OSPF not received on RED client XG

Question

I am having an issue with one RED tunnel and OSPF. I have a couple of sites with XG devices that I use OSPF for my subnets already, however this one device is not working and I can't figure out why it is not. 
 My XG acting as the RED server shows both in and out traffic using a packet capture for 'proto OSPFIGP': 
 
 My remote XG acting as the RED Client only shows outbound OSPF:

The server device doesn't show the remote device as a neighbor, but the client device does show the server device as a neighbor but never leaves the initialization state: 
 
 I've put static routes in place and can get traffic to pass over the RED tunnel, but it looks like the OSPF packets are not even getting received on the client device when I run a packet captuer. Has anyone seen this or know what things I should be checking? I've never seen this before and I am running similar configurations on other sites already.

Mark-Cyber83 · Accepted Answer

So here's the fix for this, they have a hard limit set to 20 for the buffer on the interfaces on the back-end, why they have a hard limit of 20 makes no sense, no one is going to build small OSPF networks over RED tunnels! its a Quagga limitation that can be increased on the backend! 
 problem: https://ideas.sophos.com/forums/330219-xg-firewall/suggestions/35535115-fix-the-ospf-interfaces-limit-about-10-20 
 Solution: https://support.sophos.com/support/s/article/KB-000036757?language=en_US 
 Cyber83

Mark-Cyber83 · Answer

setup the red tunnels exactly like in this KB: 
 
 https://support.sophos.com/support/s/article/KB-000038170?language=en_US

OSPF not received on RED client XG

Top Replies