Configuring Ospf Authentication - HP FlexFabric 12900E Series Configuration Manual

Configuring OSPF authentication

Perform this task to configure OSPF area and interface authentication.
OSPF adds the configured key into sent packets, and uses the key to authenticate received packets.
Only packets that pass the authentication can be received. If a packet fails the authentication, the
OSPF neighbor relationship cannot be established.
If you configure OSPF authentication for both an area and an interface in that area, the interface
uses the OSPF authentication configured on it.
Configuring OSPF area authentication
You must configure the same authentication mode and key on all the routers in an area.
To configure OSPF area authentication:
Step
1. Enter system view.
2. Enter OSPF view.
3. Enter area view.
4. Configure
authentication mode.
Configuring OSPF interface authentication
You must configure the same authentication mode and key on both the local interface and its peer
interface.
To configure OSPF interface authentication:
Step
1. Enter system view.
2. Enter interface view.
3. Configure
authentication mode.
Command
system-view
ospf [ process-id | router-id router-id |
vpn-instance vpn-instance-name ] *
area area-id
•
Configure
authentication-mode { hmac-md5 |
md5 } key-id { cipher | plain } string
•
Configure
area
authentication-mode
{ cipher | plain } string
•
Configure keychain authentication:
authentication-mode
keychain-name
Command
system-view
interface interface-type interface-number
•
Configure
ospf authentication-mode simple
{ cipher | plain } string
•
Configure
interface
ospf
{ hmac-md5 | md5 } key-id { cipher |
plain } string
•
Configure keychain authentication:
ospf authentication-mode keychain
keychain-name
88
MD5 authentication:
simple authentication:
simple
keychain
simple authentication:
MD5 authentication:
authentication-mode
Remarks
N/A
N/A
N/A
By default, no
authentication is
configured.
For information about
keychains, see Security
Configuration Guide.
Remarks
N/A
N/A
By default, no
authentication is
configured.
For information about
keychain, see Security
Configuration Guide.