Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
After talking to TAC, this is expected behavior. The standby firewall is trying to encrypt the traffic back through the ravpn tunnel, but can't. This can be resolved if you use the dedicated management interface and don't put the magement-only comman...
I tried the same thing and at first, it worked, but then started to fail again with the same error. In my case, I'm using a Duo RADIUS Proxy to enable MFA for VPN connections. Prior to 2.7, this worked flawlessly by using a RADIUS sequence pointing t...
running the command "ip ospf lls disable" on the interface facing the Palo Alto did not resolve the issue. We're planning on upgrading the 3850 code to 16.3.8 next week and I'll update this thread with the results. @Stephen Buck wrote:While we are wa...
While we are waiting to upgrade the 3850 code to 16.3.8, we've implemented the "ip ospf lls disable" on the interface facing the Palo to see if the issue goes away. We'll remove the command a couple of days before the switch code upgrade to verify th...