Edge-Core ECS4610-24F, Руководство по управлению, Страница: 1061 / 1154

C
HAPTER
45
| IP Routing Commands
Open Shortest Path First (OSPFv2)
– 1061 –
C
OMMAND
M
ODE
Interface Configuration (VLAN)
D
EFAULT
S
ETTING
No authentication
C
OMMAND
U
SAGE
◆
Use authentication to prevent routers from inadvertently joining an
unauthorized area. Configure routers in the same area with the same
password or key. All neighboring routers on the same network with the
same password will exchange routing data.
◆
This command creates a password (key) that is inserted into the OSPF
header when routing protocol packets are originated by this device.
Assign a separate password to each network for different interfaces.
◆
When using simple password authentication, a password is included in
the packet. If it does not match the password configured on the
receiving router, the packet is discarded. This method provides very
little security as it is possible to learn the authentication key by
snooping on routing protocol packets.
◆
When using Message-Digest 5 (MD5) authentication, the router uses
the MD5 algorithm to verify data integrity by creating a 128-bit
message digest from the authentication key. Without the proper key
and key-id, it is nearly impossible to produce any message that
matches the pre-specified target message digest.
◆
Before specifying plain-text password authentication for an interface,
configure a password with the ip ospf authentication-key command.
Before specifying MD5 authentication for an interface, configure the
message-digest key-id and key with the ip ospf message-digest-key
command.
◆
The plain-text authentication-key, or the MD5 key-id and key , must be
used consistently throughout the autonomous system.
E
XAMPLE
This example enables message-digest authentication for the specified
interface.
Console(config)#interface vlan 1
Console(config-if)#ip ospf authentication message-digest
Console(config-if)#
R
ELATED
C
OMMANDS
ip ospf authentication-key (1062)
ip ospf message-digest-key (1065)