https://lms.onnocenter.or.id/wiki/index.php?action=history&feed=atom&title=Mikrotik%3A_OSPF_Authentication 2026-04-21T04:08:52Z Revision history for this page on the wiki MediaWiki 1.45.1 https://lms.onnocenter.or.id/wiki/index.php?title=Mikrotik:_OSPF_Authentication&diff=53954&oldid=prev 2019-01-02T01:05:50Z

<p></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 01:05, 2 January 2019</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l4">Line 4:</td> <td colspan="2" class="diff-lineno">Line 4:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  /routing ospf interface  </div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  /routing ospf interface  </div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>     add interface=ether1 authentication=md5 authentication-key=mySampleKey authentication-key-id=<del style="font-weight: bold; text-decoration: none;">2</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>     add interface=ether1 authentication=md5 authentication-key=mySampleKey authentication-key-id=<ins style="font-weight: bold; text-decoration: none;">1</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>Otentikasi sederhana adalah metode otentikasi teks biasa. Metode otentikasi sederhana rentan terhadap serangan pasif, siapa pun dengan packet sniffer dapat dengan mudah mendapatkan kata sandi. Metode ini harus digunakan hanya untuk melindungi OSPF dari kesalahan konfigurasi.</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>Otentikasi sederhana adalah metode otentikasi teks biasa. Metode otentikasi sederhana rentan terhadap serangan pasif, siapa pun dengan packet sniffer dapat dengan mudah mendapatkan kata sandi. Metode ini harus digunakan hanya untuk melindungi OSPF dari kesalahan konfigurasi.</div></td></tr> </table>

Onnowpurbo https://lms.onnocenter.or.id/wiki/index.php?title=Mikrotik:_OSPF_Authentication&diff=53953&oldid=prev 2019-01-02T01:05:27Z

