Improving Ospfv3 Network Security - Huawei Quidway NetEngine80E Configuration Manual

HUAWEI NetEngine80E/40E Router
Configuration Guide - IP Routing
Run the display ospfv3 interface command, and you can view the SA configured in an OSPFv3
interface. For example:
<HUAWEI> display ospfv3 interface gigabitethernet 1/0/0
GigabitEthernet1/0/0 is up, line protocol is up
Interface ID 518
IPv6 Prefixes
FE80::1441:0:E213:1 (Link-Local Address)
2001:DB8:1::1
OSPFv3 Process (1), Area 0.0.0.1, Instance ID 0
Router ID 2.2.2.2, Network Type POINTOPOINT, Cost: 1562
Transmit Delay is 1 sec, State Point-To-Point, Priority 1
No designated router on this link
No backup designated router on this link
Timer interval configured, Hello 10, Dead 40, Wait 40, Retransmit 5
Hello due in 00:00:02
Neighbor Count is 1, Adjacent neighbor count is 1
IP security association configured: sa1
IP security association applied: sa1
Run the display ospfv3 vlink command, and you can view the SA configured on an OSPFv3
virtual link. For example:
<HUAWEI> display ospfv3 vlink
Virtual Link VLINK1 to router 1.1.1.1 is up
Transit area 0.0.0.1 via interface Pos1/0/0, instance ID 0
Local address 2001:DB8:1::1
Remote address 2001:DB8:1::13
Transmit Delay is 1 sec, State Point-To-Point,
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
Hello due in 00:00:02
Adjacency state Full
IP security association configured: sa1
IP security association applied: sa1
Run the display ospfv3 sham-link command, and you can view the SA configured on an
OSPFv3 sham link. For example:
<HUAWEI> display ospfv3 sham-link
OSPFv3 Process (10)
Sham Link SHAM-LINK1 to router 0.0.0.0 is down
Area 0.0.0.1, via Interface *, Instance ID 0, cost 1
Source address 2001:DB8:1::1
Destination address 2001:DB8:2::2
Interface ID 0x80000002
Sham-Link Interface Events: 0
Sham-Link Interface LsaCount: 0
Sham-Link Interface Lsa Checksum: 0x0
Transmit Delay is 1 sec, State Down
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
Hello due in 00:00:00
Adjacency state Down
IP security association configured: sa1
IP security association applied: sa1

6.13 Improving OSPFv3 Network Security

If an Open Shortest Path First version 3 (OSPFv3) network requires high security, you can
configure OSPFv3 generalized TTL security mechanism (GTSM) and an authentication mode
to improve network security.
Issue 02 (2014-09-30) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
6 OSPFv3 Configuration
458