Mikrotik: OSPF Authentication - Revision history

Onnowpurbo at 01:05, 2 January 2019

2019-01-02T01:05:50Z

Onnowpurbo at 01:05, 2 January 2019

2019-01-02T01:05:27Z

Onnowpurbo: Created page with "It is possible to secure OSPF packets exchange, MikroTik RouterOS provides two authentication methods, simple and MD5. OSPF authentication is disabled by default. Authenticat..."

2019-01-01T07:45:53Z

Created page with "It is possible to secure OSPF packets exchange, MikroTik RouterOS provides two authentication methods, simple and MD5. OSPF authentication is disabled by default. Authenticat..."

New page

It is possible to secure OSPF packets exchange, MikroTik RouterOS provides two authentication methods, simple and MD5. OSPF authentication is disabled by default.

Authentication is configured per interface. Add static ospf interface entry and specify authentication properties to secure OSPF information exchange. md5 authentication configuration on ether1 is shown below:

/routing ospf interface
add interface=ether1 authentication=md5 authentication-key=mySampleKey authentication-key-id=2

Simple authentication is plain text authentication method. Method is vulnerable to passive attacks, anybody with packet sniffer can easily get password. Method should be used only to protect OSPF from mis-configurations.

MD5 is a cryptographic authentication and is more preferred. Authentication-key, key-id and OSPF packet content is used to generate message digest that is added to the packet. Unlike the simple authentication method, key is not exchanged over the network.

Authentication-key-id value is 1, when authentication is not set (even for router that do not allow to set key id at all).

==Pranala Menarik==

* [[TCP/IP: Advanced Routing]]
* [[Quagga]]
* [[Mikrotik]]
* [[Cisco]]
* [[Juniper]]
* [[BIRD: Routing]]
* [[IPv6]]

@@ Line 4: / Line 4: @@
   /routing ospf interface
-     add interface=ether1 authentication=md5 authentication-key=mySampleKey authentication-key-id=2
+     add interface=ether1 authentication=md5 authentication-key=mySampleKey authentication-key-id=1
 Otentikasi sederhana adalah metode otentikasi teks biasa. Metode otentikasi sederhana rentan terhadap serangan pasif, siapa pun dengan packet sniffer dapat dengan mudah mendapatkan kata sandi. Metode ini harus digunakan hanya untuk melindungi OSPF dari kesalahan konfigurasi.

@@ Line 1: / Line 1: @@
-It is possible to secure OSPF packets exchange, MikroTik RouterOS provides two authentication methods, simple and MD5. OSPF authentication is disabled by default.
+Dimungkinkan untuk mengamankan pertukaran paket OSPF, MikroTik RouterOS menyediakan dua metode otentikasi, simple dan MD5. Otentikasi OSPF dinonaktifkan secara default.
-Authentication is configured per interface. Add static ospf interface entry and specify authentication properties to secure OSPF information exchange. md5 authentication configuration on ether1 is shown below:
+Otentikasi dikonfigurasi per interface. Tambahkan entri static ospf interface dan tentukan properti otentikasi untuk mengamankan pertukaran informasi OSPF. Konfigurasi otentikasi md5 pada ether1 ditunjukkan di bawah ini:
   /routing ospf interface
-   add interface=ether1 authentication=md5 authentication-key=mySampleKey authentication-key-id=2
+    add interface=ether1 authentication=md5 authentication-key=mySampleKey authentication-key-id=2
-Simple authentication is plain text authentication method. Method is vulnerable to passive attacks, anybody with packet sniffer can easily get password. Method should be used only to protect OSPF from mis-configurations.
+Otentikasi sederhana adalah metode otentikasi teks biasa. Metode otentikasi sederhana rentan terhadap serangan pasif, siapa pun dengan packet sniffer dapat dengan mudah mendapatkan kata sandi. Metode ini harus digunakan hanya untuk melindungi OSPF dari kesalahan konfigurasi.
-MD5 is a cryptographic authentication and is more preferred. Authentication-key, key-id and OSPF packet content is used to generate message digest that is added to the packet. Unlike the simple authentication method, key is not exchanged over the network.
+MD5 adalah otentikasi kriptografi dan lebih disukai. Authentication-key, key-id dan isi paket OSPF digunakan untuk menghasilkan intisari pesan yang ditambahkan ke paket. Berbeda dengan metode otentikasi sederhana, key tidak dipertukarkan melalui jaringan.
-Authentication-key-id value is 1, when authentication is not set (even for router that do not allow to set key id at all).
+Nilai Authentication-key-id adalah 1, ketika otentikasi tidak diatur (bahkan untuk router yang tidak memungkinkan untuk set key-id sama sekali).