350-401 · Question #883
A switch is attached to router R1 on its gig 0/0 interface. Fort security reasons, you want to prevent R1 from sending OSPF hellos to the switch. Which command should be enabled to accomplish this?
The correct answer is D. R1(config-router)#passive-interface Gig 0/0. To prevent a router from sending OSPF hello packets out a specific interface while still advertising its connected network, the passive-interface command should be configured under the OSPF router process.
Question
Options
- AR1(config-router)#ip ospf hello disable
- BR1(config-router)#ip ospf hello-interval 0
- CR1(config)#passive-interface Gig 0/0
- DR1(config-router)#passive-interface Gig 0/0
How the community answered
(23 responses)- A9% (2)
- B4% (1)
- C13% (3)
- D74% (17)
Why each option
To prevent a router from sending OSPF hello packets out a specific interface while still advertising its connected network, the `passive-interface` command should be configured under the OSPF router process.
`ip ospf hello disable` is not a valid or recognized Cisco IOS OSPF command to disable hello packets.
Setting `ip ospf hello-interval 0` is not a valid or functional command to disable hello packets; an interval of 0 is typically rejected or leads to unexpected behavior.
While `passive-interface Gig 0/0` is the correct command, it must be configured within the OSPF router configuration mode (`config-router`), not global configuration mode (`config`).
The command `passive-interface Gig 0/0` entered within OSPF router configuration mode (`config-router`) prevents OSPF hello packets from being sent out on the specified interface (Gig 0/0). This stops OSPF adjacency formation on that segment but still allows the directly connected network to be advertised into the OSPF domain, which is suitable for connecting to a switch where OSPF peering is not needed.
Concept tested: OSPF passive interface configuration
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_ospf/command/iro-cr-book/ospf-i2.html
Topics
Community Discussion
No community discussion yet for this question.