Quantcast
Viewing all articles
Browse latest Browse all 20028

OSPFv3 and Palo-Alto - Neighbor won't come up

I've got a few PA 3000 series firewalls that talk OSPFv3 to Cisco gear and that works great. The OSPFv3 config on the PA side is dead simple, basically area 0.0.0.0, router ID set and a small set of networks to redist or export.

 

I've tried literally everything and I can't get a v3 neighbor to come up with an EdgeMax device running 1.8.0

 

The two devices are physically connected with everything at the defaults (MTU 1500, auto/auto (both sides show 1000/Full). This connection is passing data so that isn't the issue.

 

Howver the neighbor never comes out of exstart.

 

OSPF neighbor:

 

show ipv6 ospfv3 neighbor detail 
 Neighbor 10.4.99.1, interface address fe80::5a49:3bff:fe3b:d112
    In the area 0.0.0.0 via interface eth0
    Neighbor priority is 1, State is ExStart, 2 state changes
    DR is 10.4.99.1 BDR is 10.4.255.6
    Options is 0x000013 (-|*|*|-|R|-|-|E|V6)
    Dead timer due in 00:00:36
    Database Summary List 0
    Link State Request List 0
    Link State Retransmission List 0

 

OSPF config:

 

show configuration commands | grep ospf
set protocols ospfv3 area 0.0.0.0 interface eth0
set protocols ospfv3 parameters router-id 10.4.255.6

eth0:

 

show configuration commands | grep eth0
set interfaces ethernet eth0 address 10.4.255.6/30
set interfaces ethernet eth0 address 'xxxx:xxxx:xxxx::3/127'
set interfaces ethernet eth0 description 'eth1/3 on Palo Alto'
set interfaces ethernet eth0 duplex auto
set interfaces ethernet eth0 ipv6 dup-addr-detect-transmits 1
set interfaces ethernet eth0 speed auto
set protocols ospfv3 area 0.0.0.0 interface eth0
set service lldp interface eth0

Any ideas? I'm banging my head against the wall and I need this to work, since the palo-alto's won't do BGP for IPv6 (stupid)

 

 

Edit: The palo alto end shows the same thing. It sees the neighbor, but it's stuck in exstart:

 

show routing protocol ospfv3 neighbor

Neighbor ID 10.4.255.6, in virtual router default
  Neighbor Link-local addr fe80:0:0:0:26a4:3cff:fe3d:c96d,Neighbor If ID 6
  Through local Interface ethernet1/3, local IF ID 18
  Area 0.0.0.0, instance ID 0, status up
  priority 1, state exstart, event count 13
  Options 0x0, V6(0),E(0),MC(0),N(0),R(0),DC(0)
  Retransmission queue length 0, Waiting on 0 LSA request
  Dead time is 33 sec
  Graceful restart helper status: not helping, time remaining: 0
  Graceful restart helper exit reason: none

Viewing all articles
Browse latest Browse all 20028

Trending Articles