topic Re: Configuring OSPF in General Topics

Configuring OSPF

quist — Fri, 20 May 2011 15:17:22 GMT

I am having some fundamental problems configuring OSPF. Here's the simple configuration:

PA interface IP: x.y.200.94/29

Cisco interface IP: x.y.200.85/29

First problem...

From the PA CLI I can ping the remote Cisco router just fine:

admin@fs> ping source x.y.200.94 host x.y.200.89

PING x.y.200.89 (x.y.200.89) from x.y.200.94 : 56(84) bytes of data.

64 bytes from x.y.200.89: icmp_seq=1 ttl=255 time=9.92 ms

64 bytes from x.y.200.89: icmp_seq=2 ttl=255 time=1.50 ms

And yet from the Cisco router, there is no response. I do not believe I have any policies in place which block ICMP echo packets.

Any ideas?

Re: Configuring OSPF

devin.rigby — Fri, 20 May 2011 16:14:37 GMT

You need to create an Interface Mgmt profile that allows Ping with a permitted IP Addresses of the source. I used 0.0.0.0/0 to open it up for everything. You then need to assign the profile to the Interface you want to ping.

Re: Configuring OSPF

quist — Wed, 25 May 2011 19:38:37 GMT

Many thanks! Exactly what the doctor ordered.

So are these management profiles applied after the packet filtering policies? And I am assuming the default is "block" icmp, telnet, ssh, http and https.

Russell