OSPF in a Active/Passive Firewall setup

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

OSPF in a Active/Passive Firewall setup

L1 Bithead

Hi,


I have a lab with a active/passive Palo Alto firewall setup. I have had a look at the Palo Guide for setting up OSPF at:

 

https://knowledgebase.paloaltonetworks.com/servlet/fileField?entityId=ka10g000000D8HwAAK&field=Attac...

 

From this, it looks like it is not possible to form an OSPF neighbour with a standby firewall. The situation I am looking to avoid is waiting for OSPF neighborships to form to the standby firewall in the event the primary firewall fails. The document mentions the only workaround is to use floating static routes to carry the traffic until OSPF is established and routes learned at which point the dynamic routes will be preferred.

 

I am trying to find a solution where I don't need to use floating static routes and there is no downtime from going to a standby firewall from active when using OSPF.

1 accepted solution

Accepted Solutions

Cyber Elite
Cyber Elite

@vvadia ,

The solution is the workaround mentioned in the article with floating statics to carry before the OSPF relationship establishes and passes the routes, that's the only way around it. 

View solution in original post

2 REPLIES 2

Cyber Elite
Cyber Elite

@vvadia ,

The solution is the workaround mentioned in the article with floating statics to carry before the OSPF relationship establishes and passes the routes, that's the only way around it. 

L2 Linker

 

That article is outdated. Current versions of PANOS support Graceful Restart for OSPF.

 

 

  • 1 accepted solution
  • 7278 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!