Dell EMC SmartFabric OS10 User Guide Release 10.5.1

Configure IPsec authentication for OSPFv3 area

Prerequisite: Before you enable IPsec authentication for an OSPFv3 area, enable OSPFv3 globally on the router.

• Enable IPsec authentication for OSPFv3 packets in an area in Router-OSPFv3 mode.

  area area-id  authentication ipsec spi number {MD5 | SHA1} key

  • area area-id — Enter an area ID as a number or IPv6 prefix.
  • ipsec spi number — Enter a unique security policy index (SPI) value, from 256 to 4294967295.
  • md5 — Enable message digest 5 (MD5) authentication.
  • sha1 — Enable secure hash algorithm 1 (SHA1) authentication.
  • key — Enter the text string used in the authentication type. All OSPFv3 routers in the area share the key to exchange information. Only a non-encrypted key is supported. For MD5 authentication, the non-encrypted key must be 32 plain hex digits. For SHA1 authentication, the non-encrypted key must be 40 hex digits. An encrypted key is not supported.

To delete an IPsec area authentication policy, use the no area area-id authentication ipsec spi number command.

OS10(config-router-ospfv3-100)# area 1 authentication ipsec spi 400 md5 12345678123456781234567812345678
OS10(config-router-ospfv3-100)# show configuration
!
router ospfv3 100
area 0.0.0.1 authentication ipsec spi 400 md5 12345678123456781234567812345678