Re: OSPF authentication

From: Brian Dennis (bdennis@internetworkexpert.com)
Date: Mon Apr 23 2007 - 00:25:41 ART


OSPF authentication can be "enabled" using the "area <area-id>
authentication [message-digest]" routing process command or by using the
interface level "ip ospf authentication [message-digest | null]" command.
The interface level command supersedes the routing process level command.
Setting the authentication type to "null" on an interface specifies that the
interface will not perform authentication (type 0).

If the OSPF authentication type is set to type 1 (plain text) then the type
2 (message-digest) key command applied to the interface will be ignored. On
the flip side if the authentication type is set to type 2 a type 1 key
command applied to an interface will be ignored.

-- 

Brian Dennis, CCIE4 #2210 (R&S/ISP-Dial/Security/SP) bdennis@internetworkexpert.com Internetwork Expert, Inc. http://www.InternetworkExpert.com Toll Free: 877-224-8987 Direct: 775-745-6404 (Outside the US and Canada)

On 4/22/07 12:12 PM, "Jason Carpenter" <adventureracing@gmail.com> wrote:

> Will this result in OSPF authentication with a MD5 hash of password CISCO > > router ospf 1 > area 0 authentication > > int s0/0 > ip ospf authentication message-digest > ip ospf authentication-key CISCO > > when I run sh ip ospf int s0/0 > it says message-digest authentication enabled > no key configured, using default key id 0 > > as long as the question does not specify a key number, (for example > key 1) would this result in md5 authentication with the password > CISCO? > > Thanks > > _______________________________________________________________________ > Subscription information may be found at: > http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Tue May 01 2007 - 08:28:37 ART