How to secure IPv6 P2P Link between two distinguished Routers using ospfv3

[MANFRED LIEBCHEN]

I have two Routers - one Catalyst 6500 Sup720 and one Nexus 7009 SUP2-E - connected

via ospfv3 P2P Link using  /64 IPv6 Networkaddresses. What must be configured in order to secure this P2P Link against possible security attacks ! Any example configuration available ?

Greetings Manfred

[Seb Rupik]

Hi Manfred,

You should configure authentication on both of the P2P interfaces/ SVIs:

!
int te1/0/1
   desc 6500 uplink
   ipv6 ospf authentication ipsec spi 500 sha1 <40_bit_hash>
!

!
int te1/0/1
   desc 7009 uplink
   ipv6 ospf authentication ipsec spi 500 sha1 <40_bit_hash>
!

...ensure that either end of the link have same spi index value and obviously hash value too.

cheers,

Seb.