlap: centralised visibility, consistent security policy, rapid deployment, and the ability to keep sites online even when individual connections fail.

THE APPROACH

How Peplink SD-WAN Works Across Multiple Sites

A Peplink multi-site deployment has three layers: the branch routers that sit at each location, the central hub (either a physical appliance or a cloud-hosted FusionHub), and InControl2, which ties everything together from a single web-based dashboard.

Branch Routers: The Right Hardware for Each Site

Not every site needs the same router. A small retail unit with one broadband line and a 4G backup has different requirements to a regional headquarters running fibre, bonded broadband, and dual cellular. Peplink's product range covers the full spectrum, and selecting the right model for each site type keeps costs proportionate.

Every router in the range supports SpeedFusion, VLAN segmentation, content filtering, and InControl2 management. The difference between models is throughput, port count, and the number of simultaneous cellular connections. We help you match hardware to site profiles, so you are not over-specifying small branches or under-powering critical locations.

FusionHub: The Cloud or Data-Centre Hub

In a hub-and-spoke topology, branch routers build SpeedFusion tunnels back to a central point. FusionHub is Peplink's virtual appliance that runs on AWS, Azure, Google Cloud, or your own VMware / Hyper-V infrastructure. It acts as the aggregation point for all branch traffic, providing a stable public IP, centralised breakout, and a single point for security policy enforcement.

For organisations that prefer not to run their own hub, we deploy and manage FusionHub instances in the cloud region closest to your operations. For those with existing data-centre presence, FusionHub integrates with your current infrastructure without requiring changes to firewall rules or routing tables beyond the initial setup.

InControl2: One Dashboard, Every Site

InControl2 is where Peplink's multi-site story comes together. It is a cloud-hosted management platform that gives you real-time visibility into every router across your estate. From a single screen, you can see which sites are online, which connections are active, how much bandwidth each location is consuming, and whether any devices have fallen offline.

More than just monitoring, InControl2 allows you to push configuration changes to individual sites, groups of sites, or your entire fleet. Need to update DNS settings across 200 branches? That is a single operation. Want to roll out a new SSID for guest Wi-Fi at all retail locations? Done in minutes, not days. Firmware updates, VLAN changes, firewall rules, content filtering policies: all managed centrally.

InControl2 also supports role-based access. Your network operations team might have full control, while regional managers get read-only dashboards showing the health of their local sites. This keeps visibility broad without distributing configuration risk.

ZERO-TOUCH PROVISIONING

Ship It, Plug It In, Walk Away

One of the biggest operational costs in multi-site networking is the site visit. Sending an engineer to every location for router installation, configuration, and testing adds up quickly, especially when sites are geographically spread or have limited access windows.

Peplink's zero-touch provisioning removes that requirement for the majority of deployments. The process works like this:

1. We configure the router's full settings in InControl2 before the hardware ships: WAN profiles, VLANs, firewall rules, SpeedFusion tunnels, Wi-Fi SSIDs, and any site-specific parameters.
2. The router is shipped directly to the site. It can go to a store manager, a warehouse supervisor, or even a third-party contractor.
3. The person on site plugs in the power cable, connects the WAN port to the broadband line, and inserts any SIM cards if cellular backup is required.
4. The router powers up, contacts InControl2 over whatever internet connection is available, downloads its full configuration, and establishes its SpeedFusion tunnels.
5. Within minutes, the site is online, fully configured, and visible in the central dashboard.

No on-site IT knowledge is needed. No serial console access. No phone call to talk someone through a configuration wizard. The router arrives, gets plugged in, and configures itself. For organisations rolling out dozens of sites per month, this approach cuts deployment timelines from weeks to days.

REPLACING MPLS

The Business Case for Moving Away from MPLS

MPLS still has its place for specific use cases: ultra-low-latency financial trading, for example, or legacy applications that depend on guaranteed bandwidth. But for the vast majority of enterprise branch connectivity, MPLS is being replaced by SD-WAN for straightforward commercial and operational reasons.

• Cost: MPLS circuits typically cost three to five times more than equivalent broadband plus cellular. For a 100-site estate, the annual saving from switching to Peplink SD-WAN can be substantial.
• Provisioning speed: A new MPLS circuit takes four to twelve weeks to install. A Peplink router with zero-touch provisioning can be operational within 48 hours of the order being placed.
• Resilience: MPLS gives you one path. If the circuit fails, the site is offline. Peplink SD-WAN with SpeedFusion bonds multiple connections, so the loss of any single link is handled transparently, with no interruption to users or applications.
• Flexibility: Adding, removing, or relocating sites is a configuration change, not a contract renegotiation. Pop-up locations, seasonal sites, and temporary offices become practical rather than prohibitively expensive.
• Bandwidth: MPLS bandwidth is fixed and expensive to upgrade. With SD-WAN, you can combine broadband and cellular to deliver aggregate throughput that exceeds what most organisations would pay for on a dedicated circuit.

The transition does not have to be all-or-nothing. Many organisations run a phased migration, moving sites from MPLS to SD-WAN as circuits reach contract renewal. We design the Peplink deployment to coexist with existing MPLS during the transition period, ensuring no disruption to live operations.

SpeedFusion: More Than Simple Failover

Standard failover means your backup connection takes over when the primary fails. The switchover takes seconds, sometimes longer, and active sessions often drop. SpeedFusion works differently. It bonds multiple WAN connections into a single encrypted tunnel, distributing packets across all available links simultaneously.

If one link degrades or drops entirely, traffic continues flowing over the remaining connections without any interruption. VoIP calls stay connected. Video conferences continue without freezing. Cloud application sessions remain active. Users at the branch do not notice the failure at all.

SpeedFusion also includes Forward Error Correction, which duplicates critical packets across multiple links to protect against packet loss. For applications like voice and video where even brief quality drops are noticeable, this makes a measurable difference to user experience.

HOW WE HELP

What The Tech Factory Delivers

As a Peplink Gold Partner, we work with organisations at every stage of a multi-site SD-WAN project. Whether you are planning a greenfield rollout across 50 new locations or migrating an existing MPLS estate to Peplink, we bring the design expertise, deployment experience, and ongoing support to make it work.

Network Design and Site Profiling

We start by understanding your site portfolio: how many locations, what connectivity is available at each, what applications need to run, and what your resilience requirements are. We then design a network architecture that matches hardware to site profiles, defines tunnel topologies, and sets bandwidth and failover policies per location type.

Hardware Procurement

We supply all Peplink hardware through our UK shop at competitive pricing, with free delivery on orders over £500. We hold stock of the most common branch routers and can fulfil large orders on short timescales. Browse our full range of Peplink routers.

Configuration and Staging

Every router is pre-configured before it leaves our facility. WAN profiles, VLANs, firewall rules, SpeedFusion tunnels, Wi-Fi settings, and InControl2 enrolment are all completed and tested before the hardware ships. When the router arrives at site, it works immediately.

Deployment and Commissioning

For sites that require on-site engineering, whether due to complex cabling, rack installation, or integration with existing infrastructure, we provide nationwide deployment services. For simpler sites, zero-touch provisioning handles everything remotely.

Managed Services and Monitoring

After deployment, we offer ongoing managed services including 24/7 monitoring, proactive alerting, firmware management, configuration changes, and quarterly network health reviews. Our team monitors your estate through InControl2 and responds to issues before they affect your operations. Learn more about our managed services.

Training

We provide training for your internal IT team on InControl2 administration, SpeedFusion configuration, and day-to-day router management. The goal is to give your team confidence to handle routine tasks while knowing expert support is available when needed. See our training options.