3.3.1.6 Set 'authentication key-chain'

Information

Configure the EIGRP address family key chain.

This is part of the EIGRP authentication configuration

Solution

Configure the EIGRP address family key chain.

hostname(config)#router eigrp <virtual-instance-name>
hostname(config-router)#address-family ipv4 autonomous-system {eigrp_as-number}
hostname(config-router-af)#af-interface {interface-name}
hostname(config-router-af-interface)#authentication key-chain {eigrp_key-chain_name}

Impact:

Organizations should plan and implement enterprise security policies that require rigorous authentication methods for routing protocols. Using the address-family 'key chain' for EIGRP enforces these policies by restricting the exchanges between predefined network devices.

See Also

https://workbench.cisecurity.org/benchmarks/17130