Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Failing over default gateway with OSPF

We have a site we are deploying XGs at. They have two buildings on campus, with a private fiber link between them. Each building has it's own Internet connection. We'd like to deploy an XG at each site, and allow for ISP failover between them.

Scenario 1: ISP fails in building A, XG in building A changes it's default gateway to the XG in building B.

Scenario 2: On-campus fiber is cut, building A to building B traffic gets routed via a VPN/RED tunnel via the Internet.

Scenario 2 seems easy enough to implement, but I'm not sure how to handle Scenario 1. The XG only knows interfaces can be LAN or WAN, and routing Internet out of a LAN port isn't possible afaik. Would the XG learning a default route via OSPF be enough to send traffic out to the "partner" XG in the other building?

I'm assuming HA wouldn't be appropriate in this scenario.



This thread was automatically locked due to age.