Juniper OSPF邻居验证实例讲解

OSPF邻居验证支持MD5和明文验证两种方式，下面就通过r1，r2，r3来做邻居验证。这里我们把r1和r2进行邻居md5加密

r1的配置如下：

  interfaces {
    em1 {
        unit 12 {
            vlan-id 12;
            family inet {
                address 10.0.4.5/30;
            }
        }
        unit 13 {
            vlan-id 13;
            family inet {
                address 10.0.4.14/30;
            }
        }
    }
    lo0 {
        unit 1 {
            family inet {
                address 10.0.0.1/32;
            }
        }
    }
}
protocols {
    ospf {
        area 0.0.0.2 {
            interface em1.12 {
                authentication {
                    md5 123 key "$9$4oZikmfTzn/"; ## SECRET-DATA//md5认证的key-id和key一定要和对端接口的key-id和key相匹配，否则就会验证失败！
                }
            }
            interface em1.13;
        }
    }
}
r2的配置如下：interfaces {
    em2 {
        unit 21 {
            vlan-id 12;
            family inet {
                address 10.0.4.6/30;
            }
        }
        unit 23 {
            vlan-id 23;
            family inet {
                address 10.0.4.2/30;
            }
        }
    }
    lo0 {
        unit 2 {
            family inet {
                address 10.0.0.2/32;
            }
        }
    }
}
protocols {
    ospf {
        area 0.0.0.2 {
            interface em2.21 {
                authentication {
                    md5 123 key "$9$XkQ-s2oJGDHq"; ## SECRET-DATA
                }
            }
            interface em2.23;
        }
    }
}
验证MD5是否成功:olive# run show ospf interface logical-system r1 em1.12 extensive
Interface           State   Area            DR ID           BDR ID          Nbrs
em1.12              BDR     0.0.0.2         10.0.0.2        10.0.0.1           1
  Type: LAN, Address: 10.0.4.5, Mask: 255.255.255.252, MTU: 1500, Cost: 1
  DR addr: 10.0.4.6, BDR addr: 10.0.4.5, Priority: 128
  Adj count: 1
  Hello: 10, Dead: 40, ReXmit: 5, Not Stub
  Auth type: MD5, Active key ID: 123, Start time: 1970 Jan  1 08:00:00 CST
  Protection type: None
  Topology default (ID 0) -> Cost: 1   

[edit logical-systems r2]
olive# run show ospf interface logical-system r2 em2.21 extensive
Interface           State   Area            DR ID           BDR ID          Nbrs
em2.21              DR      0.0.0.2         10.0.0.2        10.0.0.1           1
  Type: LAN, Address: 10.0.4.6, Mask: 255.255.255.252, MTU: 1500, Cost: 1
  DR addr: 10.0.4.6, BDR addr: 10.0.4.5, Priority: 128
  Adj count: 1
  Hello: 10, Dead: 40, ReXmit: 5, Not Stub
  Auth type: MD5, Active key ID: 123, Start time: 1970 Jan  1 08:00:00 CST
  Protection type: None
  Topology default (ID 0) -> Cost: 1

本文出自 “Rista” 博客，请务必保留此出处http://rista.blog.51cto.com/2526140/938231

以上是小编为您精心准备的的内容，在的博客、问答、公众号、人物、课程等栏目也有的相关内容，欢迎继续使用右上角搜索按钮进行搜索验证
， interface
， 10
， address
， unit
2.21
juniper ospf配置、juniper ospf、juniper srx ospf、juniper 放行ospf流量、ospf邻居建立过程，以便于您获取更多的相关知识。