300-320 · Question #321
Which security mechanism can you implement to protect the OSPF" information that a router receives?
The correct answer is A. Cryptographic authentication. OSPF supports built-in cryptographic authentication to protect the integrity of routing information exchanged between OSPF neighbors. This is configured with 'ip ospf authentication message-digest' (MD5) or, in OSPFv3/modern IOS, with SHA-HMAC authentication. With cryptographic…
Question
Which security mechanism can you implement to protect the OSPF" information that a router receives?
Options
- ACryptographic authentication
- Bprivilege 15 credentials
- Cadministrator username and password authentication
- DRADIUS authentication
How the community answered
(28 responses)- A93% (26)
- C4% (1)
- D4% (1)
Explanation
OSPF supports built-in cryptographic authentication to protect the integrity of routing information exchanged between OSPF neighbors. This is configured with 'ip ospf authentication message-digest' (MD5) or, in OSPFv3/modern IOS, with SHA-HMAC authentication. With cryptographic authentication, each OSPF packet is signed with a hash that the receiving router verifies - preventing spoofed LSAs, route injection, or neighbor hijacking by an attacker. Privilege 15 credentials (B) and administrator username/password (C) control device access via CLI, not routing protocol security. RADIUS (D) is used for AAA/device authentication, not for authenticating OSPF protocol messages between routers. Cryptographic authentication is the correct and standard answer for protecting OSPF data plane integrity.
Topics
Community Discussion
No community discussion yet for this question.