OSPF ‘authentication-type’ deprecated or showing as hidden on different versions.

OSPF ‘authentication-type’ deprecated or showing as hidden on different versions.

In different versions of Junos OS, the command authentication-type shows a warning that it is deprecated, or else when trying to configure it, the command is not even shown as available. Use of the context-sensitive help command (“?”) does not show the command either. This article will explain the behavior.

In Junos OS version 11.4 and earlier, when reviewing the configuration, or when doing a commit check, a message is displayed warning that the command is being deprecated:

OSPF interface authentication configuration is the best practice. OSPF authentication at the area level should be avoided.

Revised in the following Junos versions:
14.1R1
13.3R3
12.3R6
12.1R5
11.4R1

In Junos OS version 11.4 and earlier, when reviewing the configuration, or when doing a commit check, a message is displayed warning that the command is being deprecated:

When attempting to configure authentication at the area level the <authentication-type> is not offered as an option choice:

Nevertheless once you have typed the keyword you can verify the possible completions:

When you do a commit check, you will not get the warning message as you did on version 11.4.

Below, you will find an example configuration for two logical systems that have configured authentication-type at the area level:
Configuration:

Next, we will show the output from three different show commands:

  • show ospf neighbor
  • show ospf overview
  • show ospf interface

First, you will find that neighborship is up and full between both neighbors, using the command show ospf neighbor:

Second, the overview shows that the authentication type does meet our configuration for message-digest algorithm (MD5). Use the command show ospf overview:
Third, notice that if you check the authentication at the interface level, it will show as None. This is expected, as the configuration was performed at the OSPF area level. Use the command show ospf interface:

About the author

James Palmer

Leave a Comment