Filter
Top Products
Configuring OSPF Configuring OSPF
OmniSwitch 6800/6850/9000 Advanced Routing Configuration Guide December 2007 page 1-21
Activating an Interface
Once the interface is created and assigned to an area, it must be activated using the ip ospf interface
status command with the interface name, as shown:
-> ip ospf interface vlan-213 status enable
The interface can be disabled using the disable keyword in place of the enable keyword.
Interface Authentication
OSPF allows for the use of authentication on configured interfaces. When authentication is enabled, only
neighbors using the same type of authentication and the matching passwords or keys can communicate.
There are two types of authentication: simple and MD5. Simple authentication requires only a text string
as a password, while MD5 is a form of encrypted authentication that requires a key and a password. Both
types of authentication require the use of more than one command.
Simple Authentication
To enable simple authentication on an interface, enter the ip ospf interface auth-type command with the
interface name, as shown:
-> ip ospf interface vlan-213 auth-type simple
Once simple authentication is enabled, the password must be set with the ip ospf interface auth-key
command, as shown:
-> ip ospf interface vlan-213 auth-key test
In the above instance, only other interfaces with simple authentication and a password of “test” will be
able to use the configured interface.
MD5 Encryption
To configure the same interface for MD5 encryption, enter the ip ospf interface auth-type as shown:
-> ip ospf interface vlan-213 auth-type md5
Once MD5 authentication is set, a key identification and key string must be set with the ip ospf interface
md5 key command. For example to set interface 120.5.80.1 to use MD5 authentication with a key identifi-
cation of 7 and key string of “test”, enter:
-> ip ospf interface vlan-213 md5 7
and
-> ip ospf interface vlan-213 md5 7 key "test"
Note that setting the key ID and key string must be done in two separate commands. Once the key ID and
key string have been set, MD5 authentication is enabled. To disable it, use the ip ospf interface md5
command, as shown:
-> ip ospf interface vlan-213 md5 7 disable
To remove all authentication, enter the ip ospf interface auth-type as follows:
-> ip ospf interface vlan-213 auth-type none