Host 에서 소프트웨어 (GNS3 등) 를 통한 네트워크 해킹 (Neighbor연결시도) 등을 방지하기 위해 사용 .

#Interface

HQ_SE_Core_R1(config-if)#ip ospf authentication message-digest

HQ_SE_Core_R1(config-if)#ip ospf message-digest-key 1 md5 123

HQ_SE_Core_R1(config-if)#ip ospf authentication

HQ_SE_Core_R1(config-if)#ip ospf authentication-key 123

#Area

HQ_SE_1F_L3_1(config-router)#area 1 authentication message-digest

HQ_SE_1F_L3_1(config-router)#area 1 authentication

-Key는 Interface에 적용

(같은 방식은 Area 와 Interface 간에 공유 가능)

Hello Debug

05:18:13: OSPF: Send hello to 224.0.0.5 area 0 on Vlan10 from 192.168.1.30

05:18:13: OSPF: Rcv hello from 192.168.1.100 area 0 from Vlan10 192.168.1.100

05:18:13: OSPF: End of hello processing

E1과 E2 외부경로와 AS내의 다른 Area경로(O IA) 대신 0.0.0.0/0 을 서비스 한다

셋팅

HQ_SE_Core_R2(config-router)#area 2 stub no-summary

HQ_SE_3F_L3_1 (config-router)#area 2 stub no-summary

HQ_SE_3F_L3_2 (config-router)#area 2 stub no-summary

적용 전

HQ_SE_3F_L3_2

Gateway of last resort is not set

        192.168.1.0/27 is subnetted, 4 subnets

O IA 192.168.1.0 [110/4] via 192.168.5.98, 00:02:33, FastEthernet0/1

O IA 192.168.1.32 [110/4] via 192.168.5.98, 00:02:33, FastEthernet0/1

O IA 192.168.1.64 [110/3] via 192.168.5.98, 00:02:33, FastEthernet0/1

O IA 192.168.1.96 [110/3] via 192.168.5.98, 00:02:33, FastEthernet0/1

        192.168.2.0/27 is subnetted, 1 subnets

O IA     192.168.2.0 [110/3] via 192.168.5.98, 00:02:23, FastEthernet0/1

O IA 192.168.3.0/24 [110/4] via 192.168.5.98, 00:02:33, FastEthernet0/1

O IA 192.168.4.0/24 [110/3] via 192.168.5.98, 00:02:23, FastEthernet0/1

        192.168.5.0/27 is subnetted, 4 subnets

O          192.168.5.0 [110/3] via 192.168.5.98, 00:02:43, FastEthernet0/1

C          192.168.5.32 is directly connected, Vlan20

O          192.168.5.64 [110/2] via 192.168.5.98, 00:02:43, FastEthernet0/1

C          192.168.5.96 is directly connected, FastEthernet0/1

O IA 192.168.32.0/24 [110/3] via 192.168.5.98, 00:02:33, FastEthernet0/1

O IA 192.168.33.0/24 [110/3] via 192.168.5.98, 00:02:33, FastEthernet0/1

O IA 192.168.34.0/24 [110/2] via 192.168.5.98, 00:02:43, FastEthernet0/1

O IA 192.168.35.0/24 [110/2] via 192.168.5.98, 00:02:43, FastEthernet0/1

적용 후

HQ_SE_3F_L3_2

Gateway of last resort is 192.168.5.98 to network 0.0.0.0

   192.168.5.0/27 is subnetted, 4 subnets

O     192.168.5.0 [110/3] via 192.168.5.98, 00:04:38, FastEthernet0/1

C     192.168.5.32 is directly connected, Vlan20

O     192.168.5.64 [110/2] via 192.168.5.98, 00:04:38, FastEthernet0/1

C     192.168.5.96 is directly connected, FastEthernet0/1

O*IA 0.0.0.0/0 [110/2] via 192.168.5.98, 00:04:38, FastEthernet0/1

네트워크 정보를 요약하여 Routing 테이블에서 다루어야할 정보량을 줄이기

셋팅

HQ_SE_Core_R1#area 1 range 192.168.1.0 255.255.255.128

HQ_SE_Core_R2#area 2 range 192.168.5.0 255.255.255.128

설정 전

HQ_SE_2F_L3_1

192.168.1.0/27 is subnetted, 4 subnets

O IA 192.168.1.0 [110/3] via 192.168.32.1, 00:11:34, FastEthernet0/6

O IA 192.168.1.32 [110/3] via 192.168.32.1, 00:11:34, FastEthernet0/6

O IA 192.168.1.64 [110/2] via 192.168.32.1, 00:11:34, FastEthernet0/6

O IA 192.168.1.96 [110/2] via 192.168.32.1, 00:11:34, FastEthernet0/6

192.168.2.0/27 is subnetted, 1 subnets

C 192.168.2.0 is directly connected, Vlan10

C 192.168.3.0/24 is directly connected, Vlan20

O IA 192.168.4.0/24 [110/2] via 192.168.33.2, 00:11:34, Port-channel10

192.168.5.0/27 is subnetted, 4 subnets

O IA 192.168.5.0 [110/4] via 192.168.32.1, 00:11:34, FastEthernet0/6

                      [110/4] via 192.168.33.2, 00:11:34, Port-channel10

O IA 192.168.5.32 [110/4] via 192.168.32.1, 00:11:34, FastEthernet0/6

                       [110/4] via 192.168.33.2, 00:11:34, Port-channel10

O IA 192.168.5.64 [110/3] via 192.168.32.1, 00:11:34, FastEthernet0/6

                       [110/3] via 192.168.33.2, 00:11:34, Port-channel10

O IA 192.168.5.96 [110/3] via 192.168.32.1, 00:11:34, FastEthernet0/6

                       [110/3] via 192.168.33.2, 00:11:34, Port-channel10

C 192.168.32.0/24 is directly connected, FastEthernet0/6

C 192.168.33.0/24 is directly connected, Port-channel10

O 192.168.34.0/24 [110/2] via 192.168.32.1, 00:11:34, FastEthernet0/6

O 192.168.35.0/24 [110/2] via 192.168.33.2, 00:11:34, Port-channel10

설정후

HQ_SE_2F_L3_1

192.168.1.0/27 is subnetted, 1 subnets

O IA 192.168.1.0 [110/3] via 192.168.32.1, 00:05:18, FastEthernet0/6

192.168.2.0/27 is subnetted, 1 subnets

C 192.168.2.0 is directly connected, Vlan10

C 192.168.3.0/24 is directly connected, Vlan20

O 192.168.4.0/24 [110/2] via 192.168.2.29, 00:05:38, Vlan10

192.168.5.0/25 is subnetted, 1 subnets

O IA 192.168.5.0 [110/3] via 192.168.32.1, 00:05:28, FastEthernet0/6

                      [110/3] via 192.168.33.2, 00:05:28, Port-channel10

C 192.168.32.0/24 is directly connected, FastEthernet0/6

C 192.168.33.0/24 is directly connected, Port-channel10

O 192.168.34.0/24 [110/2] via 192.168.32.1, 00:06:03, FastEthernet0/6

O 192.168.35.0/24 [110/2] via 192.168.33.2, 00:06:03, Port-channel10