I have a 4 node spine leaf topology with tow host connected. One host each connected to the leaves. Each host is also hosting quagga and capable of operating as a router.
On the (CentOS 7) host OSPF will not converge until I disable firewalld. The status below is present on the leaf.
Neighbor ID Pri State Dead Time Address Interface RXmtL RqstL DBsmL 126.96.36.199 1 Init/DROther 37.933s 10.6.1.2 swp3:10.6.1.1 0 0 0
The host remains in the init state and only converges after disabling firewalld. I don’t want to stop firewalld; How can I configure firewalld to allow ospf messages?
OSPF is IP protocol 89, so you need to allow this protocol:
firewall-cmd --add-protocol=ospf [--permanent] [--zone=whatever]
This work is licensed under a Creative Commons Attribution-ShareAlike 3.0 Unported License.