Configuring OSPF password authentication

Syntax:

ip ospf [ip-address] authentication-key key-string

no ip ospf [ip-address] authentication

Used in the VLAN interface context to configure password authentication for all interfaces in the VLAN or for a specific subnet. The password takes effect immediately, and all OSPF packets transmitted on the interface contain this password. All OSPF packets received on the interface are also checked for the password. If it is not present, the packet is dropped.

To disable password authentication on an interface, use the no form of the command.

For the 5400zl switches, when the switch is in enhanced secure mode, commands that take a secret key as a parameter have the echo of the secret typing replaced with asterisks. The input for key-string is prompted for interactively. For more information, see the Access Security Guide for your switch.

ip-address

Used in subnetted VLAN contexts where you want to assign or remove a password associated with a specific subnet.

Omit this option when you want the command to apply to all interfaces configured in the VLAN.

key-string

An alphanumeric string of one to eight characters. (Spaces are not allowed.)

To change the password, re-execute the command with the new password.

Use show ip ospf interface ip-address to view the current authentication setting.

NOTE:

To replace the password method with the MD5 method on a given interface, overwrite the password configuration by using the MD5 form of the command shown in the next syntax description. (It is not necessary to disable the currently configured OSPF password.)

Default: Disabled