close

keyboard_arrow_left

Table of Contents Expand all

list Table of Contents

English

authentication (Protocols OSPF)

date_range 03-Jun-24

arrow_backward

arrow_forward

Syntax

content_copy zoom_out_map
authentication {
    md5 key-identifier {
        key key-value;
        start-time YYYY-MM-DD.hh:mm;
    }
    simple-password key;
    multi-active-md5 key-identifier {
        key key-value delete-if-not-inuse;    
    }
    keychain keychain;}

Hierarchy Level

[edit logical-systems logical-system-name protocols ospf area area-id interface interface-name],
[edit logical-systems logical-system-name protocols ospf area area-id virtual-link],
[edit logical-systems logical-system-name routing-instances routing-instance-name protocols ospf area area-id interface interface-name],
[edit logical-systems logical-system-name routing-instances routing-instance-name protocols ospf area area-id virtual-link],
[edit protocols ospf area area-id interface interface-name],
[edit protocols ospf area area-id virtual-link],
[edit routing-instances routing-instance-name protocols ospf area area-id interface interface-name],
[edit routing-instances routing-instance-name protocols ospf area area-id virtual-link]

Description

Configure an authentication key (password). Neighboring routers use the password to verify the authenticity of packets sent from this interface.

All routers that are connected to the same IP subnet must use the same authentication scheme and password.

The remaining statements are explained separately. See CLI Explorer.

Options

simple-password `key`	Configures a simple authentication password string, defined by `key`.
md5	Configure an MD5 password. `key-identifier`—MD5 key identifier. Range is from 0 through 255. Default is 0. `key` `key-values`—One or more MD5 key strings. The MD5 key values can be from 1 through 16 characters long. You can specify more than one key value within the list. Characters can include ASCII strings. If you include spaces, enclose all characters in quotation marks (“ ”). `start-time` `time`—MD5 start date and time, in the format `YYYY`-`MM`-`DD`.`hh`:`mm`.
multi-active-md5	Configure authentication type MD5 with multi active keys `key-identifier`—multi active MD5 key identifier. Range is from 0 through 255. Default is 0. `key` `key-values`One or more MD5 key strings. The MD5 key values can be from 1 through 16 characters long. You can specify more than one key value within the list. Characters can include ASCII strings. If you include spaces, enclose all characters in quotation marks (“ ”). `delete-if-not-inuse`—Delete this key if not in use. This option added under `multi-active-md5` for an OSPF interface marks the key as old. If a new key is available on an OSPFv2 interface and once all the neighbors on the OSPFv2 interface use the new key, then OSPFv2 stops sending OSPFv2 packets with key that is marked as `delete-if-not-inuse`.
keychain `keychain`	For each keychain, you must specify a name. For example, ospf_auth. You can have multiple keychains on a routing device. For example, you can have a keychain for OSPF, a keychain for BGP, and a keychain for LDP.

Required Privilege Level

routing—To view this statement in the configuration.

routing-control—To add this statement to the configuration.

Release Information

Statement introduced before Junos OS Release 7.4.

The option keychain keychain introduced in Junos OS and Junos OS Evolved Release 23.4R1.

arrow_backward PREVIOUS auth-user-agent

NEXT arrow_forward authentication (services)

Junos CLI Reference

ON THIS PAGE

authentication (Protocols OSPF)

Syntax

Hierarchy Level

Description

Options

Required Privilege Level

Release Information

Stay in touch

Helped me install or use the product
Accelerated my deployment

Discuss the product with a co-worker
Make a purchase inquiry

Junos CLI Reference

ON THIS PAGE

authentication (Protocols OSPF)

Syntax

Hierarchy Level

Description

Options

Required Privilege Level

Release Information

Related Documentation

Stay in touch