Cisco ZBF Self Zone: One WAN-to-Self Zone-Pair Dropped OSPF in 8 Seconds and eBGP After It
A WAN-to-self ZBF policy meant to restrict management kept SSH working, but OSPF hit its dead timer about 8 seconds later and loopback eBGP followed on hold-time expiry. OSPF pass and BGP inspect on both self zone-pairs fixed it.