area authentication (OSPFv3)

Enables authentication for an OSPF Version 3 (OSPFv3) area.

Syntax

area { A.B.C.D | decimal } authentication spi value { ah | esp null } { hmac-md5 | hmac-sha1 } key key
no area { A.B.C.D | decimal } authentication spi value

Command Default

Authentication is not enabled on an area.

Parameters

A.B.C.D
Area address in dotted decimal format.
decimal
Area address in decimal format.
spi
Specifies the Security Policy Index (SPI).
value
Specifies the Security Policy Index (SPI) value. Valid values range from decimal numbers 512 through 4294967295
ah
Specifies authentication header (ah) as the protocol to provide packet-level security.
esp
Specifies Encapsulating Security Payload (ESP) as the protocol to provide packet-level security.
null
Specifies that the ESP payload is not encrypted.
hmac-md5

Enables Hashed Message Authentication Code (HMAC) Message Digest 5 (MD5) authentication on the OSPF area.

hmac-sha1

Enables HMAC Secure Hash Algorithm 1 (SHA-1) authentication on the OSPF area.

key
Number used in the calculation of the message digest.
key
The 40 hexadecimal character key.

Modes

OSPFv3 router configuration mode

OSPFv3 router VRF configuration mode

Usage Guidelines

Enter no area authentication spi to remove an authentication specification for an area from the configuration.

Examples

The following example enables ah and MD5 authentication for an OSPF area, setting a SPI value of 750.

device# configure termnial
device(config)# ip router-id 10.1.2.3 
device(config)# ipv6 router ospf 
device(config-ipv6-router-ospf-vrf-default-vrf)# area 0 authentication spi 750 ah hmac-md5 key abcef12345678901234fedcba098765432109876 
 

The following example enables esp and SHA-1 authentication for an OSPF area, setting a SPI value of 900.

device# configure terminal
device(config)# ip router-id 10.1.2.3 
device(config)# ipv6 router ospf 
device(config-ipv6-router-ospf-vrf-default-vrf)# area 0 authentication spi 900 esp null hmac-md5 sha1 abcef12345678901234fedcba098765432109876