Skip to main content
MisterAG
New Member
October 11, 2012
Question

CLI Command to add OSPF Passive Interface

  • October 11, 2012
  • 3 replies
  • 11051 views
Right now, in order to add a passive interface to OSPF I need to enumerate all of the existing passive interfaces, plus the new one. Am I missing an easier way, perhaps a passive-interface-default or passive-interface-default-except option? Example: I currently have this config: config router ospf set passive-interface VLAN10 VLAN20 VLAN30 end in order to add VLAN40, I need to know all of the existing passive interfaces, and tack on VLAN40 config router ospf set passive-interface VLAN10 VLAN20 VLAN30 VLAN40 end Is there a way to simply tack on VLAN40 to the existing config?

    3 replies

    g3rman
    New Member
    December 3, 2012
    I' m pretty sure you' re thinking of the equivalent Cisco or Juniper commands where you set OSPF to have all interfaces passive by default and then enable specific interfaces. I combed through the CLI reference and it appears that with the Fortinet implementation you have to manually make each interface passive and there is no easier, default passive way.
    FortiRack_Eric
    New Member
    December 3, 2012
    I can confirm there' s no easier way to do this. You have to make a procedure (mental note) to add a network to the passive interfaces every time you add new network that doesn' t participate in the OSPF network.
    Carl_Wallmark
    New Member
    December 3, 2012
    Hi, In FOS 5.0 there is a new CLI command " append" You can use like this: config router ospf append passive-interface VLAN40 end This will simply add VLAN40 to the interface.
    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.