Allied Telesis AlliedWare Plus - Page 1061

C613-50100-01 REV C Command Reference for x930 Series 1061
AlliedWare Plus™ Operating System - Version 5.4.6-1.x
OSPFV3 FOR IPV6 COMMANDS
AREA
AUTHENTICATION IPSEC SPI
NOTE: You can configure an authentication security policy (SPI) on an OSPFv3 area
with this command, or on a VLAN interface with the ipv6 ospf authentication spi
command.
When you configure authentication for an area, the security policy is applied to all
VLAN interfaces in the area. However, Allied Telesis recommends a different
authentication security policy is applied to each interface for higher security.
If you apply the ipv6 ospf authentication null command this affects
authentication configured on both the VLAN interface and the OSPFv3 area.
This is due to OSPFv3 hello messages ingressing VLAN interfaces, which are part of area
authentication, not being authenticated. So neighbors time out.
Example To enable MD5 authentication with a 32 hexadecimal character key for OPSPF area
1, use the commands:
awplus# configure terminal
awplus(config)# router ipv6 ospf
awplus(config-router)# area 1 authentication ipsec spi 1000 md5
1234567890ABCDEF1234567890ABCDEF
To enable SHA-1 authentication with a 40 hexadecimal character key for OPSPF
area 1, use the commands:
awplus# configure terminal
awplus(config)# router ipv6 ospf
awplus(config-router)# area 1 authentication ipsec spi 1000
sha1 1234567890ABCDEF1234567890ABCDEF12345678
To disable authentication for OPSPF area 1, use the commands:
awplus# configure terminal
awplus(config)# router ipv6 ospf
awplus(config-router)# no area 1 authentication ipsec spi 1000
Related
Commands
area encryption ipsec spi esp
area virtual-link authentication ipsec spi
area virtual-link encryption ipsec spi
ipv6 ospf authentication spi
ipv6 ospf encryption spi esp
show ipv6 ospf