[c-nsp] OSPFv3 Multiple Address Families Support in IOS

Christopher Werny cwerny at ernw.de
Tue Aug 5 14:45:20 EDT 2014


Hi Darren,

Cisco implemented finally the OSPFv3 Authentication Trailer (RFC 7166) beginning with 15.4S/T/M. I was able to configure it without a problem on a 2921 running 15.4(3)M with ipbase license in our lab.

Best,
Christopher

-----Original Message-----
From: Darren O'Connor [mailto:darrenoc at outlook.com] 
Sent: Dienstag, 5. August 2014 20:40
To: Christopher Werny
Cc: sthaug at nethelp.no; cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] OSPFv3 Multiple Address Families Support in IOS

There was an issue, at least a year or two ago, when it came to authentication on ospfv3. 

Ospfv3 doesn't have built in authentication, rather it relies on ipv6 IPSec. That's all fine and good until you realise you need the security license on ios in order to use IPSec. So you cannot authenticate your peers with v3 out the box on unlicensed ios.

I would need to check if this has changed though



> On 5 Aug 2014, at 19:29, "Christopher Werny" <cwerny at ernw.de> wrote:
> 
> Hi,
> 
> thanks to both of you for the feedback. As we are a "typical" enterprise environment, TE isn't much of a concern for us. 
> 
> Best
> Christopher
> 
> -----Original Message-----
> From: sthaug at nethelp.no [mailto:sthaug at nethelp.no] 
> Sent: Dienstag, 5. August 2014 20:25
> To: darrenoc at outlook.com
> Cc: Christopher Werny; cisco-nsp at puck.nether.net
> Subject: Re: [c-nsp] OSPFv3 Multiple Address Families Support in IOS
> 
>> No TE extensions for OSPFv3 is the biggest issue.
> 
>>> And for those who aren't married to OSPF, IS-IS is still an excellent
>>> alternative.
> 
> Steinar Haug, Nethelp consulting, sthaug at nethelp.no
> 
>> 
>> Thanks
>> Darren
>> http://www.mellowd.co.uk/ccie
>> 
>> 
>> 
>>> From: cwerny at ernw.de
>>> To: cisco-nsp at puck.nether.net
>>> Date: Tue, 5 Aug 2014 17:48:22 +0000
>>> Subject: [c-nsp] OSPFv3 Multiple Address Families Support in IOS
>>> 
>>> Dear list,
>>> 
>>> I noticed that support for multiple address families in OSPFv3 was added in recent IOS versions.  I am currently thinking about updating the IOS version on my routers and subsequently consolidating OSPFv2 and OSPFv3 into OSPFv3 for both IPv4 and IPv6.
>>> 
>>> Has anyone done this before and can share some experience with it? What are (in your opinion) the pros and cons of the aforementioned consolidation of OSPFv2/v3 into only OSPFv3?
>>> 
>>> Thanks in advance for your time and feedback.
>>> 
>>> Best,
>>> Christopher
>>> 
>>> 
>>> 
>>> 
>>> _______________________________________________
>>> cisco-nsp mailing list  cisco-nsp at puck.nether.net
>>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>>                         
>> _______________________________________________
>> cisco-nsp mailing list  cisco-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>> 



More information about the cisco-nsp mailing list