Description

This article spells out the supported authentication and encryption algorithms used under [edit security] for OSPF authentication using IPSEC transport mode.

Symptoms

List and describe the algorithms supported for IPSEC-protected OSPF sessions.

Solution


For OSPFv2, the in-built authentication options are simple-password and md5.

Apart from this, IPSEC transport mode can also be sued for authentication.

For OSPFv3, there is no in-built option; it relies on IPSEC to provide authentication.

For more information on OSPF authentication and configuration, see the following Tech Doc: Configuring OSPF Authentication .

When using the IPSEC Transport Mode (ESP) protocol under [edit security], it is mandatory to provide the authentication and encryption algorithms to be used.

Note that not all algorithms are supported under [edit security] for IPSEC transport mode.

The supported and unsupported algorithms listed below:

Authentication Algorithm:

  • hmac-md5-96             - Supported

  • hmac-sha-256-128    - Not Supported

  • hmac-sha1-96            - Supported

Encryption Algorithm:

  • 3des-cbc           - Supported

  • aes-128-cbc     - Not Supported

  • aes-192-cbc     - Not Supported

  • aes-256-cbc     - Not Supported

  • des-cbc             - Supported

You can use any combination of supported algorithms for IPSEC authentication and to bring up the OSPF session.

Related Information