Cisco PIX 525 Spezifikationen PDF herunterladen (Seite 91)

8-9

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 8 Configuring IP Routing and DHCP Services

Configuring OSPF

Usually, one key per interface is used to generate authentication information when sending packets

and to authenticate incoming packets. The same key identifier on the neighbor router must have the

same key value.

We recommend that you not keep more than one key per interface. Every time you add a new key,

you should remove the old key to prevent the local system from continuing to communicate with a

hostile system that knows the old key. Removing the old key also reduces overhead during rollover.

• To set the priority to help determine the OSPF designated router for a network, enter the following

command:

hostname(config-interface)# ospf priority

number_value

The number_value is between 0 to 255.

• To specify the number of seconds between LSA retransmissions for adjacencies belonging to an

OSPF interface, enter the following command:

hostname(config-interface)# ospf retransmit-interval

seconds

The seconds must be greater than the expected round-trip delay between any two routers on the

attached network. The range is from 1 to 65535 seconds. The default is 5 seconds.

• To set the estimated number of seconds required to send a link-state update packet on an OSPF

interface, enter the following command:

hostname(config-interface)# ospf transmit-delay

seconds

The seconds is from 1 to 65535 seconds. The default is 1 second.

The following example shows how to configure the OSPF interfaces:

hostname(config)# router ospf 2

hostname(config-router)# network 2.0.0.0 255.0.0.0 area 0

hostname(config-router)# interface inside

hostname(config-interface)# ospf cost 20

hostname(config-interface)# ospf retransmit-interval 15

hostname(config-interface)# ospf transmit-delay 10

hostname(config-interface)# ospf priority 20

hostname(config-interface)# ospf hello-interval 10

hostname(config-interface)# ospf dead-interval 40

hostname(config-interface)# ospf authentication-key cisco

hostname(config-interface)# ospf message-digest-key 1 md5 cisco

hostname(config-interface)# ospf authentication message-digest

The following is sample output from the show ospf command:

hostname(config)# show ospf

Routing Process "ospf 2" with ID 20.1.89.2 and Domain ID 0.0.0.2

Supports only single TOS(TOS0) routes

Supports opaque LSA

SPF schedule delay 5 secs, Hold time between two SPFs 10 secs

Minimum LSA interval 5 secs. Minimum LSA arrival 1 secs

Number of external LSA 5. Checksum Sum 0x 26da6

Number of opaque AS LSA 0. Checksum Sum 0x 0

Number of DCbitless external and opaque AS LSA 0

Number of DoNotAge external and opaque AS LSA 0

Number of areas in this router is 1. 1 normal 0 stub 0 nssa

External flood list length 0

Area BACKBONE(0)

Number of interfaces in this area is 1

Area has no authentication

1 2 ... 86 87 88 89 90 91 92 93 94 95 96 ... 603 604

Kommentare zu diesen Handbüchern

Keine Kommentare

Cisco PIX 525 Spezifikationen Seite 91

Kommentare zu diesen Handbüchern