Configure Eigrp Route Authentication - Cisco ONS 15454 SDH Configuration Manual

Chapter 11 Configuring Networking Protocols

Configure EIGRP Route Authentication

EIGRP route authentication provides MD5 authentication of routing updates from the EIGRP routing
protocol to prevent the introduction of unauthorized or false routing messages from unapproved sources.
Beginning in privileged EXEC mode, follow these steps to enable authentication:
Command
Step 1
Router# configure terminal
Step 2
Router(config)# interface interface-id
Step 3
Router(config-if)# ip authentication
mode eigrp autonomous-system-number md5
Step 4
Router(config-if)# ip authentication
key-chain eigrp autonomous-system-number
key-chain
Step 5
Router(config-if)# exit
Step 6
Router(config)# key chain name-of-chain
Step 7
Router(config-keychain)# key number
Step 8
Router(config-keychain)# key-string text
Step 9
Router(config-keychain-key)#
accept-lifetime start-time {infinite |
end-time | duration seconds }
Step 10
Router(config-keychain-key)#
send-lifetime start-time {infinite |
end-time | duration seconds }
Step 11
Router(config)# end
Step 12
Router# show key chain
Step 13
Router# copy running-config
startup-config
Use the no forms of these commands to disable the feature or to return the setting to the default value.
Cisco ONS 15454 and Cisco ONS 15454 SDH Ethernet Card Software Feature and Configuration Guide, R8.0
Configure EIGRP Route Authentication
Purpose
Enters global configuration mode.
Enters interface configuration mode, and specifies the
Layer 3 interface to configure.
Enables MD5 authentication in IP EIGRP packets.
Enables authentication of IP EIGRP packets.
Returns to global configuration mode.
Identifies a key chain and enter key-chain
configuration mode. Match the name configured in
Step 4.
In key-chain configuration mode, identifies the key
number.
In key-chain key configuration mode, identifies the
key string.
(Optional) Specifies the time period during which the
key can be received.
The start-time and end-time syntax can be either
hh:mm:ss Month date year or hh:mm:ss date Month
year. The default start-time (and earliest acceptable
day) is January 1, 1993. The default end-time and
duration is infinite.
(Optional) Specifies the time period during which the
key can be sent.
The start-time and end-time syntax can be either
hh:mm:ss Month day year or hh:mm:ss day Month
year. The default start-time (and earliest acceptable
day) is January 1, 1993. The default end-time and
duration is infinite.
Returns to privileged EXEC mode.
Displays authentication key information.
(Optional) Saves your entries in the configuration file.
11-25