Cisco PIX 525 Spezifikationen PDF herunterladen (Seite 90)

100

101

8-8

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 8 Configuring IP Routing and DHCP Services

Configuring OSPF

Configuring OSPF Interface Parameters

You can alter some interface-specific OSPF parameters as necessary. You are not required to alter any

of these parameters, but the following interface parameters must be consistent across all routers in an

attached network: ospf hello-interval, ospf dead-interval, and ospf authentication-key. Be sure that if

you configure any of these parameters, the configurations for all routers on your network have

compatible values.

To configure OSPF interface parameters, perform the following steps:

Step 1 To enter the interface configuration mode, enter the following command:

hostname(config)# interface

interface_name

Step 2 Enter any of the following commands:

• To specify the authentication type for an interface, enter the following command:

hostname(config-interface)# ospf authentication [message-digest | null]

• To assign a password to be used by neighboring OSPF routers on a network segment that is using

the OSPF simple password authentication, enter the following command:

hostname(config-interface)# ospf authentication-key

key

The key can be any continuous string of characters up to 8 bytes in length.

The password created by this command is used as a key that is inserted directly into the OSPF header

when the security appliance software originates routing protocol packets. A separate password can

be assigned to each network on a per-interface basis. All neighboring routers on the same network

must have the same password to be able to exchange OSPF information.

• To explicitly specify the cost of sending a packet on an OSPF interface, enter the following

command:

hostname(config-interface)# ospf cost

cost

The cost is an integer from 1 to 65535.

• To set the number of seconds that a device must wait before it declares a neighbor OSPF router down

because it has not received a hello packet, enter the following command:

hostname(config-interface)# ospf dead-interval

seconds

The value must be the same for all nodes on the network.

• To specify the length of time between the hello packets that the security appliance sends on an OSPF

interface, enter the following command:

hostname(config-interface)# ospf hello-interval

seconds

The value must be the same for all nodes on the network.

• To enable OSPF MD5 authentication, enter the following command:

hostname(config-interface)# ospf message-digest-key

key_id

md5

key

Set the following values:

–

key_id—An identifier in the range from 1 to 255.

–

key—Alphanumeric password of up to 16 bytes.

1 2 ... 85 86 87 88 89 90 91 92 93 94 95 ... 603 604

Kommentare zu diesen Handbüchern

Keine Kommentare

Cisco PIX 525 Spezifikationen Seite 90

Kommentare zu diesen Handbüchern