Table of Contents
Advertisement
Configuring prefix suppression for an interface
Step
1.
Enter system view.
2.
Enter interface
view.
3.
Enable prefix
suppression for the
interface.
Configuring OSPFv3 authentication
OSPFv3 uses keychain authentication to prevent routing information from being leaked and routers
from being attacked.
OSPFv3 adds the Authentication Trailer option into outgoing packets, and uses the authentication
information in the option to authenticate incoming packets. Only packets that pass the authentication
can be received. If a packet fails the authentication, the OSPFv3 neighbor relationship cannot be
established.
The authentication mode specified for an OSPFv3 interface has a higher priority than the mode
specified for an OSPFv3 area.
Configuring OSPFv3 area authentication
Step
1.
Enter system view.
2.
Enter OSPFv3 view.
3.
Enter OSPFv3 area view.
4.
Specify an authentication
mode for the area.
Configuring OSPFv3 interface authentication
Step
1.
Enter system view.
2.
Enter interface view.
3.
Specify an authentication
mode for the interface.
Command
system-view
interface interface-type interface-number
ospfv3 prefix-suppression [ disable ]
[ instance instance-id ]
Command
system-view
ospfv3 [ process-id | vpn-instance
vpn-instance-name ] *
area area-id
authentication-mode keychain
keychain-name
Command
system-view
interface interface-type
interface-number
ospfv3 authentication-mode
keychain keychain-name [ instance
instance-id ]
443
Remarks
N/A
N/A
By default, prefix suppression
is disabled for an interface.
Remarks
N/A
N/A
N/A
By default, no authentication is
performed for the area.
For more information about
keychains, see Security
Configuration Guide.
Remarks
N/A
N/A
By default, no authentication is
performed for the interface.
For more information about
keychains, see Security
Configuration Guide.
Advertisement
Table of Contents
Troubleshooting
