passive interface : Bloquer l'envoi des mises à jour de routage dynamique (rip-eigrp-ospf) sur un interface, pour plus de sécurité sur notre topologie.
Règle :
- passive interface RIP
Router(config)#router rip
Router(config-router)#passive-interface type-interface numéro-interface
- passive-interface EIGRP
Router(config)#router eigrp numéro-système-autonome
Router(config-router)#passive-interface type-interface numéro-interface
- passive-interface OSPF
Router(config)#router ospf process-id
Router(config-router)#passive-interface type-interface numéro-interface
- Pour supprimer cette commande :
Router(config-router)#no passive-interface type-interface numéro-interface
Exemple :
sur Spade
Spade>enable
Spade#configure terminal
Spade(config)#interface fastEthernet 0/0
Spade(config-if)#no shutdown
Spade(config-if)#ip address 172.16.1.1 255.255.255.0
Spade(config-if)#exit
Spade(config)#interface fastEthernet 1/0
Spade(config-if)#ip address 192.168.12.1 255.255.255.0
Spade(config-if)#no shutdown
Spade(config)#router eigrp 1
Spade(config-router)#network 192.168.12.0 0.0.0.255
Spade(config-router)#network 172.16.1.0 0.0.0.255
Spade(config-router)#passive-interface Fa 0/0
Spade(config-router)#exit
Spade#configure terminal
Spade(config)#interface fastEthernet 0/0
Spade(config-if)#no shutdown
Spade(config-if)#ip address 172.16.1.1 255.255.255.0
Spade(config-if)#exit
Spade(config)#interface fastEthernet 1/0
Spade(config-if)#ip address 192.168.12.1 255.255.255.0
Spade(config-if)#no shutdown
Spade(config)#router eigrp 1
Spade(config-router)#network 192.168.12.0 0.0.0.255
Spade(config-router)#network 172.16.1.0 0.0.0.255
Spade(config-router)#passive-interface Fa 0/0
Spade(config-router)#exit
sur Hearts
Hearts>enable
Hearts#configure terminal
Hearts(config)#interface fastEthernet 0/0
Hearts(config-if)#no shutdown
Hearts(config-if)#ip address 192.168.12.2 255.255.255.0
Hearts(config-if)#exit
Hearts(config)#interface FastEthernet 1/0
Hearts(config-if)#no shutdown
Hearts(config-if)#ip address 192.168.23.2 255.255.255.0
Hearts(config-if)#exit
Hearts(config)#router eigrp 1
Hearts(config-router)#network 192.168.12.0 0.0.0.255
Hearts(config-router)#network 192.168.23.0 0.0.0.255
Hearts(config-router)#exit
Hearts#configure terminal
Hearts(config)#interface fastEthernet 0/0
Hearts(config-if)#no shutdown
Hearts(config-if)#ip address 192.168.12.2 255.255.255.0
Hearts(config-if)#exit
Hearts(config)#interface FastEthernet 1/0
Hearts(config-if)#no shutdown
Hearts(config-if)#ip address 192.168.23.2 255.255.255.0
Hearts(config-if)#exit
Hearts(config)#router eigrp 1
Hearts(config-router)#network 192.168.12.0 0.0.0.255
Hearts(config-router)#network 192.168.23.0 0.0.0.255
Hearts(config-router)#exit
sur Clubs
Clubs>enable
Clubs#configure terminal
Clubs(config)#interface fastEthernet 0/0
Clubs(config-if)#no shutdown
Clubs(config-if)#ip address 172.16.2.3 255.255.255.0
Clubs(config-if)#exit
Clubs(config)#interface fastEthernet 1/0
Clubs(config-if)#no shutdown
Clubs(config-if)#ip address 192.168.23.3 255.255.255.0
Clubs(config-if)#exit
Clubs(config)#router eigrp 1
Clubs(config-router)#network 172.16.2.0 0.0.0.255
Clubs(config-router)#network 192.168.23.0 0.0.0.255
Clubs(config-router)#passive-interface Fa 0/0
Clubs(config-router)#exit
Clubs#configure terminal
Clubs(config)#interface fastEthernet 0/0
Clubs(config-if)#no shutdown
Clubs(config-if)#ip address 172.16.2.3 255.255.255.0
Clubs(config-if)#exit
Clubs(config)#interface fastEthernet 1/0
Clubs(config-if)#no shutdown
Clubs(config-if)#ip address 192.168.23.3 255.255.255.0
Clubs(config-if)#exit
Clubs(config)#router eigrp 1
Clubs(config-router)#network 172.16.2.0 0.0.0.255
Clubs(config-router)#network 192.168.23.0 0.0.0.255
Clubs(config-router)#passive-interface Fa 0/0
Clubs(config-router)#exit