IPv6 ospf多区域-虚链路-认证

R1:

interface Loopback0
 no ip address
 ipv6 address 2001:3FFE::1/128
 ipv6 ospf 1 area 0
!
interface FastEthernet0/0
 no ip address
 ipv6 address 2001:CE01::1/64
 ipv6 ospf 1 area 0

ipv6 router ospf 1
 router-id 1.1.1.1

R2:

interface Loopback0
 no ip address
 ipv6 address 2001:3FFE::2/128
 ipv6 ospf 1 area 0
!
interface Ethernet0/1
 no ip address
 ipv6 address 2001:CE01::2/64
 ipv6 ospf 1 area 0
 
 interface Ethernet0/0
 no ip address
 ipv6 address 2001:CE02::1/64
 ipv6 ospf 1 area 1
 
 ipv6 router ospf 1
 router-id 2.2.2.2
 area 1 virtual-link 3.3.3.3    #虚链路配置

R3:

interface Loopback0
 no ip address
 ipv6 address 2001:3FFE::3/128
 ipv6 ospf 1 area 2
 
 interface Ethernet0/0
 no ip address
 duplex half
 ipv6 address 2001:CE02::2/64
 ipv6 ospf 1 area 1
 
 ipv6 router ospf 1
 router-id 3.3.3.3
 area 1 virtual-link 2.2.2.2    #虚链路配置

邻居路由信息:
R1:

R2:

R3:

ospfv3 认证

虚链路认证

R2#sh running-config vie | se in ipv6 router ospf 
ipv6 router ospf 1
 router-id 2.2.2.2
 area 1 virtual-link 3.3.3.3 authentication ipsec spi 256 md5 12345678901234567890ABCDEFABCDEF
 
 R3#sh running-config vie | se in ipv6 router ospf 
ipv6 router ospf 1
 router-id 3.3.3.3
 area 1 virtual-link 2.2.2.2 authentication ipsec spi 256 md5 12345678901234567890ABCDEFABCDEF

验证:

接口认证

R2#sh run vi | se in 0/0     
interface Ethernet0/0
 no ip address
 ipv6 address 2001:CE02::1/64
 ipv6 ospf authentication ipsec spi 257 md5 12345678901234567890ABCDEFABCDEF
 ipv6 ospf 1 area 1
 
 R3#sh run vi | se in 0/0     
interface Ethernet0/0
 no ip address
 ipv6 address 2001:CE02::2/64
 ipv6 ospf authentication ipsec spi 257 md5 12345678901234567890ABCDEFABCDEF
 ipv6 ospf 1 area 1

Clear ipv6 ospf process 刷新进程,查看show命令。

(注意:IOS有些版本会导致物理链路和虚链路都down了。导致spi 混乱,造成邻居都建立不起来。
解决办法:
删掉虚链路认证和接口的认证,然后先配置接口的认证,再配置虚链路的认证,就可以了。
IOL:L3_ADVENTERPRISEK9_M_15.4_2T.bin 测试不会出现此问题。

区域认证


发布了2 篇原创文章 · 获赞 0 · 访问量 21

猜你喜欢

转载自blog.csdn.net/y56554897/article/details/104517072