1. OSPF/a37028dd-ospf-interface-authentication.virl · master · CCIE Enterprise Infrastructure v1.0 / CCIE Enterprise Infrastructure v1.0 VIRL Topologies Project · GitLab
2. This lab base is identical to lab-a37028dd-7f55-43c3-b132-654db0f817a0.

Common Configuration Snippet

R1

configure terminal
!
interface GigabitEthernet 0/1
 ip address 10.1.2.1 255.255.255.0
 no shutdown
interface GigabitEthernet 0/2
 ip address 10.1.1.1 255.255.255.0
 no shutdown
interface Loopback 0
 ip address 1.1.1.1 255.255.255.255
 no shutdown
!
end

R2

configure terminal
!
interface GigabitEthernet 0/1
 ip address 10.2.3.2 255.255.255.0
 no shutdown
interface GigabitEthernet 0/2
 ip address 10.1.2.2 255.255.255.0
 no shutdown
interface Loopback 0
 ip address 2.2.2.2 255.255.255.255
 no shutdown
!
end

R3

configure terminal
!
interface GigabitEthernet 0/1
 ip address 10.3.3.3 255.255.255.0
 no shutdown
interface GigabitEthernet 0/2
 ip address 10.2.3.3 255.255.255.0
 no shutdown
interface Loopback 0
 ip address 3.3.3.3 255.255.255.255
 no shutdown
!
end

• R1

configure terminal
!
interface GigabitEthernet 0/1
 ip ospf authentication-key PG1X
!
router ospf 1
 area 10 authentication
 router-id 1.1.1.1
 network 10.1.1.1 0.0.0.0 area 10
 network 10.1.2.1 0.0.0.0 area 10
 network 1.1.1.1 0.0.0.0 area 10
 passive-interface GigabitEthernet 0/2
exit
!
end

• R2

configure terminal
!
interface GigabitEthernet 0/1
 ip ospf message-digest-key 1 md5 SuperSECRET
interface GigabitEthernet 0/2
 ip ospf authentication-key PG1X
!
router ospf 1
 area 10 authentication
 area 0 authentication message-digest
 router-id 2.2.2.2
 network 10.1.2.2 0.0.0.0 area 10
 network 10.2.3.2 0.0.0.0 area 0
 network 2.2.2.2 0.0.0.0 area 0
exit
!
end

• R3

configure terminal
!
interface GigabitEthernet 0/2
 ip ospf message-digest-key 1 md5 SuperSECRET
!
router ospf 1
 area 0 authentication
 router-id 3.3.3.3
 network 10.2.3.3 0.0.0.0 area 0
 network 10.3.3.3 0.0.0.0 area 0
 network 3.3.3.3 0.0.0.0 area 0
 passive-interface GigabitEthernet 0/1
exit
!
end

• Wireshark Display Filter

ospf

R1(config-if)#ip ospf authentication-key AuthenticateMe
% OSPF: Warning: The password/key will be truncated to 8 characters

R1 Console Log

R2 Console Log

R3 Console Log

Wireshark Packet Capture Result on R2

1. OSPF/26c5211a-ospf-area-authentication-each-neighbor-password.virl · master · CCIE Enterprise Infrastructure v1.0 / CCIE Enterprise Infrastructure v1.0 VIRL Topologies Project · GitLab

Common Configuration Snippet

R1

configure terminal
!
interface GigabitEthernet 0/1
 ip address 10.1.2.1 255.255.255.0
 no shutdown
interface GigabitEthernet 0/2
 ip address 10.3.1.1 255.255.255.0
 no shutdown
interface Loopback 0
 ip address 1.1.1.1 255.255.255.255
 no shutdown
!
end

R2

configure terminal
!
interface GigabitEthernet 0/1
 ip address 10.2.3.2 255.255.255.0
 no shutdown
interface GigabitEthernet 0/2
 ip address 10.1.2.2 255.255.255.0
 no shutdown
interface Loopback 0
 ip address 2.2.2.2 255.255.255.255
 no shutdown
!
end

R3

configure terminal
!
interface GigabitEthernet 0/1
 ip address 10.3.1.3 255.255.255.0
 no shutdown
interface GigabitEthernet 0/2
 ip address 10.2.3.3 255.255.255.0
 no shutdown
interface Loopback 0
 ip address 3.3.3.3 255.255.255.255
 no shutdown
!
end

• R1

configure terminal
!
interface GigabitEthernet 0/1
 ip ospf message-digest-key 1 md5 R1-R2-secret
interface GigabitEthernet 0/2
 ip ospf message-digest-key 1 md5 R3-R1-secret
!
router ospf 1
 area 0 authentication message-digest
 router-id 1.1.1.1
 network 10.1.2.1 0.0.0.0 area 0
 network 10.3.1.1 0.0.0.0 area 0
 network 1.1.1.1 0.0.0.0 area 0
exit
!
end

• R2

configure terminal
!
interface GigabitEthernet 0/1
 ip ospf message-digest-key 1 md5 R2-R3-secret
interface GigabitEthernet 0/2
 ip ospf message-digest-key 1 md5 R1-R2-secret
!
router ospf 1
 area 0 authentication message-digest
 router-id 2.2.2.2
 network 10.1.2.2 0.0.0.0 area 0
 network 10.2.3.2 0.0.0.0 area 0
 network 2.2.2.2 0.0.0.0 area 0
exit
!
end

• R3

configure terminal
!
interface GigabitEthernet 0/1
 ip ospf message-digest-key 1 md5 R3-R1-secret
interface GigabitEthernet 0/2
 ip ospf message-digest-key 1 md5 R2-R3-secret
!
router ospf 1
 area 0 authentication message-digest
 router-id 3.3.3.3
 network 10.2.3.3 0.0.0.0 area 0
 network 10.3.1.3 0.0.0.0 area 0
 network 3.3.3.3 0.0.0.0 area 0
exit
!
end

• Wireshark Display Filter

ospf

R1 Console Log

R2 Console Log

R3 Console Log

1. 26c5211a-52cea8bf-ospf-interface-authentication-r1-ge0-1.pcapng
2. 26c5211a-52cea8bf-ospf-interface-authentication-r2-ge0-1.pcapng
3. 26c5211a-52cea8bf-ospf-interface-authentication-r3-ge0-1.pcapng

1. OSPF - エリア認証の設定
2. Cisco IOS IP Routing: OSPF Command Reference - OSPF Commands: A through ip ospf demand-circuit [Support] - Cisco
3. Cisco: OSPF Interface Authentication