3 Replies Latest reply on Feb 20, 2013 11:04 AM by noor

    Setting OSPF interface as Passive

    telecom116 New Member

      Is there an AOS command to set a particular interface as an OSPF passive interface, where it doesn't send HELLOs on that interface (good from a security standpoint, especially where there are no downstream routers to form an adjacency with).  However, I need to OSPF advertise these subnets, so the subnet has to be in a OSPF Network statement.

        • Re: Setting OSPF interface as Passive
          levi Employee

          telecom116:

           

          Thank you for asking this question in the support community.  ADTRAN does not have an "OSPF passive-interface" command, currently.  However, if your main goal is to provide OSPF security, then one option would be to enable OSPF authentication on the interface.  In addition to providing security, this would also prevent unwanted OSPF adjacencies from being formed with downstream OSPF routers.

           

          Here is a sample configuration:

           

          interface eth 0/2
             ip ospf authentication message-digest
             ip ospf message-digest-key 1 md5 PASSWORD


          Please, do not hesitate to reply to this post with any additional questions or information.  I will be happy to help in any way I can.

           

          Levi

          • Re: Setting OSPF interface as Passive
            levi Employee

            telecom116:

             

            I went ahead and flagged this post as “Assumed Answered.”  If any of the responses on this thread assisted you, please mark them as either Correct or Helpful answers with the applicable buttons.  This will make them visible and help other members of the community find solutions more easily.  If you still need assistance, I would be more than happy to continue working with you on this - just let me know in a reply.

             

            Levi

              • Re: Setting OSPF interface as Passive
                Employee

                I went ahead and flagged the "Correct Answer" on this post to make it more visible and help other members of the community find solutions more easily. If you don't feel like the answer I marked was correct, feel free to come back to this post and unmark it and select another in its place with the applicable buttons.  If you still need assistance, we would be more than happy to continue working with you on this - just let us know in a reply.

                 

                Thanks,

                Noor