Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 2 subscribers
  • Views 3841 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Zwei UTMs mit redundanter Internetleitung IPsec Site to Site mit OSPF

EgonSommer

Hallo,

hat jemand Erfahrung mit redundanter IPsec Site to Site Verbindungen in Verbindung mit OSPF ?

Momenten löse ich das mit Uplink Balancing & Multipath Regeln, jedoch merkt man beim Ausfall einer Leitung, dass das Routing zwischen 2 - 3 Minuten dauert.

Der Tunnel baut sich relativ schnell wieder auf jedoch wie oben schon geschrieben dauert es eine ganze Weile bis der Ping wieder durch den Tunnel geht.

Gibt es eine Möglichkeit diese Zeit zu verkürzen ? oder wie realisiert ihr solche Szenarien ?



This thread was automatically locked due to age.
Parents
  • 0

    (Sorry, my German-speaking brain isn't creating thoughts at the moment. [:(])

    Egon, I've seen two articles by fellow member Michael Klehr that you might find useful:

    I don't like to provide direct links to things not on this site, so please google: "Sophos UTM Site2Site VPN mit mehreren Providern: IPSec, Failover, GRE/RED Devices und OSPF Routing"

    Also, Michael had an earlier article using Multipath rules: Sophos UTM multiple S2S IPsec VPN mit Failover – Tutorial (DE).

    Both solutions should result in virtually instantaneous failover.

    MfG - Bob (Bitte auf Deutsch weiterhin.)

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0

    (Sorry, my German-speaking brain isn't creating thoughts at the moment. [:(])

    Egon, I've seen two articles by fellow member Michael Klehr that you might find useful:

    I don't like to provide direct links to things not on this site, so please google: "Sophos UTM Site2Site VPN mit mehreren Providern: IPSec, Failover, GRE/RED Devices und OSPF Routing"

    Also, Michael had an earlier article using Multipath rules: Sophos UTM multiple S2S IPsec VPN mit Failover – Tutorial (DE).

    Both solutions should result in virtually instantaneous failover.

    MfG - Bob (Bitte auf Deutsch weiterhin.)

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data
Cookie Information Banner