Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    BGP and IPSec Backup

    Routing and Multi WAN
    2
    3
    716
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      chris.wallace.001 last edited by

      Hi all,

      Im hoping someone can help me out with a issue I'm having between a Watchguard and pfSense.

      I have a Watchguard at a branch office site and a pfSense at our another branch office.

      We have a private point-to-point line between the two devices.

      I run BGP across this private link and all can communicate as expected.

      I would like to have a failback IPSec VPN so that if the private line fails communications can continue, however as soon as I bring the IPSec VPN up on the pfSense the private link breaks.  It appears that the IPSec route is taking preference on the pfSense.  Watchguard has an option that fixes this labelled "Enable the use of non-default (static or dynamic) routes to determine if IPSec is used".  I have also tried amending the BGP route preferences however no luck.

      Can anyone advise how to achieve the same on pfSense?  I am unable to use OpenVPN as Watchguard does not support this.

      Thanks in advance!
      Chris

      1 Reply Last reply Reply Quote 0
      • dotdash
        dotdash last edited by

        If IPSec matches the traffic, it will grab it before it hits the routing table. I don't think there is a work-around.

        1 Reply Last reply Reply Quote 0
        • C
          chris.wallace.001 last edited by

          Ahh shame! Thought that was the issue. I'll have to replace the pfSense with a Watchguard then.

          Thanks
          Chris

          1 Reply Last reply Reply Quote 0
          • First post
            Last post

          Products

          • Platform Overview
          • TNSR
          • pfSense
          • Appliances

          Services

          • Training
          • Professional Services

          Support

          • Subscription Plans
          • Contact Support
          • Product Lifecycle
          • Documentation

          News

          • Media Coverage
          • Press
          • Events

          Resources

          • Blog
          • FAQ
          • Find a Partner
          • Resource Library
          • Security Information

          Company

          • About Us
          • Careers
          • Partners
          • Contact Us
          • Legal
          Our Mission

          We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

          Subscribe to our Newsletter

          Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

          © 2021 Rubicon Communications, LLC | Privacy Policy