Skip to content

OSPF Authentication Assignment

Jump to bottom
Emma edited this page Dec 2, 2025 · 2 revisions

OSPF Authentication Assignment

Potential security issues related to OSPF if authentication is not used:

If OSPF isn’t properly secured it can lead to potential security issues such as spoofing attacks, replay attacks, DoS attacks and neighbor relationship disruption.

Spoofing: An attacker impersonates a router with OSPF and injects false routing information into the network. It can send false link-state advertisements (LSAs) and can lead to incorrect routing causing network instability or allowing an attacker to redirect traffic to a malicious machine.

Replay Attacks: An attacker can capture and send legitimate OSPF messages, causing disruption in the network, such as reverting the network to an earlier state.

Denial of Service (DoS) Attack: An attacker can flood the network with OSPF messages, using up processing power, bandwith and memory, causing instability or unavailability.

Neighbor Relationship Disruption: An attacker disrupts neighbor relationships by sending crafted OSPF packets that cause existing neighbor relationships to break or prevent new ones from being created, leading to routing failures and network segmentation.

Authentication ensures only allowed routers can send OSPF packets (4). MD5 authentication also hashes the key with a non-decreasing sequence number that prevents the packets from being forwarded in a replay attack (1).

A paragraph in your own words on how OSPF authentication works and the most common methods

OSPF authentication makes sure that every OSPF message comes from an allowed router. There are two main types of authentication: clear text authentication and MD5 authentication. In clear text authentication, clear text passwords are used and transmitted across the network. This method leaves your network susceptible to sniffing. MD5 authentication uses MD5 hashing, a key, and sequence number to hash the password and is sent over the network hashed (3). OSPF keeps its authentication type in its packet headers and its authentication information in packet trailers. The authentication configurations must be the same on all devices in an area (2).

2. Configuring OSPF authentication: Using the Packet Tracer Network from the OSPF PT Lab:

Document in writing and submit the configuration required to set-up OSPF Authentication on Routers 1 through 4. List the specific configuration lines for each router.

  1. Enable md5 authentication on all of the routers (1)
border-router-emma>enable      
border-router-emma#conf t      
border-router-emma(config)#router ospf 1      
border-router-emma(config-router)#area 0 authentication message-digest      

DataCenter-Router3-emma>enable      
DataCenter-Router3-emma#conf t      
Enter configuration commands, one per line.  End with CNTL/Z.      
DataCenter-Router3-emma(config)#router ospf 1      
DataCenter-Router3-emma(config-router)#area 0 authentication message-digest      

West-Router4-emma>enable      
West-Router4-emma#conf t      
West-Router4-emma(config)#router ospf 1      
West-Router4-emma(config-router)#area 0 authentication message-digest      

East-Router2-emma>enable      
East-Router2-emma#conf t      
East-Router2-emma(config)#router ospf 1      
East-Router2-emma(config-router)#area 0 authentication message-digest
  1. Configure md5 key for all routers in area 0 on all the connected interfaces
border-router-emma>enable      
border-router-emma#conf t      
border-router-emma(config)#interface gigabitEthernet 0/0      
border-router-emma(config-if)#ip ospf message-digest-key 1 md5 Julia      

DataCenter-Router3-emma>enable      
DataCenter-Router3-emma#conf t      
DataCenter-Router3-emma(config)#interface gigabitEthernet 0/1      
DataCenter-Router3-emma(config-if)#ip ospf message-digest-key 1 md5 Julia      
DataCenter-Router3-emma(config-if)#exit      
DataCenter-Router3-emma(config)#interface gigabitEthernet 0/2      
DataCenter-Router3-emma(config-if)#ip ospf message-digest-key 1 md5 Julia      
DataCenter-Router3-emma(config-if)#interface gigabitEthernet 0/0      
DataCenter-Router3-emma(config-if)#ip ospf message-digest-key 1 md5 Julia      
DataCenter-Router3-emma(config-if)#exit      

West-Router4-emma>enable      
West-Router4-emma#conf t      
West-Router4-emma(config)#interface gigabitEthernet 0/0      
West-Router4-emma(config-if)#ip ospf message-digest-key 1 md5 Julia      

East-Router2-emma>enable      
East-Router2-emma#conf t      
East-Router2-emma(config)#interface gigabitEthernet 0/0      
East-Router2-emma(config-if)#ip ospf message-digest-key 1 md5 Julia
  1. Verify configuration

DataCenter-Router3-emma#show ip ospf interface

Configure OSPF Authentication in the Packet Tracer file from the class lab. Submit the Packet Tracer file with OSPF Authentication in effect.

Work Cited (1) Cisco. (2025a, March 3). Configure authentication in open shortest path first. Cisco. https://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/13697-25.html
(2) Huawei. (n.d.). Understanding OSPF Authentication. Support.huawei.com. https://support.huawei.com/enterprise/en/doc/EDOC1100290924/ab450cef/understanding-ospf-authentication
(3) Upravnik. (2022, August 14). OSPF authentication. Study CCNP. https://study-ccnp.com/ospf-authentication/
(4) What is OSPF? understanding network protocols by WIREX Systems. WireX. (2023, April 23). https://wirexsystems.com/resource/protocols/ospf/

Clone this wiki locally