Question 370
Two OSPF routers share an Ethernet subnet, have matching area 0 and Hello/Dead timers, and can ping each other. A new interface ACL permits ICMP but denies IP protocol 89 between the peers. The OSPF neighbor disappears. What needs attention?
Explanation
Correct Answer
OSPFv2 exchanges protocol 89 packets directly over IP rather than using TCP or UDP ports. Successful ICMP ping proves some Layer 3 reachability but not that OSPF Hello traffic can pass the ACL. The filter must allow the routing control protocol on the neighbor-facing segment for adjacency to form.
Incorrect Answers
OSPF is its own IP protocol number, not a TCP service whose destination port happens to be 89. A TCP ACE will not pass the actual OSPF Hellos.
DNS settings do not control OSPF packet admission or area negotiation. The stated filter is directly blocking the routing protocol.
Administrative distance affects preference of learned routes, not the receipt of protocol 89 Hellos. The neighbor cannot form while control packets are denied.