06-26-2012 02:37 PM - edited 03-07-2019 07:28 AM
Hi Everyone,
I have question here regarding OSPF passive interface.
We have remote office router running ospf.
Int gi0/0 is wan interface running ospf.
Then we have int gi0/1 and few vlans cretaed under it.
we have configured passive-int default under router ospf.
We have config sub interfaces under gi0/1 which has vlans defined.
Some have backup wi fi connection and other has wi fi connection to other site.
My question is should i put vlan which has wi fi connection to other site under
router ospf
no passive interface gi0/1.1 ?????????????????????????????????????????????
gi0/1.1 is wi fi link to some other site
thanks
mahesh
Solved! Go to Solution.
06-26-2012 04:52 PM
Hi,
The only interface where you shouldnt be using passive interface feature are the ones where u are talking ospf...
why would you want the wifi connection to be sending ospf´s hellos?
Use the passive interface feature to prevent innecesary traffic to be flooded and for security reasons... you dont want hellos reaching not trusted hosts...
Regards...
Wil
06-27-2012 02:19 AM
Hello Mahesh,
if there is another router in that other remote site and you want to have an OSPF adjacency with that remote site router you need to declare the interface as no passive as you have changed the default to passive.
If there is no need for OSPF neighborship on the link you can leave it passive.
Hope to help
Giuseppe
06-27-2012 09:11 AM
Mahesh
The command as you give it is correct. You need to specify the subinterface and not the physical interface for this situation.
HTH
Rick
06-26-2012 04:52 PM
Hi,
The only interface where you shouldnt be using passive interface feature are the ones where u are talking ospf...
why would you want the wifi connection to be sending ospf´s hellos?
Use the passive interface feature to prevent innecesary traffic to be flooded and for security reasons... you dont want hellos reaching not trusted hosts...
Regards...
Wil
06-27-2012 02:19 AM
Hello Mahesh,
if there is another router in that other remote site and you want to have an OSPF adjacency with that remote site router you need to declare the interface as no passive as you have changed the default to passive.
If there is no need for OSPF neighborship on the link you can leave it passive.
Hope to help
Giuseppe
06-27-2012 03:58 AM
Mahesh
I think that Giuseppe is quite right. I would approach it slightly differently and offer this explanation. You need to use OSPF network statements to include interfaces whose subnets you want to advertise. Having included the interface in OSPF you need to decide whether there are any routers on that link with which you want to exchange OSPF updates. If there are routers on that link (typically on links connecting to other sites or to other routers within your site) then that interface needs to be not passive. If there are no routers on that link to exchange OSPF then make the interface passive.
HTH
Rick
06-27-2012 08:32 AM
Hi Rick,
Thanks for reply.
I fig out we need to establish ospf adj on vlan .
On router we have created sub interfaces for each vlan.
So under router ospf
no passive interface gi0/1.20 is vlan which we need to establish nei adj.
So my question is is above command ok ?
or i need to do gi0/1 ??
Thanks
MAhesh
06-27-2012 09:11 AM
Mahesh
The command as you give it is correct. You need to specify the subinterface and not the physical interface for this situation.
HTH
Rick
06-27-2012 09:15 AM
Hi Rick,
Thanks for prompt reply.
Best Regards
MAhesh
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide