3.3.2.2 Set 'ip ospf message-digest-key md5'

Information

Enable Open Shortest Path First (OSPF) Message Digest 5 (MD5) authentication.

Rationale:

This is part of the OSPF authentication setup

Impact:

Organizations should plan and implement enterprise security policies that require rigorous authentication methods for routing protocols. Configuring the proper interface(s) for 'ip ospf message-digest-key md5' enforces these policies by restricting exchanges between network devices.

Solution

Configure the appropriate interface(s) for Message Digest authentication

hostname(config)#interface {<em>interface_name</em>}
hostname(config-if)#ip ospf message-digest-key {<em>ospf_md5_key-id</em>} md5 {<em>ospf_md5_key</em>}

Default Value:

Not set

See Also

https://workbench.cisecurity.org/files/3762

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-8(1)

Plugin: Cisco

Control ID: 2573fde3cb7a54756857c0f960d5afa30458b4311513510cb438eec3700e4bde