Hi All,   Having discovered (with your help) that OSPF on the MX95 only advertises VPN routes, I am looking at other options for site firewall resilience in case one or the other should fail. I believe it is the only single point of failure left in the network and could be fixed by adding a 2nd MX95 at each site and running 'warm spare' mode.   Have I missed anything? is there a way to create a policy to track an upstream IP address and change route 'weight' is the upstream device goes offline or any other way to achieve this? currently each site has a static default route pointing to the local MX95, but no mechanism to route via the 2 x 10G links between the cores.   many thanks in advance for any pointers, Regards John L.     ... View more

Hi All, I am trying to setup internet failover between two adjacent sites, each with it's own MX95 and internet circuit and MS425 core switches, the cores are connected via a 10G link but the firewalls are not connected and not in HA. I was planning to run OSPF between the firewall and local switch and also between switches based on the MX advertising the 0.0.0.0/0 route to its local switch. However, reading the docs it is not clear if this will work, I can see that the MX does not learn OSPF routes from neighbors and will advertise VPN routes, but not clear how the default route is handled.   Any other suggestions welcome to achieve this! Is it possible for example to configure 2 static default routes on the core and monitor an upstream address? similar to IP SLA in the IOS world.   Many thanks in advance for your wisdom here, John L. ... View more