Detections
Analytics
3.1 Authentication and Verification of OSPFv2 Routing Protocols - authentication message-digest-key/keychain
Information
To improve network security, the OSPF routing algorithm should support MD5 or/and Keychain authenticationNOTE: Either authentication is null and/or authentication has not been configured.
Solution
Enable MD5 or/and Keychain authentication.Enable MD5 authentication:
ZXR10 (config)#router ospf 1
ZXR10 (config-ospf-1)#area 0.0.0.2
ZXR10 (config-ospf-1-area-0.0.0.2)#authentication message-digest
ZXR10 (config-ospf-1-area-0.0.0.2)#interface gei-0/1/0/6
ZXR10 (config-ospf-1-area-0.0.0.2-if-gei-0/1/0/6)#authentication message-digest
ZXR10 (config-ospf-1-area-0.0.0.2-if-gei-0/1/0/6)#message-digest-key 2 md5 zte
Enable Keychain authentication:
ZXR10 (config)#router ospf 2
ZXR10 (config-ospf-2)#area 0.0.0.1
ZXR10 (config-ospf-2-area-0.0.0.1)#authentication keychain 123
ZXR10 (config-ospf-2-area-0.0.0.1)#interface gei-0/1/0/7
ZXR10 (config-ospf-2-area-0.0.0.1-if-gei-0/1/0/7)#authentication keychain 123
ZXR10 (config-ospf-2-area-0.0.0.1-if-gei-0/1/0/7)#authentication-key zte
See Also
Item Details
Audit Name: Tenable ZTE ROSNG Best Practices
Plugin: ZTE_ROSNG
Control ID: aa79e1b5d16956e3ae3d8689c22bdfb7f933a4e1f6156deffcb8f0cf11c6bb34