OSPF VS Static Routes (When IPsec tunnel is active we lose internet access)
60D 6.0.9
The primary internet connection is on a dedicated private fiber line using OSPF, and also has a 0.0.0.0 static route.
A backup internet connection with an IPsec tunnel back to the main office is also configured.
What happens is when the IPsec tunnel is active on the backup internet connection, we lose our internet access.
IPsec tunnel has a Static route with higher value Distance and Priority settings than the Static Route for the primary fiber connection.
They still have access to the private network, but lose internet access.
Sorry, I haven't done much with OSPF so lots of questions:
How do I have OSPF as a primary connection with IPsec backup? (I know you can set a monitor on the IPsec tunnel, but our primary connection to our main office is over Wan port and not another IPsec tunnel)
Would I add the IPsec to the interface list under OSPF and set it to a higher cost?
If that's the case, do I still need the static route entry for the IPsec tunnel?
The IPsec tunnel is linking 192.168.7.x to 10.4.1.x and 10.1.1.x subnets.
OSPF is currently set up on 10.255.255.x network.
So if I add the IPsec interface into OSPF, would I need to add the 10.4.1.x and 10.1.1.x into the Networks box on OSPF?
If I add 10.4.1.x and 10.1.1.x to OSPF on my remote side, our main office firewall would also need to have those subnets configured too right?