For details on cookie usage on our site, read our Privacy Policy
Does using OSPF for redundnacy to 2 different standalone FW's work
- LIVEcommunity
- Discussions
- General Topics
- Does using OSPF for redundnacy to 2 different standalone FW's work
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Printer Friendly Page
Accepted Solutions
- Mark as New
- Subscribe to RSS Feed
- Permalink
04-12-2019 10:45 AM - edited 04-12-2019 10:46 AM
Hello,
Not sure why they wiould say it doesnt work. I am running OSPF and have several different PAN models. OSPF is a standard and as long as a device supprots it it will run just fine.
What will not work is two different models in an HA configuration. Perhaps that is what they were referring to?
Hope that helps.
- Mark as New
- Subscribe to RSS Feed
- Permalink
04-12-2019 01:57 PM
Agreed. As long as you don't have asynchronous routing or are load balancing with another product to keep your flows on the same firewall (ie - F5), you should be fine. Based on your description, I'm guessing you don't have full control over your packet flows and would need an Active/Active setup. This is not supported on non-identical models. Perhaps you can describe your environment a little more?
- Mark as New
- Subscribe to RSS Feed
- Permalink
04-12-2019 10:45 AM - edited 04-12-2019 10:46 AM
Hello,
Not sure why they wiould say it doesnt work. I am running OSPF and have several different PAN models. OSPF is a standard and as long as a device supprots it it will run just fine.
What will not work is two different models in an HA configuration. Perhaps that is what they were referring to?
Hope that helps.
- Mark as New
- Subscribe to RSS Feed
- Permalink
04-12-2019 01:57 PM
Agreed. As long as you don't have asynchronous routing or are load balancing with another product to keep your flows on the same firewall (ie - F5), you should be fine. Based on your description, I'm guessing you don't have full control over your packet flows and would need an Active/Active setup. This is not supported on non-identical models. Perhaps you can describe your environment a little more?
- Global Protect VPN Client not authenticating to 2012 R2 Domain Controller in GlobalProtect Discussions
- Announcing AIOps for NGFW 2.5 in AIOps for NGFW Discussions
- Break up Active/Passive HA Cluster in General Topics
- Unable to connect the VPN ( X-Auth Support) from the Linux machine using third party client in General Topics
- auto commit issues after upgrade to 10.x in General Topics
Show your appreciation!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
