topic Re: Configuring OSPF & Multicast in Palo Alto firewall sub-interface in General Topics

Configuring OSPF & Multicast in Palo Alto firewall sub-interface

MGRashmi — Thu, 21 Mar 2019 17:58:15 GMT

We have a requirement to configure OSPF & multicast in a sub-interface of Palo Alto for one of our customers. I would like to understand how it would impact the CPU, memory and throughput and the guidelines and best practices to be followed while configuring OSPF. A comparison against having static routes vs processing OSPF routes. Please suggest.

Re: Configuring OSPF & Multicast in Palo Alto firewall sub-interface

OtakarKlier — Thu, 21 Mar 2019 20:43:51 GMT

Hello,

Routing usually doesnt take much overhead. I have ospf running on small boxes without issues. The only thing I can think of would be huge routing tables. So route summarization could come in handy. Also keep track of your areas and remember the OSPF lsa types. The reason I like it is I can add a new site or subnet and everything learns about it automatically.

Regards,

Re: Configuring OSPF & Multicast in Palo Alto firewall sub-interface

jeremy.larsen — Fri, 22 Mar 2019 15:13:50 GMT

Agreed. If you aren't dealing with massive route tables, you will probably be just fine. OSPF will save you headache in the long run for sure.