686 BigIron RX Series Configuration Guide53-1001986-01Configuring OSPF25NOTEIf you want the software to assume that the value you enter is the clear-text form, and to encryptdisplay of that form, do not enter 0 or 1. Instead, omit the encryption option and allow the softwareto use the default behavior.If you specify encryption option 1, the software assumes that you are entering the encrypted formof the password or authentication string. In this case, the software decrypts the password or stringyou enter before using the value for authentication. If you accidentally enter option 1 followed by theclear-text version of the password or string, authentication will fail because the value used by thesoftware will not match the value you intended to use.Change the timer for OSPF authentication changesWhen you make an OSPF authentication change, the software uses the authentication-changetimer to gracefully implement the change. The software implements the change in the followingways:• Outgoing OSPF packets – After you make the change, the software continues to use the oldauthentication to send packets, during the remainder of the current authentication-changeinterval. After this, the software uses the new authentication for sending packets.• Inbound OSPF packets – The software accepts packets containing the new authentication andcontinues to accept packets containing the older authentication for two authentication-changeintervals. After the second interval ends, the software accepts packets only if they contain thenew authentication key.The default authentication-change interval is 300 seconds (5 minutes). You change the interval toa value from 0 – 14400 seconds.OSPF provides graceful authentication change for all the following types of authentication changesin OSPF:• Changing authentication methods from one of the following to another of the following:• Simple text password• MD5 authentication• No authentication• Configuring a new simple text password or MD5 authentication key• Changing an existing simple text password or MD5 authentication keyTo change the authentication-change interval, enter a command such as the following at theinterface configuration level of the CLI.BigIron RX(config-if-e10000-2/5)# ip ospf auth-change-wait-time 400Syntax: [no] ip ospf auth-change-wait-time The parameter specifies the interval and can be from 0 – 14400 seconds. The default is300 seconds (5 minutes).NOTEFor backward compatibility, the ip ospf md5-authentication key-activation-wait-time command is still supported.
