In ISR 8300 how to use aes encryption.

[kasulasaiganesh]

I have  isr 8300 series  at each site user wants to use AES encryption for  without creating ipsec. Actually user is using ospf for multiple stations.

Please any one help me out from this issue.

[balaji.bandi]

The requirement was not clear - you like to use OSPF with AES encryption.

what IOS Xe code running on it. ?

provide other end sample configuration for us to understand the environment.

[kasulasaiganesh]

Yes, I need AES encryption with ospf.

Is it possible ?

[balaji.bandi]

what IOS Xe code running on it. ?

provide other end sample configuration for us to understand the environment.

[kasulasaiganesh]

Hi balaji.bandi sorry for late response.

IOS versions :- 17.06.03a.SPA.bin  and I don't have any configuration. I can share the  network diag only.

[kasulasaiganesh]

Hi Team,

Please share the configuration of the above network. 

Thank you.

[Max Jobs]

Its very important to know the version, but this is a general method:

1 - Configure OSPF with the "ip ospf authentication" command.
2 - Specify the authentication type as "ip ospf authentication message-digest".
3 - Set the encryption algorithm to AES by adding the "ip ospf message-digest-key" command with the desired key-id and encryption type as "md5 0 AES <password>".

[MHM Cisco World]

OSPFv3 with IPv6 is only support auth other OSPFv2 is support only plain text or MD5 hash

MHM

[Rob Ingram]

@kasulasaiganesh

If you want the OSPF communication between peers encrypted using AES then your options are using MACSec or IPSec.

If you were referring to authentication, then OSPF supports authentication of the messages between the peer devices using either MD5 or SHA (SHA1, SHA256, SHA384 or SHA512) or plaintext.