How to Configure Route Suppression on OSPF on a Palo Alto Networks Firewall

Overview

This document describes how to configure Route Suppression on OSPF on the Palo Alto Networks firewall.

Note: Route suppression works only in inter area in OSPF (to be configured on the ingress area) to prevent routes being advertised from one area to a backbone area.

Details

Example OSPF configuration: Upstream device "A" (area 0.0.0.1) => (Area 0.0.0.1) PA Firewall "B" (Area 0.0.0.0) => Downstream Device "C" (Area 0.0.0.0).

Configure the route suppression on the ingress area (Area 0.0.0.1 on PA Firewall "B") to prevent routes learned from device "A" from being advertised into the backbone area (To device "B").

owner: saryan