Reference v4.1.0 Instruction Manual

380 Network OS Command Reference
53-1003115-01
ip ospf md5-authentication
2
ip ospf md5-authentication
Configures MD5 password and authentication change hold time.
Synopsis ip ospf md5-authentication {key-activation-wait-time wait-time | key-id id MD5_key {0 | 2 | 255}
ospf_password}
no ip ospf md5-authentication key-id
Operands key-activation-wait-time.
Sets the time that OSPF waits before activating a new key.
wait-time Time OSPF waits before activating a new MD5 key. This parameter provides
a graceful transition from one MD5 key to another without disturbing the
network. All new packets transmitted after the wait time ends will use the
newly configured MD5 Key. OSPF packets that contain the old MD5 key are
accepted for up to five minutes after the new MD5 key is in operation. Valid
values range from 0 to 14400 seconds. The default value is 300 seconds.
key-id Sets MD5 key and OSPF password.
id MD5_key The num is a number between 1 and 255 and identifies the MD5 key that
is being used. This parameter is required to differentiate among multiple
keys defined on a router. When MD5 is enabled, the key is an alphanumeric
password of up to 16 characters that is later encrypted and included in
each OSPF packet transmitted. You must enter a password in this field
when the system is configured to operate with either simple or MD5
authentication. By default, the MD5 authentication key is encrypted.
0 password No encryption. OSPF processes password as a plain text password and
shows the unencrypted password in the show running command output as
follows:
key 0 passwd
2 password Expects the user to provide the encrypted password, preceded by a dollar
sign ($), and shows the encrypted password in the show running command
output as follows:
key 2 $ci1pVT0=
255 password Expects the user to provide the encrypted password, and 255 internally
maps to 2. OSPF shows the encrypted password in the show running
command output as follows:
key 2 $ci1pVT0=
ospf_password OSPF processes password as a plain text password. OSPF internally
encrypts this password as if encryption key 2 was specified and shows the
encrypted password in the show running command output as follows:
key 2 $ci1pVT0=
Defaults No authentication.
Command Modes Interface subtype configuration mode
Description Use this command to sets or reset the MD5 password and/or authentication change hold time on
the interface to which you are connected.
Usage Guidelines Enter no ip ospf md5-authentication key-id to disable this configuration.