OSPF 認証

area 認証

　　エリアに所属するすべてのI/F上で認証設定が有効になる

• clear text

router ospf 1
 area 0 authentication
!
interface FastEthernet 0/0
 ip ospf authentication-key cisco

• md5

router ospf 1
 area 10 authentication message-digest
!
interface FastEthernet 0/1
 ip ospf message-digest-key 1 md5 cisco

interface 認証

　　インターフェースごとに認証とパスワードを設定

• clear text

interface FastEthernet 0/0
 ip ospf authentication 
 ip ospf authentication-key cisco

• md5

interface FastEthernet 0/1
 ip ospf authentication message-digest
 ip ospf message-digest-key 1 md5 cisco

virtual-link 認証

　　インタフェースではなくエリア認証が必要

===(area 20)===R2===(area 10=transit area)===R1===(area 0)===R3

　 172.18.0.0/16 　　　　　　　172.17.0.0/16 　　　　　　　　　172.16.0.0/16

• clear text

R1

router ospf 1
 router-id 1.1.1.1
 area 10 virtual-link 2.2.2.2 authentication-key cisco
 area 0 authentication
 network 172.16.0.1 0.0.0.0 area 0
 network 172.17.0.1 0.0.0.0 area 10
!
interface FastEthernet 0/1
 ip ospf authentication-key cisco

R2

router ospf 1
 router-id 2.2.2.2
 area 10 virtual-link 1.1.1.1 authentication-key cisco
 area 0 authentication
 network 172.17.0.2 0.0.0.0 area 10 

• md5

R1

router ospf 1
 router-id 1.1.1.1
 area 10 virtual-link 2.2.2.2 authentication-key cisco
 area 0 authentication message-digest
 network 172.16.0.1 0.0.0.0 area 0
 network 172.17.0.1 0.0.0.0 area 10
!
interface FastEthernet 0/1
 ip ospf authentication-key cisco

R2

router ospf 1
 router-id 2.2.2.2
 area 10 virtual-link 1.1.1.1 authentication-key cisco
 area 0 authentication message-digest
 network 172.17.0.2 0.0.0.0 area 10

その頂の名はCCIE