1. OSPF/a37028dd-ospf-interface-authentication.virl · master · CCIE Enterprise Infrastructure v1.0 / CCIE Enterprise Infrastructure v1.0 VIRL Topologies Project · GitLab

Common Configuration Snippet

R1

configure terminal
!
interface GigabitEthernet 0/1
 ip address 10.1.2.1 255.255.255.0
 no shutdown
interface GigabitEthernet 0/2
 ip address 10.1.1.1 255.255.255.0
 no shutdown
interface Loopback 0
 ip address 1.1.1.1 255.255.255.255
 no shutdown
!
end

R2

configure terminal
!
interface GigabitEthernet 0/1
 ip address 10.2.3.2 255.255.255.0
 no shutdown
interface GigabitEthernet 0/2
 ip address 10.1.2.2 255.255.255.0
 no shutdown
interface Loopback 0
 ip address 2.2.2.2 255.255.255.255
 no shutdown
!
end

R3

configure terminal
!
interface GigabitEthernet 0/1
 ip address 10.3.3.3 255.255.255.0
 no shutdown
interface GigabitEthernet 0/2
 ip address 10.2.3.3 255.255.255.0
 no shutdown
interface Loopback 0
 ip address 3.3.3.3 255.255.255.255
 no shutdown
!
end

• R1

configure terminal
!
router ospf 1
 router-id 1.1.1.1
 network 10.1.1.1 0.0.0.0 area 10
 network 10.1.2.1 0.0.0.0 area 10
 network 1.1.1.1 0.0.0.0 area 10
exit
!
end

• R2

configure terminal
!
router ospf 1
 router-id 2.2.2.2
 network 10.1.2.2 0.0.0.0 area 10
 network 10.2.3.2 0.0.0.0 area 0
 network 2.2.2.2 0.0.0.0 area 0
exit
!
end

• R3

configure terminal
!
router ospf 1
 router-id 3.3.3.3
 network 10.2.3.3 0.0.0.0 area 0
 network 10.3.3.3 0.0.0.0 area 0
 network 3.3.3.3 0.0.0.0 area 0
exit
!
end

• Wireshark Display Filter

ospf

Wireshark Packet Capture Result on R2

• R1

configure terminal
!
interface GigabitEthernet 0/1
 ip ospf authentication
 ip ospf authentication-key PG1X
!
router ospf 1
 router-id 1.1.1.1
 network 10.1.1.1 0.0.0.0 area 10
 network 10.1.2.1 0.0.0.0 area 10
 network 1.1.1.1 0.0.0.0 area 10
exit
!
end

• R2

configure terminal
!
interface GigabitEthernet 0/1
 ip ospf authentication message-digest
 ip ospf message-digest-key 1 md5 SuperSECRET
interface GigabitEthernet 0/2
 ip ospf authentication
 ip ospf authentication-key PG1X
!
router ospf 1
 router-id 2.2.2.2
 network 10.1.2.2 0.0.0.0 area 10
 network 10.2.3.2 0.0.0.0 area 0
 network 2.2.2.2 0.0.0.0 area 0
exit
!
end

• R3

configure terminal
!
interface GigabitEthernet 0/2
 ip ospf authentication message-digest
 ip ospf message-digest-key 1 md5 SuperSECRET
!
router ospf 1
 router-id 3.3.3.3
 network 10.2.3.3 0.0.0.0 area 0
 network 10.3.3.3 0.0.0.0 area 0
 network 3.3.3.3 0.0.0.0 area 0
exit
!
end

• Wireshark Display Filter

ospf

R1(config-if)#ip ospf authentication-key AuthenticateMe
% OSPF: Warning: The password/key will be truncated to 8 characters

R1 Console Log

R2 Console Log

R3 Console Log

Wireshark Packet Capture Result on R2

1. OSPF - インターフェース認証の設定