区域简单密码认证

1、 OSPF区域简单密码认证

 

a、 在区域内验证

b、 配置命令

验证方式： area 区域号 authentication

简单密码：ip ospf authentication-key密码  

c、查看认证方式：show ip ospf interface

d、认证成功能收到hello报文，建立邻居关系，不成功，则不会建立邻居关系

R1配置

en
conf t
hostname R1
 
int loopback 0
ip address 1.1.1.1 255.255.255.0
no shutdown
exit
 
int f0/0
ip address 192.168.1.2 255.255.255.0
no shutdown
exit
 
router ospf 1
network 192.168.1.0 0.0.0.255 area 0
network 192.168.2.0 0.0.0.255 area 0
network 1.1.1.0 0.0.0.255 area 0
area 0 authentication
exit
 
int f0/1
ip address 192.168.2.1 255.255.255.0
ip ospf authentication-key abc
no shutdown
exit
end

 

 

 

 

R2配置

en
conf t
hostname R2
 
int loopback 0
ip address 2.2.2.2 255.255.255.0
no shutdown
exit
 
 
router ospf 1
network 192.168.3.0 0.0.0.255 area 0
network 192.168.2.0 0.0.0.255 area 0
network 2.2.2.0 0.0.0.255 area 0
area 0 authentication
exit
 
int f0/1
ip address 192.168.2.2 255.255.255.0
ip ospf authentication-key abc
no shutdown
exit
 
 
int f0/0
ip address 192.168.3.2 255.255.255.0
no shutdown
exit
end

 

 

 

 

R2#show ip ospf interface

Loopback0 is up, line protocol is up

 Internet address is 2.2.2.2/24, Area 0

 Process ID 1, Router ID 2.2.2.2, Network Type LOOPBACK, Cost: 1

 Loopback interface is treated as a stub Host

FastEthernet0/1 is up, line protocol is up

 Internet address is 192.168.2.2/24, Area 0

 Process ID 1, Router ID 2.2.2.2, Network Type BROADCAST, Cost: 1

 Transmit Delay is 1 sec, State DR, Priority 1

 Designated Router (ID) 2.2.2.2, Interface address 192.168.2.2

 Backup Designated Router (ID) 1.1.1.1, Interface address 192.168.2.1

 Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5

   Hello due in 00:00:03

 Index 2/2, flood queue length 0

 Next 0x0(0)/0x0(0)

 Last flood scan length is 1, maximum is 1

 Last flood scan time is 0 msec, maximum is 0 msec

 Neighbor Count is 1, Adjacent neighbor count is 1

   Adjacent with neighbor 1.1.1.1  (BackupDesignated Router)

 Suppress hello for 0 neighbor(s)

 Simple password authentication enabled

FastEthernet0/0 is up, line protocol is up

 Internet address is 192.168.3.2/24, Area 0

 Process ID 1, Router ID 2.2.2.2, Network Type BROADCAST, Cost: 1

 Transmit Delay is 1 sec, State DR, Priority 1

 Designated Router (ID) 2.2.2.2, Interface address 192.168.3.2

  Nobackup designated router on this network

 Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5

   Hello due in 00:00:03

 Index 3/3, flood queue length 0

 Next 0x0(0)/0x0(0)

 Last flood scan length is 1, maximum is 1

  Lastflood scan time is 0 msec, maximum is 0 msec

 Neighbor Count is 0, Adjacent neighbor count is 0

 Suppress hello for 0 neighbor(s)

Simple passwordauthentication enabled

 

 

 

解释：Simple passwordauthentication enabled简单密码认证启动。

 

R2#show ip ospf database

           OSPF Router with ID (2.2.2.2) (Process ID 1)

 

                Router Link States (Area 0)

 

Link ID         ADV Router      Age         Seq#       Checksum Link count

2.2.2.2         2.2.2.2         431         0x80000005 0x00f7d7 3

1.1.1.1        1.1.1.1         431         0x80000005 0x00f2eb 3

 

                Net Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum

192.168.2.2     2.2.2.2         431         0x80000001 0x006929

 

R2#show ip ospf neighbor

 

Neighbor ID     Pri  State           Dead Time   Address         Interface

1.1.1.1           1  FULL/BDR        00:00:31    192.168.2.1     FastEthernet0/1

 

 

解释：密码验证成功，可以收到相互的信息，如不成功，不能收到 hello 报文，也就不能建立邻居关系。