Allied-telesis AT-S83 Uživatelský manuál stáhnout pdf (Strana 326)

Chapter 15: Open Shortest Path First (OSPF) Commands

326

IP OSPF MESSAGE-DIGEST-KEY

Syntax

ip ospf A.B.C.D message-digest-key KEYID <1-255> md5

LINE

no ip ospf A.B.C.D message-digest-key KEYID

Parameters

A.B.C.D Specifies the IP address of the interface.

KEYID Specifies a key ID. Enter a value between 1 and 255.

MD5 Specifies the MD5 algorithm.

LINE Specifies the OSPF password. String by the end of the line

is taken. Enter a value between 1 and 16 characters.

Description

Use the IP OSPF MESSAGE-DIGEST-KEY command to register an MD5

key for OSPF MD5 authentication. By default, this command is disabled.

Message Digest Authentication is a cryptographic authentication. A key

(password) and key-id are configured on each router. The router uses an

algorithm based on the OSPF packet, the key, and the key-id to generate

a message digest that is appended to the packet.

Use this command for uninterrupted transitions between passwords. This

is helpful for administrators who want to change the OSPF password

without disrupting communication. The system begins a rollover process

until all the neighbors have adopted the new password. This allows

neighboring routers to continue communication while the network

administrator is updating them with a new password. The router stops

sending duplicate packets once it detects that all of its neighbors have

adopted the new password.

Maintain only one password per interface, removing the old password

when you add a new one. This prevents the local system from continuing

to communicate with the system that is using the old password. Removing

the old password also reduces overhead during rollover.

All neighboring routers on the same network must have the same

password value to enable exchange of OSPF routing data.

1 2 ... 321 322 323 324 325 326 327 328 329 330 331 ... 381 382

Žádné komentáře

Allied-telesis AT-S83 Uživatelský manuál Strana 326