how to configure central management for branch gateway with no dedicated internet access

[nflnetwork29]

HI Checkmates , 

I have a MDM  MDLM externally located where this gateway is located . R81.10 T81

this branch gateway does not have dedicated internet access. it gets internet access thru another site (call it HQ) 

My MDM can manage the 6200's at HQ just fine However i cant seem to figure out how I would get this branch gateway connected to my MDM. 

SO technically this branch gateway and this HQ gateway will both show the same Public IP address. 

Any suggestions?

[G_W_Albrecht]

Why not do it over S2S VPN ?

[Chris_Atkinson]

Manage it via the WAN/DMZ interface, might need a route towards mgmt depending on the exact topology.

[nflnetwork29]

Hi @Chris_Atkinson My wan interface at the Branch office is not on the public internet

the branch office internet is all filtered (routed) thru the 6200's @ HQ. 

my MDM AND MDLM are external 

[PhoneBoy]

When you say “gets Internet access through another site” how precisely is that done?
Is it via a VPN or is it some sort of a dedicated connection?
A network diagram might help.

Regardless, you’ll probably need a dedicated public IP of some sort to manage that gateway effectively.

[nflnetwork29]

LAN-C  or ICL2 (inter-city Layer 2) its called essentially a layer 2 connection  connecting multiple physical locations using layer 2. 

Smart-1 cloud Mgmt can do it  as the sic trust is established from the gateway to the manager. 

[PhoneBoy]

Smart-1 Cloud can do it because it leverages a tunneled connection to the cloud.
Unfortunately that same tunnel is not yet available for on-prem management.