I tried the same thing and at first, it worked, but then started to fail again with the same error. In my case, I'm using a Duo RADIUS Proxy to enable MFA for VPN connections. Prior to 2.7, this worked flawlessly by using a RADIUS sequence pointing t...

Sorry for the delay. We upgraded to 16.3.8 and the issue has been resolved. It was a bug in the 16.3.6 code.

running the command "ip ospf lls disable" on the interface facing the Palo Alto did not resolve the issue. We're planning on upgrading the 3850 code to 16.3.8 next week and I'll update this thread with the results. @Stephen Buck wrote:While we are wa...

While we are waiting to upgrade the 3850 code to 16.3.8, we've implemented the "ip ospf lls disable" on the interface facing the Palo to see if the issue goes away. We'll remove the command a couple of days before the switch code upgrade to verify th...

We're having a similar issue. In our case, we're running a pair of Palo 3220's in an Active/Passive HA running 8.1.6-h2 and a pair of 3850-24-XUs running 16.3.6. The Palo Alto is configured with two OSPF areas: 0 and xx which is a stub area. We're se...