Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Verified Answer
  • Replies 3 replies
  • Subscribers 39 subscribers
  • Views 1141 views
  • Users 0 members are here
Options
Suggested

OSPF Routing how to prioritize interface vs tunnel

AstaroNBack

1. We have a 2 XGS connected via a private ISP fiber and the interfaces are LAN / GIG.

2. For resiliency we have a IPsec Tunnel interface between the same, using a disparate ISPs at each location VPN/GIG.

We have been using OSPF for all of our routing between multiple offices with Sophos XGS/FW, and it has worked well!

When I enable dynamic routing for the VPN, OSPF uses #2 Tunnel interface as the route in routing table.  #1 above should be faster and more dependable as it is an Enterprise connection w same ISP.  I want OSPF to use #1, LAN interface as primary instead of #2 tunnel.

IE: Where can I say weight of #1 Lan is 1, and weight of #2 tunnel interface is 50, or secondary, similar to how we prioritize gateways?

I realize it could be done with SD routes / policy, but since OSPF is working well I would like to stay with it.

Thanks in advance



Edited TAGs
[edited by: Erick Jan at 12:59 AM (GMT -7) on 23 May 2024]
Parents
  • +1

    This can be achieved by setting “cost” associated with the interfaces.  If a route is learned via two interfaces, the path with a lower cost would be preferred.

    Cost of an interface can be set as follows:

    Under OSPF configuration, in the “Override Interface section”, for the relevant interface, disable the “Autocost” and configure the cost values such that the overall cumulative cost of the preferred route is lesser.

    Thanks,

Reply
  • +1

    This can be achieved by setting “cost” associated with the interfaces.  If a route is learned via two interfaces, the path with a lower cost would be preferred.

    Cost of an interface can be set as follows:

    Under OSPF configuration, in the “Override Interface section”, for the relevant interface, disable the “Autocost” and configure the cost values such that the overall cumulative cost of the preferred route is lesser.

    Thanks,

Children
Unfiltered HTML