area sham-link message-digest-key

Use this command to configure a message digest key for an OSPF sham link.

Syntax

area area-id sham-link source-ip-address destination-ip-address message-digest-key digest-key md5 auth-key
no area area-id sham-link source-ip-address destination-ip-address message-digest-key digest-key

Parameters

area-id Specifies the OSPF area the two PE routers belong to.
source-ip-address Specifies the source IP address for this sham link.
destination-ip-address Specifies the destination IP address for this sham link.
message-digest-key digest-key md5 auth-key (Optional) Specifies the message digest key settings:
  • digest-key - Specifies the key identifier on the interface where MD5 authentication is enabled in a value range from 1 - 255.
  • auth-key - Specifies a password for MD5 authentication to be used with the digest-key. Valid values are alphanumeric strings of up to 16 bytes.

Defaults

None.

Mode

VRF configuration, OSPF router configuration.

Usage

This command validates OSPF MD5 routing updates between neighboring routers.

The “no” form of this command removes the message digest key configuration from the sham link.

Example

This example shows how to enable OSPF MD5 authentication on a sham link between two PE routers with a source address of 172.16.1.10 and a destination address of 172.16.2.20 on OSPF router instance 10, VRF doc, set the key identifier to 20, and set the password to passone:

System(su)->router doc
System(su-doc)->configure
System(su-doc-config)->router ospf 10
System(su-doc-config-ospf-10)->enable-pe-ce
System(su-doc-config-ospf-10)->area 10 sham-link 172.16.1.10 172.16.2.20 message-digest-key 20 md5 passone