OSPFv3 Authentication Trailer Configuration

Authentication must be configured on each interface, virtual link, or area as required. The same authentication method must be enabled on peer and neighbor routers to ensure a connection is established and the packets are transmitted successfully.

OSPFv3 authentication trailer is defined in RFC 7166 and RFC 6506. RFC 7166 supersedes RFC 6506 and by default FastIron implements authentication trailer in accordance with RFC 7166. However, some vendor equipment still supports RFC 6506. If your deployment includes vendor equipment that supports RFC 6506, you can configure authentication for the required interfaces or virtual links, as required, using the ospf authentication rfc6506 command.

In this section:

  1. Configuring HMAC-SHA-1 or HMAC-SHA-256 Authentication on an OSPFv3 Interface
    To configure HMAC-SHA-1 or HMAC-SHA-256 authentication on an OSPFv3 interface, complete the following steps.
  2. Configuring HMAC-SHA-1 or HMAC-SHA-256 Authentication on an OSPFv3 Virtual Link
    To configure HMAC-SHA-1 or HMAC-SHA-256 authentication on an OSPFv3 virtual link, complete the following steps.
  3. Configuring HMAC-SHA-1 or HMAC-SHA-256 Authentication on an OSPFv3 Area
    To configure an OSPFv3 area so all devices within the area use HMAC-SHA-1 or HMAC-SHA-256 authentication, complete the following steps.
  4. Configuring keychain authentication on an OSPFv3 interface
    To configure keychain authentication on an OSPFv3 interface, complete the following steps.
  5. Configuring keychain authentication on an OSPFv3 virtual link
    To configure keychain authentication on an OSPFv3 virtual link, complete the following steps.
  6. Configuring Keychain Authentication on an OSPFv3 Area
    To configure an OSPFv3 area so all devices within the area use keychain authentication, complete the following steps.
  7. Configuring authentication key activation wait time on an OSPFv3 interface
    The key activation wait time configures the time before an authentication key change is activated for an OSPFv3 interface. This allows you to coordinate a key change across devices to ensure there is no disruption to service.
  8. Configuring Authentication Key Activation Wait Time on an OSPFv3 Virtual Link
    The key activation wait time configures the time before an authentication key change is activated for an OSPFv3 virtual link. This allows you to coordinate a key change across devices to ensure there is no disruption to service.
  9. Configuring RFC 6506 Authentication on an OSPFv3 Interface
    This may be required for interoperability purposes. By default, OSPFv3 authentication is implemented in accordance with RFC 7166, which supersedes RFC 6506. However, some vendors still support RFC 6506. To configure authentication in accordance with RFC 6506 on an OSPFv3 interface, complete the following steps.
  10. Configuring RFC 6506 Authentication on an OSPFv3 Virtual Link
    This may be required for interoperability purposes. By default, OSPFv3 authentication is implemented in accordance with RFC 7166, which supersedes RFC 6506. However, some vendors still support RFC 6506. To configure authentication in accordance with RFC 6506 on an OSPFv3 virtual link, complete the following steps.
  11. Displaying OSPFv3 Results
    To view the OSPFv3 interface details and authentication settings, use the show ipv6 ospf interface command. This command is optional and allows you to verify the OSPFv3 details.
Parent topic: OSPFv3 Authentication Trailer