Huawei Quidway NetEngine80E Configuration Manual page 486

HUAWEI NetEngine80E/40E Router
Configuration Guide - IP Routing
OSPFv3 neighbor relationships cannot be established. This section describes how to configure
an authentication mode.
Context
OSPFv3 supports keychain and HMAC-SHA256 authentications. The following procedure uses
keychain authentication as an example.
Before you configure keychain authentication, run the keychain command to configure a
keychain, the key-id command to configure a key ID, the key-string command to configure a
password, and the algorithm command to configure an algorithm. If these commands are not
run, OSPFv3 authentication fails.
Procedure
l
l
Issue 02 (2014-09-30)
NOTE
By default, authentication is not configured for OSPF process, area or interface. Configuring authentication
is recommended to ensure system security.
Configure OSPFv3 area authentication.
1. Run:
system-view
The system view is displayed.
2. Run:
ospfv3 [ process-id ]
The OSPFv3 process view is displayed.
3. Run:
area area-id
The OSPFv3 area view is displayed.
4. Run:
authentication-mode { hmac-sha256 key-id key-id { plain plain-text |
[ cipher ] cipher-text } | keychain keychain-name }
OSPFv3 area authentication is configured.
NOTE
If you use OSPFv3 area authentication, the authentication and password configurations on all
routers in the same area must be the same.
Configure OSPFv3 process authentication.
1. Run:
system-view
The system view is displayed.
2. Run:
ospfv3 [ process-id ]
The OSPFv3 process view is displayed.
3. Run:
authentication-mode { hmac-sha256 key-id key-id { plain plain-text |
[ cipher ] cipher-text } | keychain keychain-name }
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
6 OSPFv3 Configuration
461