Wireless Access

last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

Passive OSPF interface on Mobility Switch?

This thread has been viewed 0 times
  • 1.  Passive OSPF interface on Mobility Switch?

    Posted May 20, 2013 07:18 PM

    All,

     

    Is there a way to create a passive interface within an OSPF profile with a Mobility Access Switch? It may be called something different in Aruba parlance - a passive interface is a layer 3 interface that cannot neighbor up with other OSPF devices. I tried setting this up the other day without any luck.

     

    Thanks!

     

    -Mike 



  • 2.  RE: Passive OSPF interface on Mobility Switch?

    EMPLOYEE
    Posted May 20, 2013 08:06 PM

    There is no passive interface per-say, but if you are trying to stop route advertisements and hellos from going out client VLANs, you can use the new redistribute VLAN function that was added in 7.2.

     

    You no longer have to apply OSPF profiles to the individual SVIs. Instead, run the following command under the global ospf-profile:

     

    redistribute vlan <vlan-ids> 

    (where vlan-ids are the client facing vlans)

     



  • 3.  RE: Passive OSPF interface on Mobility Switch?

    Posted May 26, 2013 11:55 PM

    Hi Tim,

     

    Thanks for that info! I know someone who is getting ready to deploy a lot of S3500s and that redistribute VLAN command will save him some time.

     

    It sounds like the best thing to do, for the time being, is to write a small ACL that blocks the OSPF multicast groups. Have you tried that at Brandeis?

     

    Thanks!

     

    -Mike



  • 4.  RE: Passive OSPF interface on Mobility Switch?

    EMPLOYEE
    Posted May 28, 2013 10:54 AM

    We have not tried that but it should work.