1、 OSPF区域简单密码认证
a、 在区域内验证
b、 配置命令
验证方式: area 区域号 authentication
简单密码:ip ospf authentication-key密码
c、查看认证方式:show ip ospf interface
d、认证成功能收到hello报文,建立邻居关系,不成功,则不会建立邻居关系
R1配置
en
conf t
hostname R1
int loopback 0
ip address 1.1.1.1 255.255.255.0
no shutdown
exit
int f0/0
ip address 192.168.1.2 255.255.255.0
no shutdown
exit
router ospf 1
network 192.168.1.0 0.0.0.255 area 0
network 192.168.2.0 0.0.0.255 area 0
network 1.1.1.0 0.0.0.255 area 0
area 0 authentication
exit
int f0/1
ip address 192.168.2.1 255.255.255.0
ip ospf authentication-key abc
no shutdown
exit
end
R2配置
en
conf t
hostname R2
int loopback 0
ip address 2.2.2.2 255.255.255.0
no shutdown
exit
router ospf 1
network 192.168.3.0 0.0.0.255 area 0
network 192.168.2.0 0.0.0.255 area 0
network 2.2.2.0 0.0.0.255 area 0
area 0 authentication
exit
int f0/1
ip address 192.168.2.2 255.255.255.0
ip ospf authentication-key abc
no shutdown
exit
int f0/0
ip address 192.168.3.2 255.255.255.0
no shutdown
exit
end
R2#show ip ospf interface
Loopback0 is up, line protocol is up
Internet address is 2.2.2.2/24, Area 0
Process ID 1, Router ID 2.2.2.2, Network Type LOOPBACK, Cost: 1
Loopback interface is treated as a stub Host
FastEthernet0/1 is up, line protocol is up
Internet address is 192.168.2.2/24, Area 0
Process ID 1, Router ID 2.2.2.2, Network Type BROADCAST, Cost: 1
Transmit Delay is 1 sec, State DR, Priority 1
Designated Router (ID) 2.2.2.2, Interface address 192.168.2.2
Backup Designated Router (ID) 1.1.1.1, Interface address 192.168.2.1
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
Hello due in 00:00:03
Index 2/2, flood queue length 0
Next 0x0(0)/0x0(0)
Last flood scan length is 1, maximum is 1
Last flood scan time is 0 msec, maximum is 0 msec
Neighbor Count is 1, Adjacent neighbor count is 1
Adjacent with neighbor 1.1.1.1 (BackupDesignated Router)
Suppress hello for 0 neighbor(s)
Simple password authentication enabled
FastEthernet0/0 is up, line protocol is up
Internet address is 192.168.3.2/24, Area 0
Process ID 1, Router ID 2.2.2.2, Network Type BROADCAST, Cost: 1
Transmit Delay is 1 sec, State DR, Priority 1
Designated Router (ID) 2.2.2.2, Interface address 192.168.3.2
Nobackup designated router on this network
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
Hello due in 00:00:03
Index 3/3, flood queue length 0
Next 0x0(0)/0x0(0)
Last flood scan length is 1, maximum is 1
Lastflood scan time is 0 msec, maximum is 0 msec
Neighbor Count is 0, Adjacent neighbor count is 0
Suppress hello for 0 neighbor(s)
Simple passwordauthentication enabled
解释:Simple passwordauthentication enabled简单密码认证启动。
R2#show ip ospf database
OSPF Router with ID (2.2.2.2) (Process ID 1)
Router Link States (Area 0)
Link ID ADV Router Age Seq# Checksum Link count
2.2.2.2 2.2.2.2 431 0x80000005 0x00f7d7 3
1.1.1.1 1.1.1.1 431 0x80000005 0x00f2eb 3
Net Link States (Area 0)
Link ID ADV Router Age Seq# Checksum
192.168.2.2 2.2.2.2 431 0x80000001 0x006929
R2#show ip ospf neighbor
Neighbor ID Pri State Dead Time Address Interface
1.1.1.1 1 FULL/BDR 00:00:31 192.168.2.1 FastEthernet0/1
解释:密码验证成功,可以收到相互的信息,如不成功,不能收到 hello 报文,也就不能建立邻居关系。