beautypg.com

Configuring ospf authentication, Adding the interface mtu into dd packets – H3C Technologies H3C S7500E Series Switches User Manual

Page 111

background image

4-42

A stub router has nothing to do with a stub area.

Configuring OSPF Authentication

OSPF supports packet authentication to ensure the security of packet exchange.

After authentication is configured, OSPF only receives packets that pass authentication, so failed

packets cannot establish neighboring relationships.

To configure OSPF authentication, you need to configure the same area authentication mode on all the

routers in the area. In addition, the authentication mode and password for all interfaces attached to the

same area must be identical.

Follow these steps to configure OSPF authentication:

To do…

Use the command…

Remarks

Enter system view

system-view

Enter OSPF view

ospf [ process-id | router-id router-id |

vpn-instance instance-name ] *

Enter area view

area area-id

Configure the authentication mode

authentication-mode { md5 | simple }

Required

Not configured by

default.

Exit to OSPF view

quit

Exit to system view

quit

Enter interface view

interface interface-type interface-number

Configure the authentication mode

(simple authentication) for the

interface

ospf authentication-mode simple [ cipher

| plain ] password

Configure the authentication mode

(MD5 authentication) for the

interface

ospf authentication-mode { hmac-md5 |

md5 } key-id [ cipher | plain ] password

Either is required.

Not configured by

default.

Adding the Interface MTU into DD Packets

Generally, when an interface sends a DD packet, it adds 0 into the Interface MTU field of the DD

packet rather than the interface MTU.

Follow these steps to add the interface MTU into DD packets: