Area Authentication Ipsec Spi - Allied Telesis AT-AR3050S Command Reference Manual

Next-generation firewall
Hide thumbs Also See for AT-AR3050S:
Table of Contents

Advertisement

OSPF
3
IP
6 C
V
FOR
V
OMMANDS

AREA AUTHENTICATION IPSEC SPI

area authentication ipsec spi
Overview
Use this command in Router Configuration mode to enable either MD5
(Message-Digest 5) or SHA1 (Secure Hash Algorithm 1) authentication for a
specified OSPF area.
Use the no variant of this command in Router Configuration mode to disable the
authentication configured for a specified OSPF area.
area <area-id> authentication ipsec spi <256-4294967295> {md5
Syntax
<MD5-key>|sha1 <SHA1-key>}
no area <area-id> authentication ipsec spi <256-4294967295>
Mode
Router Configuration
Usage
Use this command on an OSPFv3 area, use the
ipsec spi
Parameters Index) value on all interfaces that connect to the same link. SPI values
are used by link interfaces. Use a different SPI value for a different link interface
when using OSPFv3 with link interfaces.
Use the sha1 keyword to choose SHA-1 authentication instead of entering the
md5 keyword to use MD5 authentication. The SHA-1 algorithm is more secure
than the MD5 algorithm. SHA-1 uses a 40 hexadecimal character key instead of a
32 hexadecimal character key as used for MD5 authentication.
See the
and examples.
C613-50077-01 REV A
Parameter
Description
<area-id>
The OSPF area that you are specifying the summary route default-
cost for. This can be entered in either dotted decimal format or
normal decimal format. Use one of the following formats:
<ip-addr>
<0-4294967295>
For example, the values 0.0.1.2 and decimal 258 would both define
the same area-ID.
<256-
Specify an SPI (Security Parameters Index) value in the range 256 to
4294967295>
4294967295, entered as a decimal integer.
md5
Specify the MD5 (Message-Digest 5) hashing algorithm.
<MD5-key>
Enter an MD5 key containing up to 32 hexadecimal characters.
sha1
Specify the SHA-1 (Secure Hash Algorithm 1) hashing algorithm.
<SHA1-key>
Enter an SHA-1 key containing up to 40 hexadecimal characters.
command on an OSPFv3 area virtual link. Configure the same SPI (Security
OSPFv3 Feature Overview and Configuration Guide
Command Reference for AT-AR3050S
AlliedWare Plus™ Operating System - Version 5.4.5-2.x
OSPF area-ID expressed in IPv4 address
format A.B.C.D.
OSPF area-ID expressed as a decimal number
within the range shown.
area virtual-link authentication
for more information
844

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents