OSPF authentication

Answered Question
Sep 26th, 2008
User Badges:

Hi guys. I`m being tasked to add OSPF authentication to all our devices that use OSPF. I did some research and I know how to do it. The thing is, I'm not sure how I could do it in a timely manner... Also, how can I tell which interface is in which OSPF process? When I do a show ip ospf, it lists the processes and tells me how many interfaces are in the process but doesn't tell me which ones.


Is there a way to enter the md5 password at the area level instead of at the interface level? That would be much quicker and easier for me.

Correct Answer by Istvan_Rabai about 8 years 6 months ago

Yes, on multilayer switches it is possible to use the "interface range" command similarly to this:


conf t

interface range Gig0/1 - 30

no switchport

ip ospf message-key 1 md5 xxxx


Cheers:

Istvan

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (2 ratings)
Loading.
Istvan_Rabai Fri, 09/26/2008 - 09:14
User Badges:
  • Gold, 750 points or more

Hi Chris,


Use the "show ip ospf interface serial1/0" type command to see which area the interface is attached to.


If you use the "show ip ospf interface", it will list all interfaces configured for OSPF.


I know only of interface level authentication as to the configuration of authentication keys.


Cheers:

Istvan

chris_moyzan Fri, 09/26/2008 - 10:36
User Badges:

Thanks for your reply, Istvan, although it's a bit of a letdown since I have lots of interface to configure :( On our main switch I have 3 processes with about 30 interfaces. Is it possible to enter the "Ip ospf message-key 1 md5 password on an interface range?

Correct Answer
Istvan_Rabai Fri, 09/26/2008 - 16:48
User Badges:
  • Gold, 750 points or more

Yes, on multilayer switches it is possible to use the "interface range" command similarly to this:


conf t

interface range Gig0/1 - 30

no switchport

ip ospf message-key 1 md5 xxxx


Cheers:

Istvan

lamav Mon, 09/29/2008 - 09:15
User Badges:
  • Blue, 1500 points or more

You may also want to remember to be careful when you apply the Md5 key: dont add any extra spaces on one side....sometimes that happens when you use Notepad to make sweeping config changes.


Thanks


Victor

chris_moyzan Mon, 09/29/2008 - 11:46
User Badges:

Thanks, Victor, I will check to make sure there aren't any problems with the key. I did some tests and it seems I can set a key for an interface even though authentication is not set in the area. This simplifies my task since I'll just apply the command to a range of interfaces.

Actions

This Discussion