OSPF Mcast Hellos being dropped

[paprichaat]

Hi ,

I need to enable OSPF on a cluster interface (2 x Nokia IP560 using VRRP, MC)
. I have ensured that the 224.0.0.5 net is allowed as a destination on the Nokia physical interfaces and have no anti-spoof messages in the log. I can see via tcpdump the mcast hellos from each of the nokia interfaces to the other; but they do not form any adjacency (i.e. become neighbours) whilst the security policy is enabled! Take off the policy and wham , they are neighbours. But for the life of me, I cannot see any issue in Tracker or any other SK or document that says there is something else to make this work. Using NGX R65 build 436 (no HFA...but cant see any fix pretaining to OSPF in Release notes).

Any ideas ??

Thanks !

[melipla]

You also need to allow the " ?? ospf " service. Also, my multicast address was different than yours, it was 224.0.0.2.