nx.os.and.cisco.nexus.switching.2nd.edition.1587143046

Example 3-52. Configuring a Keychain
Click here to view code image
Figure 3-8. OSPF Authentication
Congo(config)# key chain nexus
Congo(config-keychain)# key 1
Congo(config-keychain-key)# key-string nexus
Now that a key exists, the next step is to configure the routing protocol, OSPF in this case, to
enable authentication and configure the interface to use the key chain. This step is completed
under the OSPF routing process configuration. It is necessary to specify an encryption
mechanism, MD5, and configure the key chain to use it, as demonstrated in Example 3-53.
Example 3-53. Configuring OSPF MD5 Authentication
Click here to view code image
Congo# config t
Enter configuration commands, one per line. End with
CNTL/Z.
Congo(config)# router ospf DataCenter1
Congo(config-router)# area 0 authentication message-digest
Congo(config-router)# int vlan 10
Congo(config-if)# ip ospf authentication key-chain nexus
The values specified under the address-family configuration are for all OSPF neighbors in
the area configured for authentication, as demonstrated in Example 3-54. These values can
be overridden by interface-specific configuration that can be helpful when multiple keys are
used on different devices in the internetwork.
Example 3-54. Configuration of OSPF Authentication on an SVI
Click here to view code image
Congo# config t
Congo(config)# router ospf DataCenter1
Congo(config-router)# area 0 authentication message-digest
Congo(config-if)# int vlan 10
Congo(config-if)# ip ospf authentication-key 7 newkey
Example 3-55 demonstrates how to verify authentication configuration.