Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 10 replies
  • Answers 1 answer
  • Subscribers 38 subscribers
  • Views 1945 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

OSPF loses connection if "redistribute route" is enabled

Mathias Mühlbacher

Hello everyone,

I have two Sophos XG appliances up and running for a couple of years.

Both appliances are using a RED tunnel to connect to each other and routing is done via OSPF.

Currently I have added all local subnets to the "network & area" section which works so far without any issues.

During Christmas I played a bit around and had a look "Redistribute connected" which makes sense so I can clean up the network/area section.

Unfortunately if I tick that checkbox and remove all the routes I can ping the other router for 30, 40 secondes - then I have around 10 seconds of no connection and then it repeats.

Can someone guide me what I did wrong?



This thread was automatically locked due to age.
Parents
  • 0

    Okay it seems that the RED connection goes down - but not the OSPF routing?!

    Strange..

  • 0 in reply to Mathias Mühlbacher

    Is the OSPF connected via a static route? So does XG1 know the neighbor via static route? Maybe the RED tunnel cannot keep up. 

    PS: RED connects via 3400 and the data flows to XG2 via 3410. So if the initial packet (3400) is correct, because there is no OSPF, it can break, after the RED t unnel is established and the packets (3410) are routed differently? Check packet capture. 

    __________________________________________________________________________________________________________________

  • 0 in reply to LuCar Toni

    OSPF is not connected via static "route" - I have a dedicated subnet for the RED tunnel with a /30 subnet mask.

    I can also see that XG 1 & 2 are exchanging routing information.

    The RED tunnel does not drop instantly as soon as there is an OSPF traffic over it - but after a couple of seconds.

    And what is also weird:

    If OSPF networks are being setup manually and not via the "Redistribute connected" it works without any problem.

  • 0 in reply to Mathias Mühlbacher

    Can you verify it via tcpdump/packet capture? I guess, the routes changing and therefore the tunnel will drop.

    __________________________________________________________________________________________________________________

Reply Children
Unfiltered HTML