Skip to main content
marara1
New Member
April 24, 2025
Question

OSPF Adjacency Loss after 7.2.11 Upgrade

  • April 24, 2025
  • 2 replies
  • 2017 views

We were running v7.2.10 on multiple hardware platforms without issue. Security came along and told us we had to update software due to a CR so we are now running v.7.2.11.

Since the update our Firewalls are now losing OSPF adjacencies to the core switches every couple days or so. The biggest offender only has one instance of OSPF running but some Firewalls have 4-5 instances of OSPF running (multiple VDOMs) and we lose adjacency on all vdoms simultaneously.

I don't think it's a resource issue; we have beefy hardware; 4201F, 2601F, 1801F.

Anyone else seeing this? Any workarounds?

As always, thanks!

2 replies

Toshi_Esumi
SuperUser
SuperUser
April 24, 2025

We have multiple 1000F HA pairs and at least 2 VDOMs on each cluster have OSPF neighborings with Cisco and Juniper routers. We upgraded those from 7.2.10 to 7.2.11 last month but they're still working fine.
You should open a ticket at TAC and get the symptom looked into. It's very situational, case by case, and difficult to troubleshoot over this discussion thread when it comes down to like routing protocol's intermittent disconnect issues.

Toshi

Kangming
Staff
Staff
April 25, 2025

Hi marara1,

There is indeed a mantis inside investigating it:

NP7 FGT randomly stop responding packets after upgrade from 7.0.14 to Fortigate 7.2.11
Workaround: Disable offload on policy rules 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.