Examples - Cisco ASR 9000 Series Routing Configuration Manual

Configuring Authentication Message Digest Management for OSPF
Command or Action
Step 5
interface type interface-path-id
Example:
RP/0/RSP0/CPU0:router(config-ospf-ar)#
interface GigabitEthernet0/4/0/1
Step 6
authentication message-digest keychain keychain
Example:
RP/0/RSP0/CPU0:router(config-ospf-ar-if)#
authentication message-digest keychain
ospf_int1
Step 7
commit

Examples

The following example shows how to configure the keychain ospf_intf_1 that contains five key IDs. Each
key ID is configured with different send-lifetime values; however, all key IDs specify the same text string
for the key.
key chain ospf_intf_1
key 1
send-lifetime 11:30:30 May 1 2007 duration 600
cryptographic-algorithm MD5T
key-string clear ospf_intf_1
key 2
send-lifetime 11:40:30 May 1 2007 duration 600
cryptographic-algorithm MD5
key-string clear ospf_intf_1
key 3
send-lifetime 11:50:30 May 1 2007 duration 600
cryptographic-algorithm MD5
key-string clear ospf_intf_1
key 4
send-lifetime 12:00:30 May 1 2007 duration 600
cryptographic-algorithm MD5
key-string clear ospf_intf_1
key 5
send-lifetime 12:10:30 May 1 2007 duration 600
cryptographic-algorithm MD5
key-string clear ospf_intf_1
The following example shows that keychain authentication is enabled on the Gigabit Ethernet 0/4/0/1 interface:
show ospf 1 interface GigabitEthernet0/4/0/1
GigabitEthernet0/4/0/1 is up, line protocol is up
Cisco ASR 9000 Series Aggregation Services Router Routing Configuration Guide, Release 5.3.x
482
Internet Address 100.10.10.2/24, Area 0
Process ID 1, Router ID 2.2.2.1, Network Type BROADCAST, Cost: 1
Transmit Delay is 1 sec, State DR, Priority 1
Designated Router (ID) 2.2.2.1, Interface address 100.10.10.2
Backup Designated router (ID) 1.1.1.1, Interface address 100.10.10.1
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
Hello due in 00:00:02
Index 3/3, flood queue length 0
Purpose
Enters interface configuration mode and associates one or more
interfaces to the area.
Configures an MD5 keychain.
In the example, the ospf_intl keychain must be
Note
configured before you attempt this step.
Implementing OSPF