does OSPFv2 do the encryption or only ospfV3 does ??
Hello Narad
OSPFv2 does use MD5 for encryption of the authentication process. You can find out more here:
In addition, OSPFv2 based on RFC 2328 allows only MD5, but RFC 5709 has added the use of HMAC-SHA algorithms for cryptographic authentication.
As for OPSFv3, it supports authentication with IPsec. You can find out more about that here:
I hope this has been helpful!
Laz
Hi,
Does this always have to be configured per interface in OSPF or is there a command to configure it for the entire area in router ospf [proccesid] mode?
Thanks!
Hello Cameron
The enabling of the feature can either be done globally (per area on a router) or on a per-interface basis. Per interface, the command is:
R2(config)#interface fastEthernet 0/0
R2(config-if)#ip ospf authentication
Globally, the command is:
R1(config)#router ospf 1
R1(config-router)#area 0 authentication
Now the configuration of the authentication key must be done on a per-interface basis. This is because you may have a different keys for different neighbors that are connected to different interfaces. This command can only be applied to the interface like so:
R1(config)#interface fastEthernet 0/0
R1(config-if)#ip ospf authentication-key MYPASS
I hope this has been helpful!
Laz
Thank you for the clarification. It helped me a lot!
1 Like
Hi, Rene
I got a question for you.
I followed your article (plain text authentication), and when I was done with all the configurations,
I found something different from you after I issue the command: debug ip ospf packet on the R1, as the output pic shown below
it generates two ospf packets at the same time
auth:0 = means no authentication
auth:1 = means authentication in plain text
could you please explain this strange stuff for me?
Thanks!
Hello Galen
Hmm, it looks like your output is showing that you have two ports on your router through which OSPF hello packets are being sent/received. You can see that both Gi0/1 and Gi0/2 are in the output of the debug. I think you have a topology with 3 routers, where R_01 is in the middle, and you have two OPSF adjacencies with routers 192.168.12.2 on Gi0/1, and 192.168.13.3 on Gi0/2. These look like active OSPF adjacencies, so your topology is different from the one in the lesson, which has just two routers.
All of the packets in your debug are hello packets (type:1) and it looks like you have auth:1 for all packets sent and received on Gi0/1 and auth:0 on Gi0/2. So you have authentication successfully configured for one OSPF adjacency with 192.168.12.2, and no authentication on 192.168.13.3. Can you confirm your topology? Let us know!
I hope this has been helpful!
Laz