C613-50170-01 Rev B
Command Reference for x510 Series
1111
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
OSPF
V
3
FOR
IP
V
6 C
OMMANDS
IPV
6
OSPF
AUTHENTICATION
SPI
ipv6 ospf authentication spi
Overview
Use this command in Interface Configuration mode to enable either MD5
(Message-Digest 5) or SHA1 (Secure Hash Algorithm 1) authentication for a
specified interface.
Use the
no
variant of this command in Interface Configuration mode to disable the
authentication configured for a specified interface.
Syntax
ipv6 ospf authentication ipsec spi <
256-4294967295
> {md5
<
MD5-key
>|sha1 <
SHA1-key
>}
ipv6 ospf authentication null
no ipv6 ospf authentication ipsec spi <
256-4294967295
>
Mode
Interface Configuration
Default
Authentication is not configured on an interface by default.
Usage
Configure the same SPI (Security Parameters Index) value on all interfaces that
connect to the same link. SPI values are used by link interfaces. Use a different SPI
value for a different link interface when using OSPFv3 with link interfaces.
Use the
sha1
keyword to choose SHA-1 authentication instead of entering the
md5
keyword to use MD5 authentication. The SHA-1 algorithm is more secure
than the MD5 algorithm. SHA-1 uses a 40 hexadecimal character key instead of a
32 hexadecimal character key as used for MD5 authentication.
Use the
null
keyword to override existing area authentication. Apply the null
keyword if area authentication is already configured to configure authentication
on an interface.
Parameter
Description
authentication
Specify this keyword to enable authentication.
ipsec
Specify this keyword to use IPsec authentication.
spi
Specify this keyword to set the SPI (Security Parameters Index).
<
256-
4294967295
>
Specify an SPI (Security Parameters Index) value in the range 256
to 4294967295, entered as a decimal integer.
md5
Specify the MD5 (Message-Digest 5) hashing algorithm.
<
MD5-key
>
Enter an MD5 key containing up to 32 hexadecimal characters.
sha1
Specify the SHA-1 (Secure Hash Algorithm 1) hashing algorithm.
<
SHA1-key
>
Enter an SHA-1 key containing up to 40 hexadecimal characters.
null
Specify no authentication is applied when no other parameters
are applied after this keyword (
ipv6 ospf
authentication null
). Note this overrides any existing
area authentication configured.