COMPUTER TIPS
How to protect OSPF router from unsigned updates using MD5 algorithm?
Open Shortest Path First is a routing protocol used to select the best suitable route for packets with in network and developed by Internet Engineering Task Force (IETF). The OSPF use the SPF (Shortest Path First) algorithm to select the best path to destination. OSPF protocol check the availability of others routers in the network by sending Hello packets, if the other router does not respond then it is assumed to be dead router.
Today tip help you to enable authentication of Open Shortest Path First routing protocol packets to protect routing table. In this case, we will try to configure two different routers with routing protocol OSPF and then perform the authentication between them using the md5 algorithm.
Follow the network topology of two different class network in given figure:
Configuration to Enable OSPF on Router A
In global configuration Mode:
A (config#router ospf 20
(Enable OSPF protocol and 20 is process ID).
A (config-router)#network 40.0.0.0 0.255.255.255 area 0
(Advertised router A Serial Network 40.0.0.0 with wildcard mask 0.255.255.255)
A (config-router)#network 210.100.10.0 0.0.0.255 area 1
(Advertised router A Ethernet Network 210.100.10.0 with wildcard mask 0.0.0.255)
Configuration to Enable OSPF on Router B
In global configuration Mode:
B (config)#router ospf 20
(Enable OSPF protocol and 20 is process ID)
B (config-router)#network 40.0.0.0 0.255.255.255 area 0
(Advertised router A Serial Network 40.0.0.0 with wildcard mask 0.255.255.255)
B (config-router) # network 210.100.30.0 0.0.0.255 area 2
(Advertised router B Ethernet Network 210.100.10.0 with wildcard mask 0.0.0.255)
Now Configure OSPF Authentication on Router A
In global configuration Mode:
Now specify the interface that you want to configure OSPF message authentication.
A (config) #interface serial 0/0
A (config-if)#ip ospf message-digest-key 2 md5 password
A (config-if)#ip ospf authentication message-digest
A (config-if)#end
Now Configure OSPF Authentication on Router B
In global configuration Mode:
Now specify the interface that you want to configure OSPF message authentication.
B (config) #interface serial 0/0
B (config-if)#ip ospf message-digest-key 2 md5 password
B (config-if)#ip ospf authentication message-digest
B (config-if)#end
Break or recover the router passwordSuggested Reading
How to configure the Cisco IOS IDS step by step?
Routing Information Protocol (RIP) Configuration
How to configure site-to-site VPN tunnel using ASA?
How to protect EIGRP router from receiving unsigned routing updates?
How to recover the lost or forgotten password of Cisco PIX Firewall? New
How to configure BGP between two different autonomous systems?
How to configure virtual link between different areas in OSPF?
How to perform unequal-cost load balancing using EIGRP?
How to configure Site-to-Site IPsec VPN?
How configure EIGRP authentication to prevent unauthorized access?
How to recover the lost or forgotten password of Cisco switches?
How to protect OSPF router from unsigned updates using MD5 algorithm? New
How to configure BGP with weight attribute?
How to perform configuration and convergence between RIP and IGRP protocols?
How to configure EtherChannel using PAgP protocol? New
Interior Gateway Routing Protocol (IGRP) Configuration
Extended IP Access Control List
How to configure EtherChannel using LACP protocol? New
Enhanced Interior Gateway Routing Protocol (EIGRP) Configuration
Useful Router commands and configuration Common Frame Relay Configuration
Home | Previous Page | Site Map | About Us