Cisco FirePOWER ASA 5500 series Configuration Manual page 135

Chapter 9 Configuring IP Routing
To specify the length of time between the hello packets that the security appliance sends on an OSPF
•
interface, enter the following command:
hostname(config-interface)# ospf hello-interval seconds
The value must be the same for all nodes on the network.
To enable OSPF MD5 authentication, enter the following command:
•
hostname(config-interface)# ospf message-digest-key key_id md5 key
Set the following values:
–
–
Usually, one key per interface is used to generate authentication information when sending packets
and to authenticate incoming packets. The same key identifier on the neighbor router must have the
same key value.
We recommend that you not keep more than one key per interface. Every time you add a new key,
you should remove the old key to prevent the local system from continuing to communicate with a
hostile system that knows the old key. Removing the old key also reduces overhead during rollover.
To set the priority to help determine the OSPF designated router for a network, enter the following
•
command:
hostname(config-interface)# ospf priority number_value
The number_value is between 0 to 255.
To specify the number of seconds between LSA retransmissions for adjacencies belonging to an
•
OSPF interface, enter the following command:
hostname(config-interface)# ospf retransmit-interval seconds
The seconds must be greater than the expected round-trip delay between any two routers on the
attached network. The range is from 1 to 65535 seconds. The default is 5 seconds.
To set the estimated number of seconds required to send a link-state update packet on an OSPF
•
interface, enter the following command:
hostname(config-interface)# ospf transmit-delay seconds
The seconds is from 1 to 65535 seconds. The default is 1 second.
The following example shows how to configure the OSPF interfaces:
hostname(config)# router ospf 2
hostname(config-router)# network 2.0.0.0 255.0.0.0 area 0
hostname(config-router)# interface inside
hostname(config-interface)# ospf cost 20
hostname(config-interface)# ospf retransmit-interval 15
hostname(config-interface)# ospf transmit-delay 10
hostname(config-interface)# ospf priority 20
hostname(config-interface)# ospf hello-interval 10
hostname(config-interface)# ospf dead-interval 40
hostname(config-interface)# ospf authentication-key cisco
hostname(config-interface)# ospf message-digest-key 1 md5 cisco
hostname(config-interface)# ospf authentication message-digest
The following is sample output from the show ospf command:
OL-10088-01
key_id—An identifier in the range from 1 to 255.
key—Alphanumeric password of up to 16 bytes.
Cisco Security Appliance Command Line Configuration Guide
Configuring OSPF
9-11