Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

SD WAN Routing with xfrm interface

Hi community,

I need help to complete this configuration. 

A customer needed to improve the VPN configuration beween his hq to the Oracle datacenter.

He had 4 classic IPSEC vpn

PROVIDER1-ORACLEIP1

PROVIDER1-ORACLEIP2

PROVIDER2-ORACLEIP3

PROVIDER2-ORACLEIP4

the problem is that on the Oracle side only one tunnel was available and the failover process in case of the main tunnel failed take a couple of minute

I wanted to simplify and make this setup more efficient so I configured 2 XFRM interface 

PROVIDER1-ORACLEIP1

PROVIDER2-ORACLEIP2

I configured the XFRM interface with the address 172.31.1.1/30 and 172.31.1.5/30 but there was no way to configure this addressing on Oracle side.

I configured the interface and the SD-WAN routing and everithing works correctly

The problem is that I have no way to configure the probe in the interface configuration. 

Is there anyone that can help me?

Thank you

Giacomo



Added TAGs
[edited by: Erick Jan at 11:15 PM (GMT -8) on 4 Nov 2024]