Configuring stub routers, Configuring ospf authentication – H3C Technologies H3C SecPath F1000-E User Manual
Page 434
409
Step Command
Remarks
3.
Disable interfaces from
receiving and sending OSPF
packets.
silent-interface { interface-type
interface-number | all }
Optional.
Not disabled by default.
NOTE:
•
Different OSPF processes can disable the same interface from receiving and sending OSPF packets. The
silent-interface command disables only the interfaces associated with the current process rather than
interfaces associated with other processes.
•
After an OSPF interface is set to silent, other interfaces on the router can still advertise direct routes of the
interface in Router LSAs, but the interface cannot send any packet. This configuration can enhance
OSPF adaptability and reduce resource consumption.
Configuring stub routers
A stub router is used for traffic control. It tells other OSPF routers to not use it to forward data.
The Router LSAs from the stub router may contain different link type values. A value of 3 means a link to
a stub network, and the cost of the link will not be changed. A value of 1, 2 or 4 means a point-to-point
link, a link to a transit network, or a virtual link. On such links, a maximum cost value of 65535 is used.
Thus, neighbors find that the links to the stub router have such big costs that they will not send packets to
the stub router for forwarding as long as another route with a smaller cost exists.
To configure a router as a stub router:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter OSPF view.
ospf [ process-id | router-id router-id
| vpn-instance vpn-instance-name ] * N/A
3.
Configure the router as a stub
router.
stub-router
Not configured by default.
NOTE:
A stub router has nothing to do with a stub area.
Configuring OSPF authentication
You can configure OSPF packet authentication to ensure the security of packet exchange.
After authentication is configured, OSPF only receives packets that pass authentication. Failed packets
cannot establish neighboring relationships.
To configure OSPF authentication, you need to configure the same area authentication mode on all the
routers in the area. In addition, the authentication mode and password for all interfaces attached to the
same area must be identical.
To configure OSPF authentication:
Step Command
Remarks
1.
Enter system view.
system-view
N/A