NX-OS OSPF Key Chain authentication algorithms

[bryantsteve]

In configuring OSPF key chain authentication on Nexus switch NX-OS 7.3.0 I need to specifiy the cryptologic algorithm ( needs to be hmac-sha-256), I have been unable to find a configuration option in the key chain sub menu. In XE-IOS cryptolographic-algorithmn <  > option  is available under the key chain <   > key <> in configuration mode. Does anyone know if/where this option is available in NX-OS 7.3.0?

[Andrea Testino · Accepted solution]

Hi Bryan,

Is this a Nexus 5000/6000 you are trying to configure? I'm assuming so since you mentioned NX-OS 7.3(0) is your current software version.

Unfortunately, hmac-sha-256 is not supported as a cryptographic algorithm in this particular platform. Only MD5 and simple password are.

You can see this in the Nexus 5K/6K configuration guides:

"Authentication

You can configure authentication on OSPFv2 messages to prevent unauthorized or invalid routing updates in your network. Cisco NX-OS supports two authentication methods:

• Simple password authentication
• MD5 authentication digest"

Please let me know if by chance you meant a different platform other than N5K/N6K.

Hope that helps!

- Andrea

[bryantsteve]

Andrea thank you for your reply Yes these are  Nexus 5000 switches, I do need to use key chain with  SHA 256 so hopefully there is another SW version that suppports this feature