About COM-UCO

Steve, thank you for your last solution. Perhaps it could be worked. Finally I solved my problem changing the type of OSPF area from standard to NSSA. This way we only receive the default route from our OSPF peer and at the same we announce our routes. ... View more

Gerardo and Steve, thank you for your suggestions. The problem is that OSPF is forced by my provider and I can't change this 😞   Gerardo, you're right I shouldn't receive these routes through OSPF. The plan B is that my provider filter these routes.   Steve, I see that you found this other thread by yourself 😉 ... View more

Steve, thank you for your answer. The problem is that my PA is learning a lot of routes with larger prefixes. So I would have to install a lot of static routes to solve the problem with the workarround that you suggest. Moreover, I would have to keep an eye on for new routes learnt by OSPF and install new static routes.   The ideal solution would be to filter the routes learnt by OSPF but, as far as I know, PA doesn't support this feature. I opened another thread about this: https://live.paloaltonetworks.com/t5/General-Topics/How-to-ignore-routes-learned-by-OSPF/m-p/139314 ... View more

Gerardo, thanks for your answer. I will look for the way to make that suggestion to Palo Alto Team.   Meanwhile, I've to found a way to prioritize static routes over dynamic routes. The administrative distance works when the prefix length of the routes are equal but it appears that longer prefix length routes take precedence over shorter independent of administrative distance. ... View more