Best practice: Multi-WAN IPSec on both sites with OSPF
-
Hi,
I want to have several sites connected to the headquarter via IPSec. All sites have two WAN connections which should be used for almost instant failover.
According to the documentation (https://docs.netgate.com/pfsense/en/latest/multiwan/ipsec.html#failover-with-routed-ipsec-and-dynamic-routing) this needs one IPSec tunnel per possible WAN combination. So with two WAN connections on both sites and 10 sites connected to one this would make 40 tunnels on the headquarter pfSense. And for using OSPF from the FRR package I would need to set "Filter IPSec VTI and Transport on assigned interfaces", so that I can set those interfaces up in OSPF, right?
I want to understand if I get it right, because if I would setup this, the "Interfaces" drop down menu would have more than 40 entries.