02-08-2017 09:59 AM - edited 02-08-2017 10:00 AM
I have a static route for 172.16.0.0/12 but my PA is also learning through OSPF a route for 172.16.0.0/24.
As these routes have different prefix length both are installed in the routing table and the dynamic route for 172.16.0.0/24 learnt through OSFP takes precedence over static route for 172.16.0.0/12 without having in consideration the administrative distance.
I would like to avoid this situation and force my PA to select the static route with a shorter prefix length. Any suggestion?.
Thanks in advance!!!
02-08-2017 03:06 PM
More specific routes will always win over larger prefixes. This is the nature of the route selection process and is considered before the protocol of the route in question.
You will need to install the /24 as a static to override the OSPF learned route.
02-09-2017 12:37 AM
Steve, thank you for your answer. The problem is that my PA is learning a lot of routes with larger prefixes. So I would have to install a lot of static routes to solve the problem with the workarround that you suggest. Moreover, I would have to keep an eye on for new routes learnt by OSPF and install new static routes.
The ideal solution would be to filter the routes learnt by OSPF but, as far as I know, PA doesn't support this feature. I opened another thread about this:
02-12-2017 05:45 AM - edited 02-12-2017 06:01 AM
Right, if you need that level of route filtering you will need to switch to BGP from OSPF.
Bear in mind that Palo Alto is a security company that provides networking features on their devices. The introduction pace of new networking features can be slow. We just got BFD for example last year. So don't count on networking feature requests showing up soon.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!