FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
kkhushdeep
Staff
Staff
Article Id 333626
Description This article describes a situation where the OSPF neighbor is in a Full state, yet no routes are being advertised from the FortiGate.
Scope FortiGate.
Solution

In the routing table, the neighbor's state is displayed, and if it shows a Full state, it indicates that the neighbors are fully adjacent, allowing routers to use the learned OSPF routes to forward traffic.

 

However, there are instances where no routes are visible even when the neighbor is in a Full state, as demonstrated in the following example.

 

get router info ospf neighbor

OSPF process 0, VRF 0:

Neighbor ID     Pri   State           Dead Time   Address         Interface

10.10.10.1          1   Full/ -         00:00:30    10.7.251.252    x1

 

In this situation, it is important to verify the network type configured for the OSPF interface on both sides, ensuring that they match. For instance, if the FortiGate is set to broadcast, the neighboring device should also be set to broadcast.

 

An example configuration is below:   

 

config router ospf

    set router-id 0.0.0.1

        config area

            edit 0.0.0.0

            next

        end

        config ospf-interface

            edit "ospf"

                set interface "x1"       

                set network-type broadcast

            next

end

 

To debug routing communication, use the commands below:

 

diagnose debug disable

diagnose debug reset

diagnose ip router ospf all enable
diagnose ip router ospf level info
diagnose debug console timestamp enable
diagnose debug enable

diagnose debug disable --> To stop the debug:

 

Related article:

Technical Tip: How to configure OSPF over Non-Broadcast link