OSPFv3 Authentication Trailer

OSFPv3 can be configured to authenticate packets using one of the following authentication algorithms:
  • Hashed Message Authentication Code-Secure Hash Algorithm 1 (HMAC-SHA-1)
  • Hashed Message Authentication Code-Secure Hash Algorithm 256 (HMAC-SHA-256)

The authentication algorithms provide varying levels of security and must be configured depending on your security requirements, including any regulatory requirements such as FIPS compliance.

Algorithms HMAC-SHA-1 and HMAC-SHA-256 are supported in FIPS-compliant deployments.

Authentication is implemented as detailed in RFC 2328 and RFC 5709.

Note: OSPFv3 packets are not authenticated by default. You must configure OSPFv3 authentication as required.

OSPFv3 authentication can be enabled on each interface, virtual link, or area.

In addition to the other authentication methods, you can configure keychain authentication. For more information regarding the keychain authentication module and configuration of keychains, refer to "Keychain module" in the RUCKUS FastIron Security Configuration Guide.

In this section:

  1. OSPFv3 Keychain Authentication
  2. OSPFv3 Authentication Trailer Configuration
    Authentication must be configured on each interface, virtual link, or area as required. The same authentication method must be enabled on peer and neighbor routers to ensure a connection is established and the packets are transmitted successfully.
Parent topic: OSPFv3 Authentication