topic Re: OSPF Issue in 8.1.1 in General Topics

OSPF Issue in 8.1.1

AbdulRahman_Safwat — Wed, 17 Oct 2018 06:34:14 GMT

Hello,

I am facing a flapping issue in OSPF, where the neighbor keeps going up and down, I tried adding a static route but the connectivity still drops packets between two devices behind the firewall on one side and behind the other mpls router on the other side, I wanted to check if this is related to the bug that was addressed in 8.1.2 as bellow:

PAN-94239

Fixed an issue where the firewall routed Open Shortest Path First (OSPF) unicast hello messages (P2MP non-broadcast) using a forwarding information base (FIB) instead of sending the messages over the interface to which the OSPF neighbor connected.

or if this is a misconfiguration in the ospf, bellow is a sample of the logs:

<var/log/pan/routed.log> OSPF 2 An adjacency with a neighbor has gone down.
<var/log/pan/routed.log> OSPF 2 Database exchange with an adjacent OSPF neighbor has been completed.
<var/log/pan/routed.log> The adjacency with this neighbor is now fully up.
<var/log/pan/routed.log> OSPF 2 An adjacency with a neighbor has gone down.

Re: OSPF Issue in 8.1.1

JoeAndreini — Wed, 17 Oct 2018 15:43:13 GMT

What version was upgraded from? are both ends running 8.1.1? Ho woften is adjacency flapping?

Check the BFD configuration - The default settings changed in 8.1. I had an instance where one side was upgraded and the other was not, and OSPF would come up until the BFD timers expired, then flap with similar messages.

Re: OSPF Issue in 8.1.1

OtakarKlier — Wed, 17 Oct 2018 15:50:18 GMT

Hello,

The best way to see if you are hitting that bug is to call TAC and open a case. However there are newer version of code out there and 8.1.4 was recetnly released so you may want to read those release notes and see if there are more OSPF fixes.

Regards,

Re: OSPF Issue in 8.1.1

AbdulRahman_Safwat — Wed, 17 Oct 2018 15:55:58 GMT

Thanks for the reply,
Actually the neighbor of PAN firewall is a cisco router, the connection is between the firewall and a router.