Allied Telesis x510-28GPX, Справочник по командам

Страница: 1080 / 2822

C613-50170-01 Rev B Command Reference for x510 Series 1080
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
OSPF
V
3
FOR
IP
V
6 C
OMMANDS
AREA AUTHENTICATION IPSEC SPI
NOTE
: You can configure an authentication security policy (SPI) on an OSPFv3 area
with this command, or on a VLAN interface with the ipv6 ospf authentication spi
command.
When you configure authentication for an area, the security policy is applied to all
VLAN interfaces in the area. However, Allied Telesis recommends a different
authentication security policy is applied to each interface for higher security.
If you apply the
ipv6 ospf authentication null
command this affects
authentication configured on both the VLAN interface and the OSPFv3 area.
This is due to OSPFv3 hello messages ingressing VLAN interfaces, which are part of area
authentication, not being authenticated. So neighbors time out.
Example To enable MD5 authentication with a 32 hexadecimal character key for OPSPF area
1, use the commands:
awplus# configure terminal
awplus(config)# router ipv6 ospf
awplus(config-router)# area 1 authentication ipsec spi 1000 md5
1234567890ABCDEF1234567890ABCDEF
To enable SHA-1 authentication with a 40 hexadecimal character key for OPSPF
area 1, use the commands:
awplus# configure terminal
awplus(config)# router ipv6 ospf
awplus(config-router)# area 1 authentication ipsec spi 1000
sha1 1234567890ABCDEF1234567890ABCDEF12345678
To disable authentication for OPSPF area 1, use the commands:
awplus# configure terminal
awplus(config)# router ipv6 ospf
awplus(config-router)# no area 1 authentication ipsec spi 1000
Related
Commands
area encryption ipsec spi esp
area virtual-link authentication ipsec spi
area virtual-link encryption ipsec spi
ipv6 ospf authentication spi
ipv6 ospf encryption spi esp
show ipv6 ospf