Configuring Stub Routers; Configuring Ospf Authentication - HPE FlexNetwork HSR6800 Configuration Manual

•
After an OSPF interface is set to "silent," other interfaces on the router can still advertise direct
routes of the interface in Router LSAs, but the interface cannot send any packet. This
configuration can enhance OSPF networking adaptability and reduce resource consumption.
To disable interfaces from receiving and sending routing information:
Step
Enter system view.
1.
Enter OSPF view.
2.
Disable interfaces from
3.
receiving and sending
OSPF packets.

Configuring stub routers

A stub router is used for traffic control. It tells other OSPF routers to not use it to forward data
although they can have a route to it. A stub router has nothing to do with a stub area.
Router LSAs from the stub router might contain different link type values. A value of 3 means a link to
a stub network, and the cost of the link will not be changed. A value of 1, 2 or 4 means a point-to-point
link, a link to a transit network, or a virtual link. On such links, a maximum cost value of 65,535 is
used. Neighbors do not send packets to the stub router as long as they have a route with a smaller
cost.
To configure a router as a stub router:
Step
Enter system view.
1.
Enter OSPF view.
2.
Configure the router as
3.
a stub router.

Configuring OSPF authentication

Configure OSPF packet authentication to ensure the security of packet exchange.
After authentication is configured, OSPF only receives packets that pass authentication. Failed
packets cannot establish neighboring relationships.
You must configure the same authentication mode and password on all routers on the same network
segment.
If you configure OSPF authentication for both an area and an interface in that area, the interface
uses the OSPF authentication configured on it.
To modify the key of an OSPF area or interface, perform the following key rollover configurations:
Configure a new MD5/HMAC-MD5 authentication key on the local device. If the new key is not
1.
configured on neighbor devices, MD5/HMAC-MD5 authentication key rollover is triggered.
During key rollover, OSPF sends multiple packets that contain both the new and old
MD5/HMAC-MD5 authentication keys to make sure all neighbor devices can pass the
authentication.
Command
system-view
ospf [ process-id | router-id
router-id | vpn-instance
vpn-instance-name ] *
silent-interface { interface-type
interface-number | all }
Command
system-view
ospf [ process-id | router-id router-id |
vpn-instance vpn-instance-name ] *
stub-router
77
Remarks
N/A
N/A
Optional.
By default, interfaces receive and
send OSPF packets.
Remarks
N/A
N/A
By default, the router is not a stub
router in any OSPF process.