Configuring OSPF
Configuring OSPF
page 1-20
OmniSwitch AOS Release 7 Advanced Routing Configuration Guide
March 2011
Activating an Interface
Once the interface is created and assigned to an area, it must be activated using the
ip ospf interface
admin-state
command with the interface name, as shown:
-> ip ospf interface vlan-213 admin-state enable
The interface can be disabled using the
disable
keyword in place of the
enable
keyword.
Interface Authentication
OSPF allows for the use of authentication on configured interfaces. When authentication is enabled, only
neighbors using the same type of authentication and the matching passwords or keys can communicate.
There are two types of authentication: simple and MD5. Simple authentication requires only a text string
as a password, while MD5 is a form of encrypted authentication that requires a key and a password. Both
types of authentication require the use of more than one command.
Simple Authentication
To enable simple authentication on an interface, enter the
ip ospf interface auth-type
command with the
interface name, as shown:
-> ip ospf interface vlan-213 auth-type simple
Once simple authentication is enabled, the password must be set with the
ip ospf interface auth-key
command, as shown:
-> ip ospf interface vlan-213 auth-key test
In the above instance, only other interfaces with simple authentication and a password of “test” will be
able to use the configured interface.
MD5 Encryption
To configure the same interface for MD5 encryption, enter the
ip ospf interface auth-type
as shown:
-> ip ospf interface vlan-213 auth-type md5
Once MD5 authentication is set, a key identification and key string must be set with the
ip ospf interface
md5 key
command. For example to set interface 120.5.80.1 to use MD5 authentication with a key identifi-
cation of 7 and key string of “test”, enter:
-> ip ospf interface vlan-213 md5 7
and
-> ip ospf interface vlan-213 md5 7 key "test"
Note that setting the key ID and key string must be done in two separate commands. Once the key ID and
key string have been set, MD5 authentication is enabled. To disable it, use the
ip ospf interface md5
command, as shown:
-> ip ospf interface vlan-213 md5 7 disable
To remove all authentication, enter the
ip ospf interface auth-type
as follows:
-> ip ospf interface vlan-213 auth-type none
