D-Link DFL-1660 User Manual page 208

Network security firewall
Hide thumbs Also See for DFL-1660:
Table of Contents

Advertisement

4.5.3. OSPF Components
Private Router ID
Reference Bandwidth
RFC 1583 Compatibility
Debug
The debug options provides a troubleshooting tool by enabling the generation of additional OSPF
log events. These are described more fully in Section 4.5.7, "OSPF Troubleshooting".
Authentication
The primary purpose of OSPF authentication is to make sure that the correct OSPF router processes
are talking to each and it is therefore mostly used when there are multiple OSPF AS'. OSPF supports
the following authentication options:
No (null) authentication
Passphrase
MD5 Digest
Advanced
This is used in an HA cluster and is the ID for this firewall and
not the cluster.
Set the reference bandwidth that is used when calculating the
default interface cost for routes.
If bandwidth is used instead of specifying a metric on an OSPF
Interface, the cost is calculated using the following formula:
cost = reference bandwidth / bandwidth
Enable this if the NetDefend Firewall will be used in a
environment that consists of routers that only support RFC 1583.
Note: Authentication must be the same on all routers
If a passphrase or MD5 authentication is configured for OSPF, the passphrase or
authentication key must be the same on all OSPF Routers in that Autonomous System.
In other words, the OSPF authentication method must be replicated on all NetDefend
Firewalls.
Note
When running OSPF on a HA Cluster there is a
need for a private master and private slave Router
ID as well as the shared Router ID.
No authentication is used for OSPF protocol exchanges.
A simple password is used to authenticate all the OSPF
protocol exchanges.
MD5 authentication consists of a key ID and 128-bit key.
When MD5 digest is used the specified key is used to produce
the 128-bit MD5 digest.
This does NOT mean that the OSPF packets are encrypted. If
the OSPF traffic needs to be encrypted then they must be sent
using a VPN. For example, using IPsec. Sending OSPF
packets through an IPsec tunnel is discussed further in
Section 4.5.5, "Setting Up OSPF".
208
Chapter 4. Routing

Hide quick links:

Advertisement

Table of Contents
loading

This manual is also suitable for:

Dfl-2560Dfl-2560gDfl-260eDfl-860e

Table of Contents