Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


Securing OSPFv3 Networks with IPsec Transport Mode


OSPF version 3 (OSPFv3), unlike OSPF version 2, does not have a built-in authentication method and relies on IPsec to provide this functionality. Using the ES PIC syntax, you can use IPsec to secure OSPFv3 between Routing Engines in M Series and T Series platforms. You can secure specific OSPFv3 interfaces and protect OSPFv3 virtual links. To configure, create a transport mode security association and apply the SA to the OSPFv3 configuration by including the ipsec-sa statement at the [edit protocols ospf3 area area-number interface interface-name] or [edit protocols ospf3 area area-number virtual-link neighbor-id neighbor-ip-address transit-area area-number] hierarchy level.

Related Documentation