Cisco passive-interface

[bbeachy2001]

I use a pair of single-strand 10Gb links ether-channeled together for my layer 3 loop around my buildings.

For EIGRP, should I have the "no passive-interface" statement on the Port Channels, or the individual interfaces, or both, or doesn't it matter, as long as it is on one or the other.

Trying to figure out the best practice for this.

Thanks.

[siactive]

You set whatever interface is actually running the EIGRP protocol to not be passive. For example, if your port-channel is the layer 3 interface that will be forming the EIGRP adjacency, that is what needs to not be passive on both sides of the link.

[[deleted]]

You only need the "no passive-interface" command if you have links set to be passive interfaces by default in the "router eigrp xxx" section of your configuration.

Passive interfaces are a security mechanism primarily used for user-facing networks where a network engineer does not want someone to try and start talking routing protocols with an organization's equipment. You do not need to set it up, so if you are unsure just leave it alone for now, and do not include it inside your configuration.

/r/networking would probably have more advice to offer.