I caused an outage a few days ago - connected 2 data centres via VPN, added static routes via VPN but didn't realise that Palo alto installs routes which are down a tunnel interface even when the vpn attached to the tunnel is down.
I've been thinking of what else can be done apart from static routes. What are you all using? In the next 9 months we'll be connecting all the data centres up with physical connections, at which point we'll simply extend our mpls, but in the meantime what routing protocol would you recommend to use over VPN between data centres?
No comments:
Post a Comment