The simple encryption and base 64 encryption methods requires you to congure an alphanumeric password on an
interface. The password can be up to eight characters long. All OSPF packets transmitted on the interface contain this
password. All OSPF packets received on the interface are checked for this password. If the password is not present, then the
packet is dropped.
By default, the authentication key is encrypted. If you want the authentication key to be in clear text, insert a 0 between key
and string. For example,
device C(config-ospf-router)# area 1 virtual-link 10.0.0.1 authentication-key 0
afternoon
The software adds a prex to the authentication key string in the conguration. For example, the following portion of the
code has the encrypted code "2".
area 1 virtual-link 12.12.12.25 authentication-key 2 $on-o
The
prex can be one of the following:
• 0 = the key string is not encrypted and is in clear text
• 1 = the key string uses proprietary simple cryptographic 2-way algorithm
md5-authentication key
string
The MD5 key is a number from 1 - 255 and identies the MD5 key that is being used. This parameter is required to
dierentiate among multiple keys dened on a router.
When MD5 is enabled, the key-string is an alphanumeric password of up to 16 characters that is later encrypted and
included in each OSPF packet transmitted. You must enter a password in this eld when the system is congured to operate
with either simple or MD5 authentication.
By default, the MD5 authentication key is encrypted. If you want the authentication key to be in clear text, insert a 0 between
key and string. For example,
device(config-ospf-router)# area 1 virtual-link 10.0.0.1 md-5-authentication key-id 5
key evening
The software adds a prex to the authentication key string in the conguration. For example, the following portion of the
code has the encrypted code "2".
device(config-ospf-router)# area 1 virtual-link 12.12.12.25 md-5-authentication key-id
5 key 2 $on-o
The
prex can be one of the following:
• 0 = the key string is not encrypted and is in clear text
• 1 = the key string uses proprietary simple cryptographic 2-way algorithm
md5-authentication wait
time
This parameter determines when a newly congured MD5 authentication key is valid. This parameter provides a graceful
transition from one MD5 key to another without disturbing the network. All new packets transmitted after the key activation
wait time interval use the newly congured MD5 Key. OSPF packets that contain the old MD5 key are accepted for up to
ve minutes after the new MD5 key is in operation.
The range for the key activation wait time is from 0 - 14400 seconds. The default value is 300 seconds.
Changing the reference bandwidth for the cost on OSPF interfaces
Each interface on which OSPF is enabled has a cost associated with it. The device advertises its interfaces and their costs to OSPF
neighbors. For example, if an interface has an OSPF cost of ten, the device advertises the interface with a cost of ten to other OSPF
routers.
By default, an interface’s OSPF cost is based on the port speed of the interface. The cost is calculated by dividing the reference
bandwidth by the port speed. The default reference bandwidth is 100 Mbps, which results in the following default costs:
• 10 Mbps port - 10
• All other port speeds - 1
You can change the reference bandwidth, to change the costs calculated by the software.
Conguring OSPF
FastIron Ethernet Switch Layer 3 Routing
246 53-1003627-04
To Next Page
Loading...
Need help?
General
