summaryrefslogtreecommitdiffstats
path: root/doc/ospfd.texi
diff options
context:
space:
mode:
authorpaul <paul>2006-06-26 12:55:58 +0000
committerpaul <paul>2006-06-26 12:55:58 +0000
commitf43ef19d2021a0bdcef0ff5847846c72f04e8afd (patch)
tree7d71b4c78874651e67b3c2f742d5e727b21bab02 /doc/ospfd.texi
parent66b76ebc62e0068b5953a48ff5886e238fda8717 (diff)
downloadquagga-f43ef19d2021a0bdcef0ff5847846c72f04e8afd.tar.bz2
quagga-f43ef19d2021a0bdcef0ff5847846c72f04e8afd.tar.xz
[doc] OSPF MD5 keyid documentation, fix texinfo warnings in bgpd.texi
2006-06-26 Paul Jakma <paul.jakma@sun.com> * ospfd.texi: Document that MD5 keyid is part of the protocol. * bgpd.texi: shut texinfo warnings up by replacing brackets in variable with angle brackets.
Diffstat (limited to 'doc/ospfd.texi')
-rw-r--r--doc/ospfd.texi12
1 files changed, 9 insertions, 3 deletions
diff --git a/doc/ospfd.texi b/doc/ospfd.texi
index 65d4e845..ff0d78b9 100644
--- a/doc/ospfd.texi
+++ b/doc/ospfd.texi
@@ -378,14 +378,20 @@ all OSPF packets are authenticated. @var{AUTH_KEY} has length up to 8 chars.
@deffn {Interface Command} {ip ospf message-digest-key KEYID md5 KEY} {}
@deffnx {Interface Command} {no ip ospf message-digest-key} {}
Set OSPF authentication key to a cryptographic password. The cryptographic
-algorithm is MD5. KEYID identifies secret key used to create the message
-digest. KEY is the actual message digest key up to 16 chars.
+algorithm is MD5.
+
+KEYID identifies secret key used to create the message digest. This ID
+is part of the protocol and must be consistent across routers on a
+link.
+
+KEY is the actual message digest key, of up to 16 chars (larger strings
+will be truncated), and is associated with the given KEYID.
Note that OSPF MD5 authentication requires that time never go backwards
(correct time is NOT important, only that it never goes backwards), even
across resets, if ospfd is to be able to promptly reestabish adjacencies
with its neighbours after restarts/reboots. The host should have system
-time be set at boot from an external source (eg battery backed clock, NTP,
+time be set at boot from an external or non-volatile source (eg battery backed clock, NTP,
etc.) or else the system clock should be periodically saved to non-volative
storage and restored at boot if MD5 authentication is to be expected to work
reliably.