Switch OSPF Disable on Vlan Interface

[QUARK TARO]

I have 9300 switches with OSPF running. I have both L3 and vlan interfaces. I need to disable OSPF on vlan interface. How do I do this? There is no passive interface for vlan interface.

[balaji.bandi]

what is the code running :

you can do default passive interface.

(config-router)#no passive-interface vlan ?
<1-4094> Vlan interface number

try :

FES-01(config-if)#ip ospf lls ?
disable disable LLS
<cr> <cr>

[MHM Cisco World]

I know this issue solve but
try this way 

Router OSPF 100

passive-interface default

 no passive-interface VlanX

[MHM Cisco World]

...

[David Ruess · Accepted solution]

Hello,

I believe you can apply the "ip ospf shutdown" command on the L3 interface.

[QUARK TARO]

This command worked but it also stopped OSPF advertising route on other interfaces.

My requirement is on vlan interface, OSPF packets should not be advertised but vlan network on other OSPF interfaces should be advertised. How can I do this?

[Jon Marshall · Accepted solution]

As already mentioned you need to use passive interface command. 

Are you sure it is not available on your switch ? 

Jon

[QUARK TARO]

Thank you. Yes, it's available. 

[David Ruess]

Good morning,

It looks like I have misunderstood the requirement. You said you wanted to DISABLE OSPF on the interface no stop it from forming adjacencies which I took to mean you also dont want it advertised as well since thats what disabling does with the shutdown command. Passive interface just stops it from sending/receiving hellos form my understanding but can still be advertised into the OSPF domain.

To beat a dead horse 'passive-interface' is what you need. But you said passive interface is NOT an option on the VLAN interface.

You can do passive interface in global routing mode but I was not able to see the option in interface mode for the VLAN interface but its usually there for physical interfaces:

Global:

conf t

router ospf <process-id>

passive-interface vlan <#>

Also note: If you used the 'shutdown' in global routing mode and not on the specific interface then it will infact disable OSPF for the networks you have advertised as its a 'global' command and affects everything. 

If the above command does not work can you show us a couple of output commands, specifically the following:

Show ip protocols

show run | s ospf

router ospf <process-id>

Switch(config-router)#passive-interface ?      <- show all options to see if vlan is on there.

[balaji.bandi]

sure different people different approach do to disable,

but we have suggest best use case, even you can deny using ACL - but that not the right apporach.

passive interface is best practice that what we suggested.