Configuring The Authentication Mode - Huawei S6700 Series Configuration Manual

S6700 Series Ethernet Switches
Configuration Guide - IP Routing
Step 4 (Optional) Run:
gtsm log drop-packet { slot-id | all }
The log function is enabled on the specified board in the system view. The information that
GTSM drops packets is recorded in the log.
----End

4.11.3 Configuring the Authentication Mode

OSPF supports packet authentication. Only the packets that pass the authentication can be
received. If packets fail to pass the authentication, the neighbor relationship cannot be
established.
Context
In area authentication, all the switches in an area must use the same area authentication mode
and password. For example, the authentication mode of all devices in Area 0 is simple
authentication and the password is abc.
The interface authentication mode is used among neighbor routers to set the authentication mode
and password. Its priority is higher than that of the area authentication mode.
Procedure
l
Issue 01 (2012-03-15)
NOTE
If the default action is configured but the GTSM policy is not configured, GTSM does not take effect.
Configuring the Area Authentication Mode
1. Run:
system-view
The system view is displayed.
2. Run:
ospf [ process-id ]
The OSPF process view is displayed.
3. Run:
area area-id
The OSPF area view is displayed.
4. Run the following commands to configure the authentication mode of the OSPF area
as required:
– Run:
authentication-mode simple [ [ plain ] plain-text | cipher cipher-
text ]
The simple authentication is configured for the OSPF area.
– Run:
authentication-mode { md5 | hmac-md5 } [ key-id { plain plain-text |
[ cipher ] cipher-text } ]
The MD5 authentication is configured for the OSPF area.
OSPF supports packet authentication. Only the OSPF packets passing the
authentication can be received; otherwise, the neighbor relationship cannot be
established normally.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
4 OSPF Configuration
130