Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Failing over default gateway with OSPF

We have a site we are deploying XGs at. They have two buildings on campus, with a private fiber link between them. Each building has it's own Internet connection. We'd like to deploy an XG at each site, and allow for ISP failover between them.

Scenario 1: ISP fails in building A, XG in building A changes it's default gateway to the XG in building B.

Scenario 2: On-campus fiber is cut, building A to building B traffic gets routed via a VPN/RED tunnel via the Internet.

Scenario 2 seems easy enough to implement, but I'm not sure how to handle Scenario 1. The XG only knows interfaces can be LAN or WAN, and routing Internet out of a LAN port isn't possible afaik. Would the XG learning a default route via OSPF be enough to send traffic out to the "partner" XG in the other building?

I'm assuming HA wouldn't be appropriate in this scenario.



This thread was automatically locked due to age.
Parents Reply Children
  • Thanks, I get that, and I'm currently using an XG to originate a default route at another site - but in this case I need the other XG to receive a default route from OSPF over a LAN port, and honour that. Would that work? Or would it still try to NAT the traffic out the WAN port with the failed ISP, or just plain stop forwarding traffic?