Hi I’ve got a central site and a number of remote networks – each remote network maintains a layer-3 speedfusion link back to the central site (there is one profile on the central site for every remote site).
There is no need for connectivity directly between sites over speedfusion - in fact its a negative that the default behavior is for the speedfusion link to learn routes to all remote sites as being via the speedfusion link – its not a deal breaker that this happens, but its that would be preferable for us to be able to disable this … The main concern is that all remote sites are connected to the internet via very slow links – we have need to ensure that the minimal amount of traffic possible is passed to any of the remote sites.
In firmware 6.1.0 some ospf settings were added – under Network -> OSPF&RIP – there is a default OSPF ‘Area 0’ configured with the PepVPN interface as a member – the link type is described as broadcast. Is this setting interpreted somewhere in deciding how the speedfusion link should behave – is there any possibility that this would adjust the tunnel characteristics to create a shared broadcast domain among the vpn participants? Can this result in traffic from Site A -> Central Site also needing to be passed to Site B, Site C , … etc. Here is a picture of the default config:
Once again, I’m not entirely sure how the speedfusion and ospf features might interact – so I think its easier to just specify what I want to make sure I’m achieving with a simple example.
I have a central site with 2 speedfusion profiles, and there are 2 remote sites which each establish a speedfusion link with the central site.
Site A is connected via speedfusion to Central Site
Site B is connected via speedfusion to Central Site
Site A and Site B are connected to the internet via very slow links. I need to ensure:
Packet flows between Site A <-> Central Site does not result in any traffic being sent to Site B
Packet flows between Site B <-> Central Site does not result in any traffic being sent to Site A
Do I need to adjust any OSPF settings or anything elsewhere to ensure this behavior is achieved …? Is there any risk that the speedfusion link would establish a broadcast domain that is shared among all the sites – such that a packet intended for only one site is actually delivered to all sites?