Cisco ONS 15454 - Configure EIGRP Route Authentication

10-26
Cisco ONS 15454 SONET/SDH ML-Series Multilayer Ethernet Card Software Feature and Configuration Guide, R4.0
78-15224-02
Chapter 10 Configuring Networking Protocols
Configuring IP Routing
Configure EIGRP Route Authentication
EIGRP route authentication provides MD5 authentication of routing updates from the EIGRP routing
protocol to prevent the introduction of unauthorized or false routing messages from unapproved sources.
Beginning in privileged EXEC mode, follow these steps to enable authentication:
Use the no forms of these commands to disable the feature or to return the setting to the default value.
Command Purpose
Step 1
Router# configure terminal
Enters global configuration mode.
Step 2
Router(config)# interface interface-id
Enters interface configuration mode, and specifies the
Layer 3 interface to configure.
Step 3
Router(config-if)# ip authentication
mode eigrp
autonomous-system md5
Enables MD5 authentication in IP EIGRP packets.
Step 4
Router(config-if)# ip authentication
key-chain eigrp
autonomous-system
key-chain
Enables authentication of IP EIGRP packets.
Step 5
Router(config-if)# exit
Returns to global configuration mode.
Step 6
Router(config)# key chain name-of-chain
Identifies a key chain and enter key-chain
configuration mode. Match the name configured in
Step 4.
Step 7
Router(config)# key number
In key-chain configuration mode, identifies the key
number.
Step 8
Router(config)# key-string text
In key-chain key configuration mode, identifies the
key string.
Step 9
Router(config)# accept-lifetime
start-time {infinite | end-time |
duration
seconds }
(Optional) Specifies the time period during which the
key can be received.
The start-time and end-time syntax can be either
hh:mm:ss Month date year or hh:mm:ss date Month
year. The default is forever with the default start-time
and the earliest acceptable date as January 1, 1993. The
default end-time and duration is infinite.
Step 10
Router(config)# send-lifetime start-time
{infinite
| end-time | duration seconds }
(Optional) Specifies the time period during which the
key can be sent.
The start-time and end-time syntax can be either
hh:mm:ss Month date year or hh:mm:ss date Month
year. The default is forever with the default start-time
and the earliest acceptable date as January 1, 1993. The
default end-time and duration is infinite.
Step 11
Router(config)# end
Returns to privileged EXEC mode.
Step 12
Router# show key chain
Displays authentication key information.
Step 13
Router# copy running-config
startup-config
(Optional) Saves your entries in the configuration file.