Detections
Analytics
3.1 Authentication and Verification of OSPFv3 Routing Protocols - authentication keychain/ipsec
Information
By configuring the OSPFv3 security function (keychain authentication or IPSec encryption), the integrity and confidentiality of message exchanges can be achieved.OSPFv3 security function can be configured on an area or on an interface.
NOTE: Either authentication is null and/or authentication has not been configured.
Solution
Enable authentication keychain or authentication ipsec.Enable authentication keychain:
ZXR10 (config)#ipv6 router ospf 1
ZXR10 (config-ospfv3-1)#router-id 1.1.1.1
ZXR10 (config-ospfv3-1)#area 0
ZXR10 (config-ospfv3-1-area-0)#authentication keychain test
ZXR10 (config-ospfv3-1-area-0)#interface gei-0/1/0/1
ZXR10 (config-ospfv3-1-area-0-if-gei-0/1/0/1)#authentication keychain test
Enable authentication ipsec:
ZXR10 (config)#ipv6 router ospf 2
ZXR10 (config-ospfv3-2)#router-id 2.3.4.5
ZXR10 (config-ospfv3-2)#area 1
ZXR10 (config-ospfv3-2-area-1)#authentication ipsec spi 345 md5 encrypted XhUsX6pfG6AGTwgtFtkuqqe+gE26KFk1sTs503TM+77nR+IOaQEvRJ0V/2Sfk4g+
ZXR10 (config-ospfv3-1-area-0)#interface gei-0/1/0/2
ZXR10 (config-ospfv3-1-area-0-if-gei-0/1/0/2)#authentication ipsec spi 345 md5 encrypted XhUsX6pfG6AGTwgtFtkuqqe+gE26KFk1sTs503TM+77nR+IOaQEvRJ0V/2Sfk4g+
See Also
Item Details
Audit Name: Tenable ZTE ROSNG Best Practices
Plugin: ZTE_ROSNG
Control ID: e73a591ef28b38d588a5d92d4c3581dafa84e606e1809a196fce551b0952a852