Posted in cisco ios, information technology, infrastructure, knowledge, personal, self improvement, software, tagged authentication key, ospf authentication, text authentication, virtual link on 25 December 2011|
Leave a Comment »
Another day has passed, after working out for almost 3hrs (FF’s Body Pump followed by Combat), it’s time to catch up with my studies.. CCNP: Route… it’s been neglected due to overwhelming things at work and wasted time due to gaming…. Supposingly the lab will come out with many tasks for me to perform, but below is the summarize version;
Injecting external networks into the OSPF domain and redistributing the static routes on R1
R1(config-router)#redistribute static subnets metric-type 1 metric 50
Turning on passive interface to prevent malicious neighbor adjacency
R1(config-router)#passive-interface default
R1(config-router)#no passive-interface f0/0
MD5 authentication for OSPF;
enabling for all area:
R1(config-router)#area 0 authentication message-digest
enabling for specific interface:
R1(config-if)#ip ospf authentication message-digest
R1(config-if)#ip ospf message-digest-key 1 md5 cisco
Clear text authentication;
R2(config-if)#ip ospf authentication
R2(config-if)#ip ospf authentication-key cisco
(using wireshark to sniff its key is possible)
Stubby Area: Blocks type 5 LSAs from entering
Totally Stubby Area: Blocks type 3, 4 and 5 LSAs from entering
Not-So-Stubby Area: Passes external routes through via type 7 LSAs; these convert back to type 5 once they reach the backbone.
- Stubby area config (must be done to the 2 routers attached
R5(config-router)#area 45 stub
- Totally stubby area config & advertised external route metric (change to 100)
R2(config-router)#area 23 stub no-summary
R2(config-router)#area 23 default-cost 100
- Non-So-Stubby Area config:
(not in the lab)#area 1 nssas no-summary
To perform adjacencies
R6(config-router)#area 67 virtual-link 7.7.7.7
R7(config-router)#area 67 virtual-link 6.6.6.6
Read Full Post »
Engineers and Managers
eXeQzaLie 