Hi Darren, Cisco implemented finally the OSPFv3 Authentication Trailer (RFC 7166) beginning with 15.4S/T/M. I was able to configure it without a problem on a 2921 running 15.4(3)M with ipbase license in our lab.
Best, Christopher -----Original Message----- From: Darren O'Connor [mailto:[email protected]] Sent: Dienstag, 5. August 2014 20:40 To: Christopher Werny Cc: [email protected]; [email protected] Subject: Re: [c-nsp] OSPFv3 Multiple Address Families Support in IOS There was an issue, at least a year or two ago, when it came to authentication on ospfv3. Ospfv3 doesn't have built in authentication, rather it relies on ipv6 IPSec. That's all fine and good until you realise you need the security license on ios in order to use IPSec. So you cannot authenticate your peers with v3 out the box on unlicensed ios. I would need to check if this has changed though > On 5 Aug 2014, at 19:29, "Christopher Werny" <[email protected]> wrote: > > Hi, > > thanks to both of you for the feedback. As we are a "typical" enterprise > environment, TE isn't much of a concern for us. > > Best > Christopher > > -----Original Message----- > From: [email protected] [mailto:[email protected]] > Sent: Dienstag, 5. August 2014 20:25 > To: [email protected] > Cc: Christopher Werny; [email protected] > Subject: Re: [c-nsp] OSPFv3 Multiple Address Families Support in IOS > >> No TE extensions for OSPFv3 is the biggest issue. > >>> And for those who aren't married to OSPF, IS-IS is still an excellent >>> alternative. > > Steinar Haug, Nethelp consulting, [email protected] > >> >> Thanks >> Darren >> http://www.mellowd.co.uk/ccie >> >> >> >>> From: [email protected] >>> To: [email protected] >>> Date: Tue, 5 Aug 2014 17:48:22 +0000 >>> Subject: [c-nsp] OSPFv3 Multiple Address Families Support in IOS >>> >>> Dear list, >>> >>> I noticed that support for multiple address families in OSPFv3 was added in >>> recent IOS versions. I am currently thinking about updating the IOS >>> version on my routers and subsequently consolidating OSPFv2 and OSPFv3 into >>> OSPFv3 for both IPv4 and IPv6. >>> >>> Has anyone done this before and can share some experience with it? What are >>> (in your opinion) the pros and cons of the aforementioned consolidation of >>> OSPFv2/v3 into only OSPFv3? >>> >>> Thanks in advance for your time and feedback. >>> >>> Best, >>> Christopher >>> >>> >>> >>> >>> _______________________________________________ >>> cisco-nsp mailing list [email protected] >>> https://puck.nether.net/mailman/listinfo/cisco-nsp >>> archive at http://puck.nether.net/pipermail/cisco-nsp/ >> >> _______________________________________________ >> cisco-nsp mailing list [email protected] >> https://puck.nether.net/mailman/listinfo/cisco-nsp >> archive at http://puck.nether.net/pipermail/cisco-nsp/ >> _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
