We have 5 SDX Pro firewalls (1 in each datacenter POP).
Each one has multiple carriers, all with BGP, broadcasting our public IPv4 address blocks.
When one of our BGP peers attempts to send us a bunch of routes, SpeedFusion starts to have connection problems, and won’t pass the “Establishing routes” phase.
So far I have not been able to figure out how to prevent the peer’s full route table from affecting SpeedFusion.
Has anyone come across this?
Stuck at “establishing routes” normally would mean that the SF peer has a route conflict with another one, or some router in the OSPF area has got the same router ID - logging isn’t particualrly great unfortunately on Peplink for debugging these issues.
On the BGP profile do you have it configured to export routes learned from BGP to OSPF?
As SpeedFusion uses OSPF I’d also check on the OSPF config whether you need to selectively advertise networks from each POP to other VPN peers.
I don’t have any of the Export options selected, which is what makes me think this may be a bug.
We ended up just changing the BGP exchange to import the default route only from each of our ISPs, so I’ve worked around the issue. But it seems the routes may have been exporting even with that option turned off.