Skip to content

OSPF authentication support #1580

Open
Open

Description

@jovatn

Description

Proposal for new support. More investigations needed, though.
Call for a design meeting early on!

ETSI's Harmonized CRA Requirements for routers, modems and switches (folder, direct link to specific version) provides info on authentication algorithms for routing protocols, see pasted table below.
Image

FRR seems to provide support (doc), although I have not tried or investigated this.

Note: OSPFv3 ("OSPF for IPv6") initially did not include authentication trailer in the OSPF message; idea was to rely on IPsec for securing it. However, option for authentication trailer has been added (RFC7166), probably due to some issues with the use of OSPFv3 over IPsec.
FRR seems to have some support there too (doc).

Additional Information

There is a separate Infix feature request for IPsec (#1571)

General Information

Anyone can help out by sponsoring development of new features or contributing pull requests.
Please use this issue for discussions related to the feature.

Activity

  1. added
    triagePending investigation & classification (CCB)
    on Aug 6, 2026
  2. troglobit commented on Aug 6, 2026

    @troglobit
    Contributor

    Interesting! Was IPsec supposed to be used for all control protocols in IPv6? There's a certain appeal to that, very clever.

  3. added
    enhancementNew feature or request
    and removed
    triagePending investigation & classification (CCB)
    on Aug 12, 2026
  4. added this to the FUTURE milestone on Aug 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions