topic Unable to reach OSPF learned routes in Firewall and Security Management

Unable to reach OSPF learned routes

Samuel_EKUNDAR1 — Sun, 16 Mar 2025 06:42:35 GMT

I have a cluster deployment of two quatum 9000 appliances.

I have configured strictly ospf (no static roiute) via gaia on all interfaces.

and I can see all learned routes via all interfaces but the challenge is I can not reach the learned networks

for instance, I learned 10.1.1.8/32 via 10.2.0.1 (where 10.2.0.1 is a directly connected interface on the core switch)

I can ping 10.2.0.1 successfully but when I tried pinging 10.1.1.8 it failed.

when I tried traceroute to 10.1.1.8 from the gateway, the firewall does not seem to know where to send it (ideally it should be forwarded to 10.2.0.1)

I will appreciate your insights on this

Re: Unable to reach OSPF learned routes

the_rock — Mon, 17 Mar 2025 00:39:33 GMT

Hey Samuel,

If you run ip r g 10.1.1.8 from expert mode, do you see the correct output?

Andy

Re: Unable to reach OSPF learned routes

the_rock — Mon, 17 Mar 2025 03:33:34 GMT

Also, run fw ctl zdebug + drop | grep 10.1.1.8 from ssh when trying, just to see if anything is getting dropped.

Andy

Re: Unable to reach OSPF learned routes

Samuel_EKUNDAR1 — Tue, 18 Mar 2025 09:34:02 GMT

Thanks @the_rock I haven't checked via cli but on the smartevents, I did not see any drop or accept for the traffic

Re: Unable to reach OSPF learned routes

emmap — Tue, 18 Mar 2025 10:51:19 GMT

How've you set up anti-spoofing? Is the policy installed properly?

Re: Unable to reach OSPF learned routes

Samuel_EKUNDAR1 — Tue, 18 Mar 2025 17:03:26 GMT

I actually set anti-spoofing to detect on all interfaces. I will double-check again

thanks for your response.