Enabling OSPF/OSPF3 Host-Inbound Traffic in Security Zones to Resolve Init/ExStart States
If OSPF isn’t explicitly permitted in a security zone’s host-inbound-traffic protocols, the OSPF neighbor adjacency will fail to progress to the Full state.
- Identify the security zone used for your OSPF peering (for example, ABC), and add the ospf protocols under host-inbound-traffic:
ABC
set security zones security-zone ABC host-inbound-traffic protocols ospfset security zones security-zone ABC host-inbound-traffic protocols ospf3
- Verify Neighbor Adjacency using " show ospf neighbor "