Using two OpenVPN tunnels with Quagga, but IP connections are iterrupted

[Trey]

Hi,

I'm using two OpenVPN tunnels and Quagga for high-availability.

I have a site A und a site B. I have two OpenVPN tunnels from A to B.

When I kill the first OpenVPN tunnel, Quagga uses the secound tunnel for failover.

However, each time a failover happens, a ping e.g. is interrupted and I have to reestablish the "connection".

I think it has something to do with the firewalling on the two OpenVPN tunnel interfaces.

So how should the firewall be configured to allow the connection to failover the other OpenVPN tunnel? Any ideas?

kind regards

Trey

[Trey]

Hey,

based on this article https://doc.pfsense.org/index.php/Asymmetric_Routing_and_Firewall_Rules

I added a corresponding floating firewall rule for both OpenVPN interfaces.

Works like a charme!!! No TCP connection interuption anymore!

I love pfsense :-)