area virtual-link authentication keychain (OSPFv2)

Configures keychain authentication for Open Shortest Path First version 2 (OSPFv2) area virtual link.
Syntax
area { ip-addr | decimal } virtual-link E.F.G.H authentication keychain keychain-name
no area { ip-addr | decimal } virtual-link E.F.G.H authentication
Command Default

Keychain authentication is disabled by default.

Parameters
ip-addr
Area address in IP address format.
decimal
Area address in decimal format.
E.F.G.H
ID of the OSPF router at the remote end of the virtual link.
authentication keychain keychain-name
Specifies the name of the keychain that OSPFv2 uses to authenticate the packets.
Modes

OSPF router configuration mode

OSPF router VRF configuration mode

Usage Guidelines

The keychain authentication module provides the OSPFv2 protocol the option to automatically change the key ID and cryptographic algorithm without manual intervention.

With this configuration, OSPFv2 requests the keychain authentication module for all active keys in the keychain and selects the keys for sending and accepting the packets.

The no form of the command removes keychain authentication from the OSPFv2 area virtual link.

Examples

The following example configures the OSPFv2 area virtual link to use the keychain authentication module with the "ruckus" keychain. 

device# configure terminal
device(config)# ip router-id 10.1.1.1
device(config)# router ospf
device(config-ospf-router)# area 1 virtual-link 20.1.1.1 authentication keychain ruckus
History
Release version Command history
08.0.70 This command was introduced.
Parent topic: Commands A and B