08.OSPF认证.pptVIP

Configuring OSPF Configuring OSPF Authentication OSPF Authentication Types OSPF supports 2 types of authentication: Simple password (or plain text) authentication MD5 authentication Router generates and checks every OSPF packet. Router authenticates the source of each routing update packet that it receives. Configure a “key” (password); each participating neighbor must have same key configured. Configuring OSPF Simple Password Authentication ip ospf authentication-key password Router(config-if)# Assigns a password to be used with neighboring routers Router(config-if)# ip ospf authentication [message-digest | null] Specifies the authentication type for an interface (since Cisco IOS software 12.0) Router(config-router)# area area-id authentication [message-digest] Specifies the authentication type for an area (was in Cisco IOS software before 12.0) Example Simple Password Authentication Configuration Loopback 0 10.2.2.2 R2 Configuration for Simple Password Authentication output omitted interface Loopback0 ip address 10.2.2.2 255.255.255.0 output omitted interface Serial0/0/1 ip address 192.168.1.102 255.255.255.224 ip ospf authentication ip ospf authentication-key plainpas output omitted router ospf 10 log-adjacency-changes network 10.2.2.2 0.0.0.0 area 0 network 192.168.1.0 0.0.0.255 area 0 Verifying Simple Password Authentication R1#sh ip ospf neighbor Neighbor ID Pri State Dead Time Address Interface 10.2.2.2 0 FULL/ - 00:00:32 192.168.1.102 Serial0/0/1 R1#show ip route output omitted Gateway of last resort is not set 10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks O 10.2.2.2/32 [110/782] via 192.168.1.102, 00:01:17, Serial0/0/1 C 10.1.1.0/24 is directly connected, Loopback0 192.168.1.0/27 is subnetted, 1 subnets C 192.168.1.96 is directly connected, Serial0/0/1 R1#ping 10.2.2.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.2.2.2, timeou