juniper OSPF authentication
R1和R2为区域1，R2和R3为区域0.在R1和R2上进行MD5认证
root@R1# show
## Last changed: 2012-10-31 00:38:05 UTC
version 11.1R1.14;
system {
host-name R1;
root-authentication {
encrypted-password 123; ## SECRET-DATA
}
syslog {
user * {
any emergency;
}
file messages {
any notice;
authorization info;
}
file interactive-commands {
interactive-commands any;
}
}
}
interfaces {
em0 {
unit 0 {
family inet {
address 10.1.12.1/24;
}
}
}
lo0 {
unit 0 {
family inet {
address 1.1.1.1/24;
}
}
}
}
routing-options {
max-interface-supported 0;
}
protocols {
ospf {
traceoptions {
file ospf; ##定义个追踪文件名为OSPF
flag error detail;
flag hello detail;
}
area 0.0.0.1 {
interface lo0.0;
interface em0.0 {
authentication {
md5 10 key "$9$VgsgJikP36AGD6Ap0hcbs2"; ## SECRET-DATA
}
}
}
}
}
root@R2# show
## Last changed: 2012-10-31 01:05:53 UTC
version 11.1R1.14;
system {
host-name R2;
root-authentication {
encrypted-password 123; ## SECRET-DATA
}
syslog {
user * {
any emergency;
}
file messages {
any notice;
authorization info;
}
file interactive-commands {
interactive-commands any;
}
}
}
interfaces {
em0 {
unit 0 {
family inet {
address 10.1.23.1/24;
}
}
}
em1 {
unit 0 {
family inet {
address 10.1.12.2/24;
}
}
}
}
routing-options {
max-interface-supported 0;
}
protocols {
ospf {
area 0.0.0.1 {
interface em1.0 {
authentication {
md5 10 key "$9$IV0hyKX7V4aUM8aUjH5TRhS"; ## SECRET-DATA
}
}
}
area 0.0.0.0 {
interface em0.0;
}
}
}
如果设置密码不一致时
R1上的monitor
root@R1# run monitor start ospf //监视文件ospf
Oct 31 00:37:23.163572 OSPF hello from 10.1.12.2 (IFL 69, area 0.0.0.1) absorbed
Oct 31 00:37:23.163572 OSPF hello from 10.1.12.2 (IFL 69, area 0.0.0.1) absorbed
Oct 31 00:37:25.254799 OSPF packet ignored: authentication failure (bad cksum).
Oct 31 00:37:25.254926 OSPF packet ignored: authentication failure from 10.1.12.2
Oct 31 00:37:25.261828 OSPF packet ignored: authentication failure (bad cksum).
Oct 31 00:37:25.261981 OSPF packet ignored: authentication failure from 10.1.12.2
root@R2# run show ospf interface detail
Interface State Area DR> em0.0 BDR 0.0.0.0 10.1.23.2 10.1.12.2 1
Type: LAN, Address: 10.1.23.1, Mask: 255.255.255.0, MTU: 1500, Cost: 1
DR addr: 10.1.23.2, BDR addr: 10.1.23.1, Priority: 128
Adj count: 1
Hello: 10, Dead: 40, ReXmit: 5, Not Stub
Auth type: None
Protection type: None
Topology default (ID 0) -> Cost: 1
em1.0 DR 0.0.0.1 10.1.12.2 1.1.1.1 1
Type: LAN, Address: 10.1.12.2, Mask: 255.255.255.0, MTU: 1500, Cost: 1
DR addr: 10.1.12.2, BDR addr: 10.1.12.1, Priority: 128
Adj count: 1
Hello: 10, Dead: 40, ReXmit: 5, Not Stub
Auth type: MD5, Active key> Start time: 1970 Jan1 00:00:00 UTC
Protection type: None
Topology default (ID 0) -> Cost: 1
页:
[1]