How to Configure OSPF Authentication – Complete Guide

OSPF offers us 4 kinds of authentication when studying the CCNA and CCNP we really only hear/read about 3, the fourth SHA, is fairly new. Here’s the complete list of available authentication for OSPF. NULL (no authentication) cleartext (packet capture reveals the password) MD5 (creates a 128bit fingerprint of the password, click here to read …

Cisco ASA VTI (9.7) Route Based VPN with load-balancing and failover – Setup Guide

With code 9.7 released Cisco decided to add two VERY important features. Route based VPN with VTIs, and bridge groups! This article will show a quick configuration of a route based VPN with ASAs! Previously to do something like this you would need to build a GRE tunnel over IPSEC with a second router terminating …

Filtering OSPF Routes Part 2

Previously in part 1 we discussed route-filtering using the “filter-list” command in OSPF. That was limited to our ABR and ASBRs. With distribute-lists we are able to filter OSPF routes from making to the routing information base/routing table (RIB). If you recall our topology from part 1, well I’ve just added R4 to that. If …

Filtering OSPF Routes Part 1

Filtering routes is a little more complicated when we are talking about OSPF. In EIGRP it was simple. Since EIGRP isĀ an advanced distance vector routing protocol, each router doesn’t have a perfect picture of the routing domain, it just has an idea of what’s behind our neighbor. OSPF is of course different. Each OSPF area …

Understanding a Totally Not-So-Stubby-Area in OSPF

Here is our topology…     R1 has a loopback of 1.1.1.1/32 R2 has 2.2.2.2/32 R3 has 3.3.3.3/32 R4 has 4.4.4.4/32 R4 has 9.9.9.9/32   R1 to R2 is 10.0.1.0/24 (area 1) R2 to R3 is 10.0.2.0/24 (area 0) R3 to R4 is 10.0.3.0/24 (area 2)   R3 which is our ABR, has been configured …

How to advertise a default route into OSPF

Link between IOSV1 and IOSV2 : 192.168.1.0/24 Link between IOSV2 and IOSV3: 192.168.2.0/24 Situation: We are running OSPF in our network. IOSV1 is hypothetically connect to an ISP router. Our ISP does not form an OSPF neighborship with us. That means that IOSV2 and IOSV3 can only reach the networks inside the OSPF routing domain. …