Connectivity between hubs in NGFW SDWAN

BBartik — Tue, 08 Aug 2023 19:00:24 GMT

When building an NGFW SDWAN hub-spoke network, SDWAN tunnels are not built between hubs. I was thinking of 2 options:

1) Manually building two tunnels between the hubs and put them in an SDWAN bundle myself, along with the rest of the SDWAN config (static routes to loopbacks over the SDWAN bundle, BGP Peering). Do you foresee any issues with this? It's a lot of config, where I wish auto-vpn just did it for you.

2) I could just build tunnels and run BGP over them. Thoughts? How have you approached this?

Re: Connectivity between hubs in NGFW SDWAN

ozheng — Thu, 10 Aug 2023 13:33:48 GMT

Hello BBartik,

Have you tried to set the VPN Cluster to "full mesh" instead of "hub and spoke"?

Olivier

topic Connectivity between hubs in NGFW SDWAN in Next-Generation Firewall Discussions

Connectivity between hubs in NGFW SDWAN

Re: Connectivity between hubs in NGFW SDWAN