Layer 3 Switches and EIGRP/OSPF passive interfaces
Pupil
Member Posts: 168
in CCNA & CCENT
I've setup the topology pictured in the attachment. All of the switches are on a management VLAN 99. What is the best way to prevent the Layer 3 Switches from sending EIGRP or OSPF packets out to their connected VLANs? I tried using passive-interface vlan X, but if I do that then the two Layer 3 switches can not form an adjacency. I could create a separate VLAN for just these two switches or make the link between them a non-switchport and create their own subnet, then set all the vlan interfaces to passive.
2015 Certification Goals: CCNA: Routing & Switching FONT=courier new][SIZE=2][COLOR=#ff0000]X[/COLOR][/SIZE][/FONT, CCNA: Security FONT=courier new][SIZE=2][FONT=courier new][SIZE=2][COLOR=#ff0000]X[/COLOR][/SIZE][/FONT][/SIZE][/FONT, Security+ COLOR=#ff0000]X[/COLOR
Comments
-
Ryuksapple84 Member Posts: 183Usually you have a management only vlan and you can add devices to that vlan for the purpose of management only traffic. If you extend the vlan, you can just extend it as a L2 vlan over designated links/portchannels.
Let me know if that works for you.Eating humble pie. -
Pupil Member Posts: 168Learned from a colleague that the trick is to use passive-interface default and then manually set no passive-interface X for which interfaces to allow EIGRP/OSPF/RIP hello packets to go out on.2015 Certification Goals: CCNA: Routing & Switching FONT=courier new][SIZE=2][COLOR=#ff0000]X[/COLOR][/SIZE][/FONT, CCNA: Security FONT=courier new][SIZE=2][FONT=courier new][SIZE=2][COLOR=#ff0000]X[/COLOR][/SIZE][/FONT][/SIZE][/FONT, Security+ COLOR=#ff0000]X[/COLOR
-
RouteMyPacket Member Posts: 1,104Learned from a colleague that the trick is to use passive-interface default and then manually set no passive-interface X for which interfaces to allow EIGRP/OSPF/RIP hello packets to go out on.
I prefer to use this as well..this way I know for a fact which interfaces I am allow advertisements out.Modularity and Design Simplicity:
Think of the 2:00 a.m. test—if you were awakened in the
middle of the night because of a network problem and had to figure out the
traffic flows in your network while you were half asleep, could you do it?