Cisco NCS 5500 Series

RP/0/RP0/CPU0:router(config-ospf)# router-id 1.1.1.1
RP/0/RP0/CPU0:router(config-ospf)# address-family ipv4 unicast
RP/0/RP0/CPU0:router(config-ospf)# area 1
RP/0/RP0/CPU0:router(config-ospf-ar)# authentication keychain test_chain ----- Area-level
authentication
RP/0/RP0/CPU0:router(config-ospf-ar)# interface TenGigE 0/0/0/1
RP/0/RP0/CPU0:router(config-ospf-ar-if)# authentication keychain test_chain --- Interface-level
authentication
RP/0/RP0/CPU0:router(config-ospf-ar-if)# commit
Example:
The following example shows the configuration for message-digest authentication.
RP/0/RP0/CPU0:router(config-ospf-ar-if)# authentication message-digest keychain ospf_int1
In the above example, the ospf_intl keychain must be configured before you attempt this step.
Note
Step 7 commit
Examples
The following example shows how to configure the keychain ospf_intf_1 that contains five key
IDs. Each key ID is configured with different send-lifetime values; however, all key IDs specify the
same text string for the key.
key chain ospf_intf_1
key 1
send-lifetime 11:30:30 May 1 2007 duration 600
cryptographic-algorithm MD5T
key-string clear ospf_intf_1
key 2
send-lifetime 11:40:30 May 1 2007 duration 600
cryptographic-algorithm MD5
key-string clear ospf_intf_1
key 3
send-lifetime 11:50:30 May 1 2007 duration 600
cryptographic-algorithm MD5
key-string clear ospf_intf_1
key 4
send-lifetime 12:00:30 May 1 2007 duration 600
cryptographic-algorithm MD5
key-string clear ospf_intf_1
key 5
send-lifetime 12:10:30 May 1 2007 duration 600
cryptographic-algorithm MD5
key-string clear ospf_intf_1
The following example shows that keychain authentication is enabled on the TenGigE 0/0/0/0
interface:
show ospf 1 interface TenGigE 0/0/0/0
TenGigE 0/0/0/0 is up, line protocol is up
Internet Address 100.10.10.2/24, Area 0
Process ID 1, Router ID 2.2.2.1, Network Type BROADCAST, Cost: 1
Transmit Delay is 1 sec, State DR, Priority 1
Routing Configuration Guide for Cisco NCS 5500 Series Routers, IOS XR Release 6.3.x
97
Implementing OSPF
Configure Authentication Message Digest Management for OSPF