show-基于区域的 OSPF MD5 认证

show-基于区域的 OSPF MD5 认证

（1）show ip ospf interface

R1#show ip ospf interface s0/0/0

Serial0/0/0 is up, line protocol is up

Internet Address 192.168.12.1/24, Area 0

Process ID 1, Router ID 1.1.1.1, Network Type POINT_TO_POINT,Cost: 781

Transmit Delay is 1 sec, State POINT_TO_POINT

Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5

oob-resync timeout 40

Hello due in 00:00:09

Supports Link-local Signaling (LLS)

Cisco NSF helper support enabled

IETF NSF helper support enabled

Index 1/1, flood queue length 0

Next 0x0(0)/0x0(0)

Last flood scan length is 0, maximum is 1

Last flood scan time is 0 msec, maximum is 0 msec

Neighbor Count is 0, Adjacent neighbor count is 0

Suppress hello for 0 neighbor(s)

Message digest authentication enabled

Youngest key id is 1

输出最后两行信息表明该接口启用了MD5认证，而且密钥ID为1。

（2）show ip ospf

R1#show ip ospf

Routing Process "ospf 1" with ID 1.1.1.1

Supports only single TOS(TOS0) routes

......

Area BACKBONE(0)

Number of interfaces in this area is 2 (1 loopback)

Area has message digest authentication

SPF algorithm last executed 00:01:50.096 ago

SPF algorithm executed 5 times

Area ranges are

Number of LSA 2. Checksum Sum 0x010117

Number of opaque link LSA 0. Checksum Sum 0x000000

Number of DCbitless LSA 0

Number of indication LSA 0

Number of DoNotAge LSA 0

Flood list length 0

以上输出表明区域 0 采用 MD5 认证。

（3）如果 R1 区域 0 启动 MD5 认证，而 R2 区域 0 启动简单口令认证，则 R2 上出现下面的信息：

*Feb 10 11:08:13.075: OSPF: Rcv pkt from 192.168.12.1, Serial0/0/0 : Mismatch

Authentication type. Input packet specified type2, we use type 1

（4）如果 R1 和 R2 的区域 0 都启动 MD5 认证，但是 R2 的接口下没有配置 key ID 和密

码或密码错误，则 R2 上出现下面的信息：

*Feb 10 11:08:43.075: OSPF: Rcv pkt from 192.168.12.1, Serial0/0/0 : Mismatch

Authentication Key - No message digest key 1on interface