OSPF Configuration

Question

Is the configuration for OSPF over the new Central SD-WAN VPN's the same as previous configurations as per the links below? Do we still need GRE Tunnels? 
 
 https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/122682/sophos-xg-firewall-how-to-configure-ospf-over-rbvpn 
 
 https://support.sophos.com/support/s/article/KB-000038014?language=en_US

FormerMember · Accepted Answer

Hey Doug, 
 No, We don't need GRE anymore. Central SD-WAN VPN orchestration adds Route-Based VPN tunnels on each end, Custom gateways, and SD-WAN policy routes. RB IPSec supports multicast traffic over the tunnel. Earlier we needed GRE because Policy-Based IPSec doesn't support multicast over the tunnel which OSPF uses to share route updates(LSAs). 
 Ensure to enable 'Dynamic Routing' on the VPN zone [Administration > Device Access] if you configure. ;)

OSPF Configuration

Top Replies