Brocade Communications Systems Layer 3 Routing Configuration ICX 6650 - Manual (Page 205)

Brocade ICX 6650 Layer 3 Routing Configuration Guide 187
53-1002603-01
Configuring OSPF
• Outgoing OSPF packets – After you make the change, the software continues to use the old
authentication to send packets, during the remainder of the current authentication-change
interval. After this, the software uses the new authentication for sending packets.
• Inbound OSPF packets – The software accepts packets containing the new authentication and
continues to accept packets containing the older authentication for two authentication-change
intervals. After the second interval ends, the software accepts packets only if they contain the
new authentication key.
The default authentication-change interval is 300 seconds (5 minutes). You change the interval to
a value from 0 through 14400 seconds.
OSPF provides graceful authentication change for all the following types of authentication changes
in OSPF:
• Changing authentication methods from one of the following to another of the following:
- Simple text password
- MD5 authentication
- No authentication
• Configuring a new simple text password or MD5 authentication key
• Changing an existing simple text password or MD5 authentication key
To change the authentication-change interval, enter a command such as the following at the
interface configuration level of the CLI.
Brocade(config-if-1/1/5)#ip ospf auth-change-wait-time 400
Syntax: [no] ip ospf auth-change-wait-time secs
The secs parameter specifies the interval and can be from 0 through 14400 seconds. The default
is 300 seconds (5 minutes).
NOTE
For backward compatibility, the ip ospf md5-authentication key-activation-wait-time seconds
command is still supported.
Block flooding of outbound LSAs on specific
OSPF interfaces
By default, the Layer 3 Switch floods all outbound LSAs on all the OSPF interfaces within an area.
You can configure a filter to block outbound LSAs on an OSPF interface. This feature is particularly
useful when you want to block LSAs from some, but not all, of the interfaces attached to the area.
After you apply filters to block the outbound LSAs, the filtering occurs during the database
synchronization and flooding.
If you remove the filters, the blocked LSAs are automatically re-flooded. You do not need to reset
OSPF to re-flood the LSAs.
NOTE
You cannot block LSAs on virtual links.
To apply a filter to an OSPF interface to block flooding of outbound LSAs on the interface, enter the
following commands at the Interface configuration level for that interface.