Using AH for Authentication for OSPFv3

[Mukesh Gupta <mgupta@iprg.nokia.com>]

Hi All,

I am working on providing authentication for OSPFv3 using IPv6 AH
extension header.

RFC 2740 suggests using AH/ESP extension headers of IPv6 for OSPF
authentication but doesn't provide details about how exactly this needs
to be done.

It seems that OSPFv3 shouldn't need to worry about it and it is kernel's
responsibility to provide AH authentication for all OSPFv3 packets. This
way OSPFv3 only receives authenticated packets.

OSPFv3 uses both multicast and unicast packets. Is there any standard
way of handling these packets using IPsec AH ??

Is there any standard way of implementing OSPFv3 Authentication using AH
extension header ?? Is there any vendor out there who has implemented it
??

Comments/Suggestions would be highly appreciated.

regards
Mukesh

--
******************************************************************
Often the best way to win is to forget to keep score.
******************************************************************
Mukesh Gupta
Phone: (650) 625-2264
Cell : (650) 868-9111
http://www.iprg.nokia.com/~mgupta
******************************************************************