Hi Brian,Ihave a router with two interfaces running both RIP and EIGRP as follows:
Interface IP-Address OK? Method Status Prot
Serial0 172.16.5.5 YES manual up upSerial1172.16.1.5 YES manual up up
router rip network 172.16.0.0
!
router eigrp 2001 network 172.16.0.0S0 should be RIP only, and S1 should be EIGRP only. RIP should not listen to broadcasts on S1
andEIGRP should not listen to multicasts on S0. How do I do that?SinceEIGRP uses periodic hellos to establish adjacency, passive-interface is sufficient in this case. Since passive-interface in EIGRP suppresses the generation of hellos out an interface, adjacency cannot be established, and therefore there can be no exchange of routes.
Aneven easier method of choosing which specific interfaces are running EIGRP is to use a wildcard mask when you use the network statement. The ‘network’ statement in IGP does not actually mean what networks you are advertising, it means what interfaces you are running the protocol on. If you only want to run EIGRP on your Serial 1 interface with an address of 172.16.1.5, use the following syntax:
router eigrp 2001
network 172.16.1.5 0.0.0.0This means that only the interface 172.16.1.5 is running EIGRP. The opposite of this most specific syntax would be:
router eigrp 2001
network 0.0.0.0 255.255.255.255This means that all interfaces are running EIGRP.
With RIP, the case is different than EIGRP. Since RIP does not use periodic hellos like EIGRP, OSPF, or IS-IS, passive-interface simply means that you will not send any routing updates out an interface. This does not mean that you will not receive routing updates in that interface. To prevent learning routes in an interface using RIP, you could use a distribute-list that denies everything (which would also work for EIGRP), or use an access-list that denies RIP altogether. Take the following examples:
access-list 1 deny any
!
router rip network 172.16.0.0
distribute-list 1 in serial 1or
access-list 100 deny udp any eq rip any eq rip
access-list 100 permit ip any any!interface serial 1
ip access-group 100 inBoth would accomplish the same goal.