area authentication (OSPFv3)

Enables authentication for an OSPF Version 3 (OSPFv3) area.

Syntax

area { A.B.C.D | decimal } authentication spi value { ah | esp null } { hmac-md5 | hmac-sha1 } key key

no area { A.B.C.D | decimal } authentication spi value

Command Default

Authentication is not enabled on an area.

Parameters

A.B.C.D

Area address in dotted decimal format.

decimal

Area address in decimal format.

spi

Specifies the Security Policy Index (SPI).

value: Specifies the Security Policy Index (SPI) value. Valid values range from decimal numbers 512 through 4294967295

ah

Specifies authentication header (ah) as the protocol to provide packet-level security.

esp

Specifies Encapsulating Security Payload (ESP) as the protocol to provide packet-level security.

null: Specifies that the ESP payload is not encrypted.

hmac-md5

Enables Hashed Message Authentication Code (HMAC) Message Digest 5 (MD5) authentication on the OSPF area.

hmac-sha1

Enables HMAC Secure Hash Algorithm 1 (SHA-1) authentication on the OSPF area.

key

Number used in the calculation of the message digest.

key: The 40 hexadecimal character key.

Modes

OSPFv3 router configuration mode

OSPFv3 router VRF configuration mode

Usage Guidelines

Enter no area authentication spi to remove an authentication specification for an area from the configuration.

Note

MD5 passwords cannot have ASCII character 32 ('SPACE') as a part of the password string.

Examples

The following example enables ah and MD5 authentication for an OSPF area, setting a SPI value of 750.

device# configure termnial
device(config)# ip router-id 10.1.2.3 
device(config)# ipv6 router ospf 
device(config-ipv6-router-ospf-vrf-default-vrf)# area 0 authentication spi 750 ah hmac-md5 key abcef12345678901234fedcba098765432109876

The following example enables esp and SHA-1 authentication for an OSPF area, setting a SPI value of 900.

device# configure terminal
device(config)# ip router-id 10.1.2.3 
device(config)# ipv6 router ospf 
device(config-ipv6-router-ospf-vrf-default-vrf)# area 0 authentication spi 900 esp null hmac-md5 sha1 abcef12345678901234fedcba098765432109876