On Mon, 20 Jul 2026, Paul Wouters wrote:

On the part of AH being used for OSPFv3, see:

https://datatracker.ietf.org/doc/html/rfc7166

              Supporting Authentication Trailer for OSPFv3

Abstract

   Currently, OSPF for IPv6 (OSPFv3) uses IPsec as the only mechanism
   for authenticating protocol packets.  This behavior is different from
   authentication mechanisms present in other routing protocols (OSPFv2,
   Intermediate System to Intermediate System (IS-IS), RIP, and Routing
   Information Protocol Next Generation (RIPng)).  In some environments,
   it has been found that IPsec is difficult to configure and maintain
   and thus cannot be used.  This document defines an alternative
   mechanism to authenticate OSPFv3 protocol packets so that OSPFv3 does
   not depend only upon IPsec for authentication.




I am not sure how much this is in use instead of IPsec AH. I am trying
to find out.

Paul

_______________________________________________
IPsec mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to