Setting Passive Interfaces; Controlling Advertising And Processing In Routing Updates - Cisco 3845 - Security Bundle Router Software Manual
Software configuration guide
Hide thumbs
Also See for 3845 - Security Bundle Router:
- Manual (94 pages) ,
- Quick start manual (38 pages) ,
- Hardware installation manual (418 pages)
Table of Contents
Advertisement
Chapter 29
Configuring IP Unicast Routing
Setting Passive Interfaces
To prevent other routers on a local network from dynamically learning about routes, you can use the
passive-interface router configuration command to keep routing update messages from being sent
through a router interface. When you use this command in the OSPF protocol, the interface address you
specify as passive appears as a stub network in the OSPF domain. OSPF routing information is neither
sent nor received through the specified router interface.
In networks with many interfaces, to avoid having to manually set them as passive, you can set all
interfaces to be passive by default by using the passive-interface default router configuration command
and manually setting interfaces where adjacencies are desired.
Beginning in privileged EXEC mode, follow these steps to configure passive interfaces:
Command
Step 1
configure terminal
Step 2
router {bgp | rip | ospf | eigrp}
Step 3
passive-interface interface-id
Step 4
passive-interface default
Step 5
no passive-interface interface type
Step 6
network network-address
Step 7
end
Step 8
copy running-config startup-config
Use a network monitoring privileged EXEC command such as show ip ospf interface to verify the
interfaces that you enabled as passive, or use the show ip interface privileged EXEC command to verify
the interfaces that you enabled as active.
To re-enable the sending of routing updates, use the no passive-interface interface-id router
configuration command. The default keyword sets all interfaces as passive by default. You can then
configure individual interfaces where you want adjacencies by using the no passive-interface router
configuration command. The default keyword is useful in Internet service provider and large enterprise
networks where many of the distribution routers have more than 200 interfaces.
Controlling Advertising and Processing in Routing Updates
You can use the distribute-list router configuration command with access control lists to suppress routes
from being advertised in routing updates and to prevent other routers from learning one or more routes.
When used in OSPF, this feature applies to only external routes, and you cannot specify an interface
name.
You can also use a distribute-list router configuration command to avoid processing certain routes listed
in incoming updates. (This feature does not apply to OSPF.)
Beginning in privileged EXEC mode, follow these steps to control the advertising or processing of
routing updates:
OL-23400-01
Purpose
Enter global configuration mode.
Enter router configuration mode.
Suppress sending routing updates through the specified Layer 3
interface.
(Optional) Set all interfaces as passive by default.
(Optional) Activate only those interfaces that need to have
adjacencies sent.
(Optional) Specify the list of networks for the routing process. The
network-address is an IP address.
Return to privileged EXEC mode.
(Optional) Save your entries in the configuration file.
Cisco ME 3800X and 3600X Switch Software Configuration Guide
Configuring Protocol-Independent Features
29-101
- Quick Links:
- Performance Features
Hide quick links:
Advertisement
Chapters
Table of Contents
Troubleshooting
