Hello,
Thank you for taking the time to answer my question.
Finally after discussion with Aruba professionnel services, we are going to :
- Migrate from L2 redundant to L3 redundant architecture + OSPF on the LAN side
- Direct connection from VPNC to WAN routeurs (in order to detect physical issue)
This is a huge change for our customer especially with 100 remote sites already migrated on BGW but it seems this is the only way.
Best regards,
------------------------------
guilhem perez
------------------------------
Original Message:
Sent: Mar 05, 2021 05:58 PM
From: Ariya Parsamanesh
Subject: SD-WAN VPNC and uplink Health check
yes you are right, forgot about LAN health check. here is the screenshot for it.
------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba.
------------------------------
Original Message:
Sent: Mar 05, 2021 02:32 AM
From: Mitchell Pompe
Subject: SD-WAN VPNC and uplink Health check
There is a LAN Health-check feature on the VPNC that you could use:
Enabling LAN health check will bring down WAN IPSec tunnels on the VPNC if all route peering is lost on the VPNC LAN - This is done to prevent black holing traffic.
Also, if the next-hop router fails and thus the peers route updates fail - the VPNC would stop advertising those routes into the SDWAN Overlay. Unless of course there is a broad DC Aggregate that matches an interface on the VPNC.