Description

Enabling OSPF/OSPF3 Host-Inbound Traffic in Security Zones to Resolve Init/ExStart States

Solution

If OSPF isn’t explicitly permitted in a security zone’s host-inbound-traffic protocols, the OSPF neighbor adjacency will fail to progress to the Full state.

- Identify the security zone used for your OSPF peering (for example, ABC), and add the ospf protocols under host-inbound­-traffic:

set security zones security-zone ABC host-inbound-traffic protocols ospf
set security zones security-zone ABC host-inbound-traffic protocols ospf3

- Verify Neighbor Adjacency using " show ospf neighbor "

Modification History

2025-07-09 : Article Created