NOTE
If the default action is configured but the GTSM policy is not configured, GTSM does not take effect.
Step 4
(Optional) Run:
gtsm log drop-packet
{
slot-id
|
all
}
The log function is enabled on the specified board in the system view. The information that
GTSM drops packets is recorded in the log.
----End
4.11.3 Configuring the Authentication Mode
OSPF supports packet authentication. Only the packets that pass the authentication can be
received. If packets fail to pass the authentication, the neighbor relationship cannot be
established.
Context
In area authentication, all the switches in an area must use the same area authentication mode
and password. For example, the authentication mode of all devices in Area 0 is simple
authentication and the password is abc.
The interface authentication mode is used among neighbor routers to set the authentication mode
and password. Its priority is higher than that of the area authentication mode.
Procedure
l
Configuring the Area Authentication Mode
1.
Run:
system-view
The system view is displayed.
2.
Run:
ospf
[
process-id
]
The OSPF process view is displayed.
3.
Run:
area
area-id
The OSPF area view is displayed.
4.
Run the following commands to configure the authentication mode of the OSPF area
as required:
–
Run:
authentication-mode
simple
[ [
plain
]
plain-text
|
cipher
cipher-
text
]
The simple authentication is configured for the OSPF area.
–
Run:
authentication-mode
{
md5
|
hmac-md5
} [
key-id
{
plain
plain-text
|
[
cipher
]
cipher-text
} ]
The MD5 authentication is configured for the OSPF area.
OSPF supports packet authentication. Only the OSPF packets passing the
authentication can be received; otherwise, the neighbor relationship cannot be
established normally.
S6700 Series Ethernet Switches
Configuration Guide - IP Routing
4 OSPF Configuration
Issue 01 (2012-03-15)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
130
