Dell Brocade DCX, Configuration Manual, Page: 763 / 1436

BigIron RX Series Configuration Guide 691
53-1001810-01
Configuring OSPF
25
Change the timer for OSPF authentication changes
When you make an OSPF authentication change, the software uses the authentication-change
timer to gracefully implement the change. The software implements the change in the following
ways:
•
Outgoing OSPF packets – After you make the change, the software continues to use the old
authentication to send packets, during the remainder of the current authentication-change
interval. After this, the software uses the new authentication for sending packets.
•
Inbound OSPF packets – The software accepts packets containing the new authentication and
continues to accept packets containing the older authentication for two authentication-change
intervals. After the second interval ends, the software accepts packets only if they contain the
new authentication key.
The default authentication-change interval is 300 seconds (5 minutes). You change the interval to
a value from 0 – 14400 seconds.
OSPF provides graceful authentication change for all the following types of authentication changes
in OSPF:
•
Changing authentication methods from one of the following to another of the following:
•
Simple text password
•
MD5 authentication
•
No authentication
•
Configuring a new simple text password or MD5 authentication key
•
Changing an existing simple text password or MD5 authentication key
To change the authentication-change interval, enter a command such as the following at the
interface configuration level of the CLI.
BigIron RX(config-if-e10000-2/5)# ip ospf auth-change-wait-time 400
Syntax: [no] ip ospf auth-change-wait-time <secs>
The <secs> parameter specifies the interval and can be from 0 – 14400 seconds. The default is
300 seconds (5 minutes).
NOTE
For backward compatibility, the ip ospf md5-authentication key-activation-wait-time <seconds>
command is still supported.
Block flooding of outbound LSAs on specific OSPF interfaces
By default, the device floods all outbound LSAs on all the OSPF interfaces within an area. You can
configure a filter to block outbound LSAs on an OSPF interface. This feature is particularly useful
when you want to block LSAs from some, but not all, of the interfaces attached to the area.
After you apply filters to block the outbound LSAs, the filtering occurs during the database
synchronization and flooding.
If you remove the filters, the blocked LSAs are automatically re-flooded. You do not need to reset
OSPF to re-flood the LSAs.