Siemens RUGGEDCOM ROX II, Руководство пользователя

Страница: 586 / 798

Chapter 13
Unicast and Multicast Routing
RUGGEDCOM ROX II
CLI User Guide
540 Managing Message Digest Keys
Parameter Description
Default: 1
Priority of interface.
passive Synopsis: { true, false }
Default: true
Whether an interface is active or passive. Passive interfaces do not send LSAs to other
routers and are not part of an OSPF area.
retransmit-interval { retransmit-interval } Synopsis: A 32-bit unsigned integer between 1 and 65535
Default: 5
Time (in seconds) between retransmitting lost link state advertisements.
transmit-delay { transmit-delay } Synopsis: A 32-bit unsigned integer between 1 and 65535
Default: 1
The link state transmit delay (in seconds).
dead-interval { dead-interval } Synopsis: A 32-bit unsigned integer between 1 and 65535
Default: 40
The time before considering a router dead (in seconds).
minimal-hello-multiplier { minimal-hello-
multiplier }
Synopsis: An 8-bit unsigned integer between 1 and 10
The number of times a hello message can be sent within one second.
5. Type commit and press Enter to save the changes, or type revert and press Enter to abort.
Section 13.9.10
Managing Message Digest Keys
Message digest keys use the MD5 algorithm to authenticate OSPF neighbors and prevent unauthorized routers
from joining the OSPF network. By enabling authentication and configuring a shared key on all the routers, only
routers which have the same authentication key will be able to send and receive advertisements within the OSPF
network.
An ID for each key allows the router to use multiple passwords and prevent replay attacks where OSPF packets are
captured, modified and transmitted to a router. To change passwords, simply create a new key and delete the old
key.
IMPORTANT!
The router can only share routing information with neighbors that use the same authentication
method and password.
NOTE
Authentication adds a small overhead due to the encryption of messages. It is not recommended for
completely private networks with controlled access.
CONTENTS
• Section 13.9.10.1, “Viewing a List of Message Digest Keys”
• Section 13.9.10.2, “Adding a Message Digest Key”
• Section 13.9.10.3, “Deleting a Message Digest Key”