<p></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 01:05, 2 January 2019</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1">Line 1:</td> <td colspan="2" class="diff-lineno">Line 1:</td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">It is possible to secure </del>OSPF <del style="font-weight: bold; text-decoration: none;">packets exchange</del>, MikroTik RouterOS <del style="font-weight: bold; text-decoration: none;">provides two authentication methods</del>, simple <del style="font-weight: bold; text-decoration: none;">and </del>MD5. OSPF <del style="font-weight: bold; text-decoration: none;">authentication is disabled by </del>default.</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">Dimungkinkan untuk mengamankan pertukaran paket </ins>OSPF, MikroTik RouterOS <ins style="font-weight: bold; text-decoration: none;">menyediakan dua metode otentikasi</ins>, simple <ins style="font-weight: bold; text-decoration: none;">dan </ins>MD5. <ins style="font-weight: bold; text-decoration: none;">Otentikasi </ins>OSPF <ins style="font-weight: bold; text-decoration: none;">dinonaktifkan secara </ins>default.</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">Authentication is configured </del>per interface. <del style="font-weight: bold; text-decoration: none;">Add </del>static ospf interface <del style="font-weight: bold; text-decoration: none;">entry and specify authentication properties to secure </del>OSPF <del style="font-weight: bold; text-decoration: none;">information exchange</del>. md5 <del style="font-weight: bold; text-decoration: none;">authentication configuration on </del>ether1 <del style="font-weight: bold; text-decoration: none;">is shown below</del>:</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">Otentikasi dikonfigurasi </ins>per interface. <ins style="font-weight: bold; text-decoration: none;">Tambahkan entri </ins>static ospf interface <ins style="font-weight: bold; text-decoration: none;">dan tentukan properti otentikasi untuk mengamankan pertukaran informasi </ins>OSPF. <ins style="font-weight: bold; text-decoration: none;">Konfigurasi otentikasi </ins>md5 <ins style="font-weight: bold; text-decoration: none;">pada </ins>ether1 <ins style="font-weight: bold; text-decoration: none;">ditunjukkan di bawah ini</ins>:</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  /routing ospf interface  </div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  /routing ospf interface  </div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">  </del>add interface=ether1 authentication=md5 authentication-key=mySampleKey authentication-key-id=2</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">    </ins>add interface=ether1 authentication=md5 authentication-key=mySampleKey authentication-key-id=2</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">Simple authentication is plain text authentication method</del>. <del style="font-weight: bold; text-decoration: none;">Method is vulnerable to passive attacks</del>, <del style="font-weight: bold; text-decoration: none;">anybody with </del>packet sniffer <del style="font-weight: bold; text-decoration: none;">can easily get password</del>. <del style="font-weight: bold; text-decoration: none;">Method should be used only to protect </del>OSPF <del style="font-weight: bold; text-decoration: none;">from mis-configurations</del>.</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">Otentikasi sederhana adalah metode otentikasi teks biasa</ins>. <ins style="font-weight: bold; text-decoration: none;">Metode otentikasi sederhana rentan terhadap serangan pasif</ins>, <ins style="font-weight: bold; text-decoration: none;">siapa pun dengan </ins>packet sniffer <ins style="font-weight: bold; text-decoration: none;">dapat dengan mudah mendapatkan kata sandi</ins>. <ins style="font-weight: bold; text-decoration: none;">Metode ini harus digunakan hanya untuk melindungi </ins>OSPF <ins style="font-weight: bold; text-decoration: none;">dari kesalahan konfigurasi</ins>.</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>MD5 <del style="font-weight: bold; text-decoration: none;">is a cryptographic authentication and is more preferred</del>. Authentication-key, key-id <del style="font-weight: bold; text-decoration: none;">and </del>OSPF <del style="font-weight: bold; text-decoration: none;">packet content is used to generate message digest that is added to the packet</del>. <del style="font-weight: bold; text-decoration: none;">Unlike the simple authentication method</del>, key <del style="font-weight: bold; text-decoration: none;">is not exchanged over the network</del>.</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>MD5 <ins style="font-weight: bold; text-decoration: none;">adalah otentikasi kriptografi dan lebih disukai</ins>. Authentication-key, key-id <ins style="font-weight: bold; text-decoration: none;">dan isi paket </ins>OSPF <ins style="font-weight: bold; text-decoration: none;">digunakan untuk menghasilkan intisari pesan yang ditambahkan ke paket</ins>. <ins style="font-weight: bold; text-decoration: none;">Berbeda dengan metode otentikasi sederhana</ins>, key <ins style="font-weight: bold; text-decoration: none;">tidak dipertukarkan melalui jaringan</ins>.</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>Authentication-key-id <del style="font-weight: bold; text-decoration: none;">value is </del>1, <del style="font-weight: bold; text-decoration: none;">when authentication is not set </del>(<del style="font-weight: bold; text-decoration: none;">even for </del>router <del style="font-weight: bold; text-decoration: none;">that do not allow to </del>set key id <del style="font-weight: bold; text-decoration: none;">at all</del>).  </div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">Nilai </ins>Authentication-key-id <ins style="font-weight: bold; text-decoration: none;">adalah </ins>1, <ins style="font-weight: bold; text-decoration: none;">ketika otentikasi tidak diatur </ins>(<ins style="font-weight: bold; text-decoration: none;">bahkan untuk </ins>router <ins style="font-weight: bold; text-decoration: none;">yang tidak memungkinkan untuk </ins>set key<ins style="font-weight: bold; text-decoration: none;">-</ins>id <ins style="font-weight: bold; text-decoration: none;">sama sekali</ins>).</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> </table>

Onnowpurbo https://lms.onnocenter.or.id/wiki/index.php?title=Mikrotik:_OSPF_Authentication&diff=53906&oldid=prev 2019-01-01T07:45:53Z

<p>Created page with &quot;It is possible to secure OSPF packets exchange, MikroTik RouterOS provides two authentication methods, simple and MD5. OSPF authentication is disabled by default. Authenticat...&quot;</p> <p><b>New page</b></p><div>It is possible to secure OSPF packets exchange, MikroTik RouterOS provides two authentication methods, simple and MD5. OSPF authentication is disabled by default.<br /> <br /> Authentication is configured per interface. Add static ospf interface entry and specify authentication properties to secure OSPF information exchange. md5 authentication configuration on ether1 is shown below:<br /> <br /> /routing ospf interface <br /> add interface=ether1 authentication=md5 authentication-key=mySampleKey authentication-key-id=2<br /> <br /> Simple authentication is plain text authentication method. Method is vulnerable to passive attacks, anybody with packet sniffer can easily get password. Method should be used only to protect OSPF from mis-configurations.<br /> <br /> MD5 is a cryptographic authentication and is more preferred. Authentication-key, key-id and OSPF packet content is used to generate message digest that is added to the packet. Unlike the simple authentication method, key is not exchanged over the network.<br /> <br /> Authentication-key-id value is 1, when authentication is not set (even for router that do not allow to set key id at all). <br /> <br /> <br /> ==Pranala Menarik==<br /> <br /> * [[TCP/IP: Advanced Routing]]<br /> * [[Quagga]]<br /> * [[Mikrotik]]<br /> * [[Cisco]]<br /> * [[Juniper]]<br /> * [[BIRD: Routing]]<br /> * [[IPv6]]</div>

Onnowpurbo