ip ospf authentication-type (for a VLAN)

Configure the OSPF authentication type for the VLAN. If you choose simple, you must configure the password with the ip ospf authentiation-key WORD<0-8> command. If you choose MD5, you must configure the MD5 key with the ip ospf message-digest-key <1-255> md5 WORD<0-16> command.

Syntax

Command Parameters

message-digest
Configures the authentication-type to message-digest. If you choose MD5, you must configure the MD5 key with the ip ospf message-digest-key <1-255> md5 WORD<0-16> command. Message Digest 5 (MD5) provides standards-based authentication using 128-bit encryption. If you use MD5, each OSPF packet has a message digest appended to it. The digest must match between sending and receiving routers, or the packet is discarded.
none
Configures the authentication-type to none.
sha-1
Configures the authentication-type to secure hash algorithm 1 (SHA-1). SHA-1 provides standards-based authentication using 128-bit encryption.
sha-2
sha-2—Specifies SHA-2, which offers the hash function SHA-256.
Note

Note

The command parameter sha-2, an update of SHA-1, can offer six hash functions that include SHA-224, SHA-256, SHA-384, SHA-512, SHA-512/224,SHA 512/256, with hash values that are 224, 256, 384, or 512 bits. However, the current release supports only SHA-256.

simple
Configures the authentication-type to simple, which is a simple-text password. Only routers that contain the same authentication ID in their LSA can communicate with each other. Using this security mechanism is not recommended. If you choose simple, you must configure the password with the ip ospf authentiation-key WORD<0-8> command.

Default

None

Command Mode

VLAN Interface Configuration

9036827-00 Rev AA