topic Re: OSPF Passive interface in FTDs in Network Security

OSPF Passive interface in FTDs

nishant-kumar018 — Sat, 26 Oct 2024 21:44:03 GMT

I know passive interface option is not available for OSPFv2 in FTDs but how can I suppress hello packets to an ospf interface in ftds ?

Re: OSPF Passive interface in FTDs

MHM Cisco World — Mon, 28 Oct 2024 19:52:41 GMT

https://www.cisco.com/c/en/us/td/docs/security/firepower/70/configuration/guide/fpmc-config-guide-v70/ospf_for_firepower_threat_defense.html

if you use FMC sure you can config passive OPSF interface

MHM

Re: OSPF Passive interface in FTDs

Cristian Matei — Mon, 28 Oct 2024 21:20:48 GMT

Hi,

Only by making it passive, which you can do also with FDM by using FlexConfigs. A workaround, in case you're looking to ensure no OSPF adjacencies ar build out a specific interface which is not passive, is to configure OSPF authentication (not clear-text obviously) for that interface.

Best,

Cristian.