ipv6 ospf authentication spi

Specifies the security policy index (SPI) value for an OSPFv3 interface.

Syntax

ipv6 ospf authentication spi spi { ah | esp null } { hmac-md5 | hmac-sha1 } key key }

no ipv6 ospf authentication spi

Command Default

Disabled.

Parameters

spi

SPI value. Valid values range from decimal numbers 512 through 4294967295.

ah

Specifies Authentication Header (ah) as the protocol to provide packet-level security.

esp

Specifies Encapsulating Security Payload (ESP) as the protocol to provide packet-level security.

null: Specifies that the ESP payload is not encrypted.

hmac-md5

Enables Hashed Message Authentication Code (HMAC) Message Digest 5 (MD5) authentication on the OSPFv3 interface.

hmac-sha1

Enables HMAC Secure Hash Algorithm 1 (SHA-1) authentication on the OSPFv3 interface.

key

Number used in the calculation of the message digest.

key

The 40 hexadecimal character key.

Modes

Interface subtype configuration mode

Usage Guidelines

Enter no ipv6 ospf authentication spi spi to remove the SPI value from the interface.

Examples

The following example enables ESP and HMAC-SHA-1 on an OSPFv3 Ethernet interface.

device# configure terminal
device(config)# interface ethernet 1/1
device(conf-if-eth-1/1)# ipv6 ospf area 0
device(conf-if-eth-1/1)# ipv6 ospf authentication spi 512 esp null hmac-sha1 key abcef12345678901234fedcba098765432109876

The following example enables AH and HMAC-MD5 on an OSPFv3 virtual Ethernet (VE) interface.

device# configure terminal
device(config)# interface ve 1
device(config-if-Ve-1)# ipv6 ospf area 0
device(config-if-Ve-1# ipv6 ospf authentication spi 750 ah hmac-md5 key abcef12345678901234fedcba098765432109876