topic OSPF route suppression in General Topics

OSPF route suppression

A_Cavasin — Fri, 20 Dec 2024 10:39:24 GMT

Hello, I have a question about suppressing OSPF routes.

We have a PA-3410 with software version 11.1.4-h7 and we have configured OSPF neighbourship with the Huawei switches.

All OK, in OSPF we advertise static and connected routes, but we want to suppress the announcement of WAN networks with public IP.

I found this topic https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVlCAK but we have activated the advanced-routing function, so I can't find the correct screen that you see in this topic.

I attach an image of a test that we did (the reported IP is fake, as example), but we continue to receive the network via OSPF in the Huawei switches.

I don't understand if I'm doing the wrong type of configuration, or if with advanced-routing I have to act in another way.
Could you help me? Thanks.

Re: OSPF route suppression

CosminM — Fri, 20 Dec 2024 11:04:57 GMT

Hello @A_Cavasin ,

For al the configuration related to Advance Routing Engine, you have the technical docs here:

https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-networking-admin/advanced-routing

To filter what networks you are announcing thro OSPF, you will need create a redistribute route map.

Re: OSPF route suppression

A_Cavasin — Fri, 20 Dec 2024 14:20:51 GMT

Thanks a lot @CosminM for your support!