NOTE:
Before using this authentication option, you must configure one or more key chains on the
routing switch by using the Key Management System (KMS). See the
Access Security Guide
for your
routing switch.
ip-address
For an ABR in a given virtual link, this is the IP address used to create the link on that ABR. (This
IP address matches the IP address of the interface on the opposite end of the virtual link. See
the description of
ip-address
in the syntax description under
on
page 216.)
chain-name-string
The name of a key generated using the
key-chain
chain_name
key
key_id
command.
To change the MD5 authentication configured on a virtual link, re-execute the command with the
new MD5 key.
NOTE:
To replace the MD5 method with the password method on a virtual link, overwrite the MD5
configuration by using the password form of the command. (It is not necessary to disable the
currently configured OSPF MD5 authentication.)
Default: Disabled
Configuring a passive OSPF interface
For more information, see
on page 261.
Enter this command in VLAN context:
switch(vlan-1)# ip ospf passive
Syntax:
ip ospf ip-addr passive
no ip ospf ip-addr passive
Configures passive OSPF for an AS.
ip-addr
Optionally, you can configure an IP address on the VLAN.
The
no
option disables the passive option; the interface becomes an active interface.
Default: Active
Example
To display the OSPF passive information, enter the command as shown:
show ip ospf interface command with passive configured on an interface
switch(vlan-1)# show ip ospf interface
OSPF Interface Status
IP Address Status Area ID State Auth-type Cost Priority Passive
---------- ------ ------- ----- --------- ---- -------- -------
10.10.10.1 enabled 0.0.0.2 down none 1 1 Yes
10.12.13.1 enabled 0.0.0.2 wait none 1 1 No
You can display the OSPF passive information for a particular VLAN as shown.
220
Aruba 3810 / 5400R Multicast and Routing Guide for ArubaOS-
Switch 16.08