C613-50631-01 Rev A Command Reference for IE340 Series 1215
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
OSPFV3 FOR IPV6 COMMANDS
AREA
AUTHENTICATION IPSEC SPI
NOTE: You can configure an authentication security policy (SPI) on an OSPFv3 area
with this command, or on an interface with the ipv6 ospf authentication spi command.
When you configure authentication for an area, the security policy is applied to all
interfaces in the area. However, we recommend a different authentication security
policy is applied to each interface for higher security.
If you apply the ipv6 ospf authentication null command, this affects authentication
configured on both the interface and the OSPFv3 area.
This is due to OSPFv3 hello messages ingressing interfaces, which are part of area
authentication, not being authenticated. So neighbors time out.
Example To enable MD5 authentication with a 32 hexadecimal character key for OPSPF area
1, use the commands:
awplus# configure terminal
awplus(config)# router ipv6 ospf
awplus(config-router)# area 1 authentication ipsec spi 1000 md5
1234567890ABCDEF1234567890ABCDEF
To enable SHA-1 authentication with a 40 hexadecimal character key for OPSPF
area 1, use the commands:
awplus# configure terminal
awplus(config)# router ipv6 ospf
awplus(config-router)# area 1 authentication ipsec spi 1000
sha1 1234567890ABCDEF1234567890ABCDEF12345678
To disable authentication for OPSPF area 1, use the commands:
awplus# configure terminal
awplus(config)# router ipv6 ospf
awplus(config-router)# no area 1 authentication ipsec spi 1000
Related
commands
area encryption ipsec spi esp
area virtual-link authentication ipsec spi
area virtual-link encryption ipsec spi
ipv6 ospf authentication spi
ipv6 ospf encryption spi esp
show ipv6 ospf
To Next Page
Loading...
Need help?
General
