Thursday, July 25, 2013

OSPF Simple Password Authentication


Pic. 1 - Topology Diagram.


Task 1
Enable OSPF area 0 between R1 and R2 on their FastEthernet interfaces (refer to pic.1).

Task 2
Enable OSPF Simple Password authentication in area 0. Configure R1 to use this authentication methods in the 'router ospf' context. R2, R3, and R4 should have their authentication enabled on their respective interfaces. Use the password 'G33K' on all routers.


Questions
Try to answer the following questions:
  1. What is the purpose of authenticating routing packets?
  2. What are the OSPF authentication methods?
  3. What are the differences between them?
  4. What are the methods of implementing OSPF authentication?
Lab Solution

Solution configuration below:
https://docs.google.com/file/d/0BwE5C95tpjZOZWZIX1NjLXlRcDQ/edit?usp=sharing


Task 1
Enable OSPF area 0 between R1 and R2 on their FastEthernet interfaces (refer to pic.1).

R1 Config:
!
interface FastEthernet0/0
 ip ospf 1 area 0
!

R2 Config:
!
interface FastEthernet0/0
 ip ospf 1 area 0
!

What You Should See


Pic. 2.

Pic. 3.

Task 2
Enable OSPF Simple Password authentication in area 0. Configure R1 to use this authentication methods in the 'router ospf' context. R2, R3, and R4 should have their authentication enabled on their respective interfaces. Use the password 'G33K' on all routers.


R1 Config:
!
router ospf 1
 area 0 authentication
!
interface FastEthernet0/0
 ip ospf authentication-key G33K
!
interface Serial0/0
 ip ospf authentication-key G33K
!

R2 Config:
!
interface FastEthernet0/0
 ip ospf authentication
 ip ospf authentication-key G33K
!

R3 Config:
!
interface Serial0/0
 ip ospf authentication
 ip ospf authentication-key G33K
!

R4 Config:
interface Serial0/0
 ip ospf authentication
 ip ospf authentication-key G33K
!

What You Should See


Pic. 4.
Notice!
All R1's neighbors are back.


Pic. 5.


Notice!
The last line of Se0/0 says: Simple password authentication enabled.
All other routers show the same on their respective interfaces.

Study Drill

OSPF (like any other routing protocol) uses authentication to prevent rogue routers from joining the routing domain. OSPF has two major methods of authenticating its packets:
  1. Simple Password (clear text).
  2. MD5
Simple password method is very insecure since the password is sent in a clear text format. MD5 uses hashing algorithm and allows easy password changes without any interruption (presented in later lab).
Both authentication methods can be enabled in router context or on an interface.