HP VPN Firewall Appliances Network Management Configuration Guide

380
Item Descri
p
tion
Authentication Mode
Set the authentication mode and parameters for authenticating OSPF packets on the
interface.
To prevent leakage of routing information and guard against attacks to OSPF
routers, OSPF provides the packet authentication function. To establish neighboring
relationship with a router, an OSPF router sends packets containing the
preconfigured password for authentication. OSPF only receives packets that pass
authentication. Failed packets cannot establish neighboring relationships.
• If the Authentication Mode is null, the interface does not authenticate OSPF
packets, and the Key String and Key ID are not required.
• If Simple is specified for Authentication Mode, the interface authenticates OSPF
packets by using simple text key. You must configure a Key String in simple text.
When you view the configuration file, the authentication key is displayed in
simple text.
• If MD5 is specified for Authentication Mode, the interface authenticates OSPF
packets by using MD5 authentication. You must configure a Key String in cipher
text and a Key ID.
• If HMAC-MD5 is specified for Authentication Mode, the interface authenticates
OSPF packets by using HMAC-MD5 authentication. You must configure a Key
String in cipher text and a Key ID.
IMPORTANT:
• If you configure authentication mode for an interface, you must configure the
same authentication mode for all interfaces in an OSPF area. To modify the
authentication mode, remove the authentication mode for all interfaces first.
• If you configure no authentication mode for any interface in an OSPF area, no
authentication is performed. If you configure an authentication mode for an
interface, the area adopts that authentication mode. An OSPF area supports only
simple and MD5 authentication. The MD5 authentication mode of an area
corresponds to the MD5 or HMAC-MD5 authentication mode of an interface.
• To implement OSPF packet authentication in an area, you must configure the
same authentication mode for all routers in the area and configure the same
authentication mode and password for interfaces on the same network segment.
Key String
Key ID
Displaying OSPF interface information
1. Select Network > Routing Management > OSPF from the navigation tree.
The OSPF configuration page appears.
2. After you complete OSPF area configurations, click Show Interface on the Show Information tab.
The OSPF interface information is displayed.
Figure 260 Displaying OSPF interface information