Re: Help me pls with OSPF authentication.

From: Robert Slaski (robin@atm.com.pl)
Date: Sat Dec 21 2002 - 16:16:19 GMT-3


Manish Gupta wrote:
> I always prefer
>
> Under router ospf x
> area x authentication (plain or MD5)
>
> Under interface:
> ip opsf authetication <password> if plain

You meant 'ip ospf authentication-key' I think, but this does not answer
the Andrew's question.

There are two authentication types available in OSPF: per area and per
interface, if both are configured then per interface authentication
takes precedence. Both have plain-text and MD5 checksum variants.

Per area:
1. enable area authentication
(config-router)# area <area> authentication [message-digest]
2. setup keys (this should be done on each area interface)
(config-if)# ip ospf authentication-key <text> # for plain text
  or
(config-if)# ip ospf message-digest-key <key_id> md5 0 <text> # for MD5

Per interface:
1. enable interface authentication
(config-if)# ip ospf authentication [message-digest | null]
2. setup keys (same as above)

mikrobi,

-- 
.


This archive was generated by hypermail 2.1.4 : Fri Jan 17 2003 - 17:21:50 GMT-3