Why are OSPF routes not present on the Passive Firewall
10960
Created On 01/18/20 02:02 AM - Last Modified 07/29/20 01:48 AM
Question
Why are OSPF routes not seen on the Passive Firewall?
Environment
- Any Palo Alto Firewall.
- Any PAN-OS.
- High Availability Active/Passive.
Answer
In a High Availability Active-Passive Configuration, the Passive device does not forward traffic and so does not form OSPF adjacency with neighbor. Hence the OSPF routes will not be present in the routing table of Passive firewall.
Additional Information
This is an expected behavior.