실제 장비 실습

OSPF 인증 기능

1. neighbor 인증 (point to point)

a. 평문인증

(Router 0)

Router(config)#int se0/0/0
Router(config-if)#ip ospf authentication
Router(config-if)#ip ospf authentication-key cisco

(Router 1)

Router(config)#int se0/0/0
Router(config-if)#ip ospf authentication
Router(config-if)#ip ospf authentication-key cisco

b. 암호화 인증

(Router 0)

Router(config)#int se0/0/0
Router(config-if)#ip ospf authentication message-digest
Router(config-if)#ip ospf message-digest-key 1 md5 cisco

(Router 1)

Router(config)#int se0/0/0
Router(config-if)#ip ospf authentication message-digest
Router(config-if)#ip ospf message-digest-key 1 md5 cisco

2. Area 인증

a. 평문인증

(Router 0)

Router(config)#int s0/0/0
Router(config-if)#ip ospf authentication
Router(config-if)#ip ospf authentication-key cisco
---(여기까진 neighbor 인증과 동일)---
Router(config)#router ospf 7
Router(config-router)#area 0 authentication 

(Router 1)

Router(config)#int s0/0/0
Router(config-if)#ip ospf authentication
Router(config-if)#ip ospf authentication-key cisco
---(여기까진 neighbor 인증과 동일)---
Router(config)#router ospf 7
Router(config-router)#area 0 authentication 

b. 암호화 인증

(Router 0)

Router(config)#int se0/0/0
Router(config-if)#ip ospf authentication message-digest 
Router(config-if)#ip ospf message-digest-key 1 md5 cisco
---(여기까진 neighbor 인증과 동일)---
Router(config-if)#router ospf 7
Router(config-router)#area 0 authentication message-digest 

(Router 1)

Router(config)#int se0/0/0
Router(config-if)#ip ospf authentication message-digest 
Router(config-if)#ip ospf message-digest-key 1 md5 cisco
---(여기까진 neighbor 인증과 동일)---
Router(config-if)#router ospf 7
Router(config-router)#area 0 authentication message-digest 

정리)
1. 따로 설정하는것 없이 양쪽 라우터에 같은 설정을 해주면 된다.
2. neighbor인증과 Area 인증의 차이점은 area 0 authentication, area 0 authentication message-digest1명령어를 라우터에 추가 해주냐 안해주냐 차이.

---