Page 306 / 944 Scroll up to view Page 301 - 305
Chapter 14 Routing Protocols
ZyWALL USG 50 User’s Guide
306
14.3.2
OSPF Area Add/Edit Screen
The
OSPF Area Add/Edit
screen allows you to create a new area or edit an
existing one. To access this screen, go to the
OSPF
summary screen (see
Section
14.3 on page 299
), and click either the
Add
icon or an
Edit
icon.
Figure 185
Configuration > Network > Routing > OSPF > Add
The following table describes the labels in this screen.
Table 85
Configuration > Network > Routing > OSPF > Add
LABEL
DESCRIPTION
Area ID
Type the unique, 32-bit identifier for the area in IP address format.
Type
Select the type of OSPF area.
Normal
- This area is a normal area. It has routing information about
the OSPF AS and about networks outside the OSPF AS.
Stub
- This area is an stub area. It has routing information about the
OSPF AS but not about networks outside the OSPF AS. It depends on a
default route to send information outside the OSPF AS.
NSSA
- This area is a Not So Stubby Area (NSSA), per RFC 1587. It has
routing information about the OSPF AS and networks that are outside
the OSPF AS and are directly connected to the NSSA. It does not have
information about other networks outside the OSPF AS.
Authentication
Select the default authentication method used in the area. This
authentication protects the integrity, but not the confidentiality, of
routing updates.
None
uses no authentication.
Text
uses a plain text password that is sent over the network (not very
secure).
MD5
uses an MD5 password and authentication ID (most secure).
Page 307 / 944
Chapter 14 Routing Protocols
ZyWALL USG 50 User’s Guide
307
14.3.3
Virtual Link Add/Edit Screen
The
Virtual Link Add/Edit
screen allows you to create a new virtual link or edit
an existing one. When the OSPF add or edit screen (see
Section 14.3.2 on page
Text
Authentication
Key
This field is available if the
Authentication
is
Text
. Type the password
for text authentication. The key can consist of alphanumeric characters
and the underscore, and it can be up to 8 characters long.
MD5
Authentication
ID
This field is available if the
Authentication
is
MD5
. Type the default ID
for MD5 authentication in the area. The ID can be between 1 and 255.
MD5
Authentication
Key
This field is available if the
Authentication
is
MD5
. Type the default
password for MD5 authentication in the area. The password can consist
of alphanumeric characters and the underscore, and it can be up to 16
characters long.
Virtual Link
This section is displayed if the
Type
is
Normal
. Create a virtual link if
you want to connect a different area (that does not have a direct
connection to the backbone) to the backbone. You should set up the
virtual link on the ABR that is connected to the other area and on the
ABR that is connected to the backbone.
Add
Click this to create a new virtual link.
Edit
Double-click an entry or select it and click
Edit
to open a screen where
you can modify the entry’s settings.
Remove
To remove an entry, select it and click
Remove
. The ZyWALL confirms
you want to remove it before doing so.
#
This field is a sequential value, and it is not associated with a specific
area.
Peer Router ID
This is the 32-bit ID (in IP address format) of the other ABR in the
virtual link.
Authentication
This is the authentication method the virtual link uses. This
authentication protects the integrity, but not the confidentiality, of
routing updates.
None
uses no authentication.
Text
uses a plain text password that is sent over the network (not very
secure). Hover your cursor over this label to display the password.
MD5
uses an MD5 password and authentication ID (most secure).
Hover your cursor over this label to display the authentication ID and
key.
Same as Area
has the virtual link also use the
Authentication
settings above.
OK
Click
OK
to save your changes back to the ZyWALL.
Cancel
Click
Cancel
to exit this screen without saving.
Table 85
Configuration > Network > Routing > OSPF > Add (continued)
LABEL
DESCRIPTION
Page 308 / 944
Chapter 14 Routing Protocols
ZyWALL USG 50 User’s Guide
308
306
) has the Type set to Normal, a Virtual Link table displays. Click either the
Add
icon or an entry and the
Edit
icon to display a screen like the following.
Figure 186
Configuration > Network > Routing > OSPF > Add > Add
The following table describes the labels in this screen.
14.4
Routing Protocol Technical Reference
Here is more detailed information about RIP and OSPF.
Table 86
Configuration > Network > Routing > OSPF > Add > Add
LABEL
DESCRIPTION
Peer Router ID
Enter the 32-bit ID (in IP address format) of the other ABR in the virtual
link.
Authentication
Select the authentication method the virtual link uses. This
authentication protects the integrity, but not the confidentiality, of
routing updates.
None
uses no authentication.
Text
uses a plain text password that is sent over the network (not very
secure).
MD5
uses an MD5 password and authentication ID (most secure).
Same as Area
has the virtual link also use the
Authentication
settings above.
Text
Authentication
Key
This field is available if the
Authentication
is
Text
. Type the password
for text authentication. The key can consist of alphanumeric characters
and the underscore, and it can be up to 8 characters long.
MD5
Authentication
ID
This field is available if the
Authentication
is
MD5
. Type the default ID
for MD5 authentication in the area. The ID can be between 1 and 255.
MD5
Authentication
Key
This field is available if the
Authentication
is
MD5
. Type the default
password for MD5 authentication in the area. The password can consist
of alphanumeric characters and the underscore, and it can be up to 16
characters long.
OK
Click
OK
to save your changes back to the ZyWALL.
Cancel
Click
Cancel
to exit this screen without saving.
Page 309 / 944
Chapter 14 Routing Protocols
ZyWALL USG 50 User’s Guide
309
Authentication Types
Authentication is used to guarantee the integrity, but not the confidentiality, of
routing updates. The transmitting router uses its key to encrypt the original
message into a smaller message, and the smaller message is transmitted with the
original message. The receiving router uses its key to encrypt the received
message and then verifies that it matches the smaller message sent with it. If the
received message is verified, then the receiving router accepts the updated
routing information. The transmitting and receiving routers must have the same
key.
The ZyWALL supports three types of authentication for RIP and OSPF routing
protocols:
None
- no authentication is used.
Text
– authentication using a plain text password, and the (unencrypted)
password is sent over the network. This method is usually used temporarily to
prevent network problems.
MD5
– authentication using an MD5 password and authentication ID.
MD5 is an authentication method that produces a 128-bit checksum, called a
message-digest, for each packet. It also includes an authentication ID, which can
be set to any value between 1 and 255. The ZyWALL only accepts packets if these
conditions are satisfied.
The packet’s authentication ID is the same as the authentication ID of the
interface that received it.
The packet’s message-digest is the same as the one the ZyWALL calculates
using the MD5 password.
For RIP, authentication is not available in RIP version 1. In RIP version 2, you can
only select one authentication type for all interfaces. For OSPF, the ZyWALL
supports a default authentication type by area. If you want to use this default in
an interface or virtual link, you set the associated
Authentication Type
field to
Same as Area
. As a result, you only have to update the authentication
information for the area to update the authentication type used by these
interfaces and virtual links. Alternatively, you can override the default in any
interface or virtual link by selecting a specific authentication method. Please see
the respective interface sections for more information.
Page 310 / 944
Chapter 14 Routing Protocols
ZyWALL USG 50 User’s Guide
310

Rate

4.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top