This article describes the issue of an Open Shortest Path First (OSPF) neighbor being in the 2 Way state.

The firewall or router is not forming an adjacency. Maximum transmission unit (MTU) settings are the same on both sides of the link.

How do I determine if an OSPF neighbor is a designated router (DR) or a backup designated router (BDR)?

In broadcast media, only the designated router and backup designated router will form a full adjacency with the other OSPF neighbors.

• OSPF devices will be in the Full state only with the DR and BDR.
• OSPF devices will be in the 2 Way state if the neighbor is neither a DR nor BDR; this is expected behavior, as per the RFC for broadcast networks.

On a ScreenOS firewall, you can run the  get vr <vr-name> protocol ospf int CLI command to check which device is the DR (Designated Router) and the BDR (Backup Designated Router). On the firewall,you can run the get vr <vr-name> protocol ospf nei CLI command to check if the firewall has formed the neighborship and with which firewall.

The priority determines the DR and the BDR; but a new device with higher priority will not assume the DR role, until the next election. This can be configured on the OSPF interface. But, if the device with the higher priority has preemt configured, it can trigger the election and become the DR, as and when it comes up.

On a Junos OS router, check these outputs to determine the DR and BDR for the segment:

If the OSPF neighbor is in a routing-instance, then use:

A DRother router will stay in a two way state with other DRother routers.

2024-10-25: minor non tech changes

2020-03-25: Article reviewed for accuracy; it is valid and accurate.