Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SD WAN Profile Probe target for xfrm interface

I have multiple XG 19 devices, and all of them have 2 ISP links.

I created a full mesh IPSec VPN tunnel between every ISP on every device, and assigned IPs for each xfrm interface.

<Site 1 ISP 1> to <Site 2 ISP 1> 10.11.21.1

<Site 1 ISP 1> to <Site 2 ISP 2> 10.11.22.1

...

<site 4 ISP 2> to <Site 2 ISP 1> 10.42.21.1

so the 2nd and 3rd octets refers to the local site and ISP link respectiviley.

each site has connectivity to each other site.

now when it comes to setup the SD WAN policy, I can only enter 2 IP targets for probing. so on the policy <site1 to site 2> i added the targets: 10.21.11.1 and 10.22.12.1

this will test connection quality from <site 1 ISP 1> to <site 2 ISP 1> and <site 1 ISP 2> to <site 2 ISP 2> which is only 2 out of 4 possible targets.

How can I ensure the policy tests connection to the other site over both ISPs by both sites ?



This thread was automatically locked due to age.
Parents Reply
  • You can start a trial for both appliances. Then try to do it via Central and see the results. Maybe is this something you are willing to look into for the future. You can try it for 30 Days no strings attached. 

    __________________________________________________________________________________________________________________

Children
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?