About inssider

I configured Active/Passive HA in an environment where the firewalls connect to a core switch. There is an OSPF adjacency exists between the active Palo and the core switch. I'm curious what the best practice is for OSPF and HA. When tweaking the OSPF settings on the Palo, disabling OSPF graceful reset/strict LSA checking led to a vastly quicker failover. I cannot find any documentation on what the best practice is. Also, if anyone knows this, I would appreciate the theory on what exactly is supposed to happen during the HA failover with an OSPF adjacency. My understanding and hope is that the firewall that becomes active simply "continues" the OSPF adjacency, and that no new one needs to be formed. Or am I wrong here... Should the firewall actually form a new adjacency during a failover?  ... View more