PIX 6.3 OSPF
RIPが有効になっているインターフェースでは有効にできない。
RIPもしくはOSPFのどちらか。
router ospf 1
network 172.16.2.0 255.255.255.0 area 0
というように設定するがサブネットマスクを指定する。
ルータのようにwildcardではない。
captain(config-router)# ?
At the end of show <command>, use the pipe character '|' followed by:
begin|include|exclude|grep [-v] <regular_exp>, to filter show output.
area Configures OSPF areas.
compatible Run OSPF in RFC 1583 compatible mode.
default-information Distribute a default route
distance Configure administrative distances for OSPF process.
ignore Supress syslog for receipt of type 6(MOSPF) LSAs
log-adj-changes Log OSPF adjacency changes
network Add/remove interfaces to/from OSPF routing process
redistribute Configure redistribution between OSPF processes.
router-id Configure router id for an OSPF process.
summary-address Configure summary address for OSPF redistribution.
timers Configure timers for an OSPF process.
captain(config-router)# area ?
Usage: [no] area <area-id>
[no] area <area id> authentication [message-digest]
[no] area <area-id> default-cost <cost>
[no] area <area-id> stub [no-summary]
[no] area <area-id> nssa [no-redistribution]
[default-information-originate [metric <value>] [metric-type <1|2>]]
[no-summary]
[no] area <area-id> range <address> <mask> [advertise | not-advertise]
[no] area <area-id> filter-list prefix {<name> in|out}
[no] area <area-id> virtual-link <router-id> [hello-interval <seconds>]
[retransmit-interval <seconds>] [transmit-delay <seconds>]
[dead-interval <seconds>] [authentication-key <password>]
[message-digest-key <id> md5 <key>] [authentication
[message-digest | null]]
captain(config-router)# area
このあたりのコマンドがサポートされている。
ridistできるっぽいので見てみると。
以下のような感じ。
captain(config-router)# redistribute
Not enough arguments.
Usage: [no] redistribute <static|connected> [metric <metric-value>] [metric-type
<metric-type>] [route-map <name>] [tag <tag-value>] [subnets]
[no] redistribute ospf <pid> [metric <metric-value>] [metric-type
<metric-type>] [route-map <name>] [tag <tag-value>] [subnets]
[match {internal | external [1|2] | nssa-external [1|2]}]
captain(config-router)#
インターフェースの設定は routing interfaceコマンドを使う。
captain(config)# routing interface inside
captain(config-routing)# ?
At the end of show <command>, use the pipe character '|' followed by:
begin|include|exclude|grep [-v] <regular_exp>, to filter show output.
ospf Configure OSPF interface specific parameters.
captain(config-routing)# ospf ?
Usage: [no] ospf cost <cost>
[no] ospf retransmit-interval <seconds>
[no] ospf transmit-delay <seconds>
[no] ospf priority <number>
[no] ospf hello-interval <seconds>
[no] ospf dead-interval <seconds>
[no] ospf authentication-key <password>
[no] ospf message-digest-key <key-id> md5 <key>
[no] ospf database-filter all out
[no] ospf authentication [message-digest|null]
[no] ospf mtu-ignore
captain(config-routing)# ospf
captain(config-routing)# ospf message-digest-key 1 md5 cisco
captain(config-routing)# ospf authentication message-digest
captain(config-routing)#
このように認証の設定ができる。
default-information originateは、ルータと同じく
static default routeをきっておく。