interfaces <interface> <interface-name> ip ospf authentication <text>
Sets the authentication method to use for OSPF on an interface.
- interface
- A type of interface. For detailed keywords and arguments that can be specified as interface types, refer to Supported Interface Types.
- interface-name
- The name of an interface.
- md5 key-id key-id
- Sets a key that identifies the MD5 key. This key must be the same on both the sending and receiving systems. The key ranges from 1 through 255.
- md5-key md5-key
- Sets a password-like MD5 key of up to 16 alphanumeric characters to use as input to the MD5 hashing algorithm. The longer the key, the stronger the security. This key must be the same on both the sending and receiving systems.
- plaintext-password password
- A password to use in plain-text authentication. This password must be eight or fewer characters and be the same on both the sending and receiving systems.
Configuration mode
interfaces {
interfaces interface-name {
ip {
ospf {
authentication {
md5 {
key-id key-id {
md5-key md5-key
}
plaintext
plaintext-password password
}
}
}
}
}
}Use this command to set the authentication method to use for OSPF on an interface. This authentication is independent of the authentication that is configured for the OSPF area.
In plain-text authentication, passwords are sent through the network in plain text. In MD5 authentication, the system uses the Message Digest 5 (MD5) algorithm to compute a hash value from the contents of the OSPF packet and the password. The hash value and the MD5 key are included in the transmitted packet, and the receiving system (configured with the same password) calculates its own hash function, which must match.
The authentication parameters must be the same for all routers that are to establish two-way communication within a network. If two routers do not agree on these parameters, they do not consider adjacencies and disregard communication from each other.
Use the set form of this command to set the authentication method to use for OSPF on an interface.
Use the delete form of this command to remove the authentication method for OSPF from an interface.
Use the show form of this command to display the authentication method to use for OSPF on an interface.