topic Re: Is ther an OSPF issue in PAN-OS 3.1.5 in General Topics

Is ther an OSPF issue in PAN-OS 3.1.5

asia — Tue, 16 Nov 2010 17:44:20 GMT

Hello,

We were doing some tests on ospf, and we noticed that the firewall dont flush his ospf adjacency table even if a nheibour goes down, and this for a duration of one hour, in wich it continue to include the wrong information (concerning the gone neibour) into it's advertisement, wich cause inconsistency in routing politique.

Is ther any idea, is it a known bug?

Regard's.

Re: Is ther an OSPF issue in PAN-OS 3.1.5

jpa — Wed, 17 Nov 2010 00:11:44 GMT

This sounds like a bug. Advertising a dead neighbor even after an hour is incorrect. I dont see anything being reported in the bug database yet.

Re: Is ther an OSPF issue in PAN-OS 3.1.5

dwhyte — Wed, 17 Nov 2010 23:57:41 GMT

Hello,

We took a look at this in our lab and found that this is a limitation on the PAN box. Spoke with one of the engineers and it seems as if the age-out value for the routes is a feature that was not made configurable from the CLI/GUI. Please open up an enhancment request with your sales contact.

Re: Is ther an OSPF issue in PAN-OS 3.1.5

asia — Thu, 18 Nov 2010 13:21:16 GMT

Hello,

Thank you for the answers, but the problem here is not the age out of routes, but the issue is that the PAN device don't flush LSAs in the lsdb concerning a neighbour wich is gone (down), what we noticed, is that whene the PAN loose the neighbourship with the router, it marks it down as a neighbour, it flush the routes, but it does not flush the LSAs, and continue incrementing there age and advertising them to other neighbours, hope my clarifications will be useful to a more precise understanding of the issue and more efficient fix :smileyplain:

Regard's.