BGP, OSPF, and OSPFv3 authentication and encryption using manual IPsec SA

OSPF for IPv6, also known as OSPF version 3 (OSPFv3), does not have built-in authentication to ensure that routing packets are not altered and re-sent to the router. , you can use IPsec to encrypt and secure BGP, OSPF, and OSPFv3 packets.

To configure IPsec for BGP, OSPF, and OSPFv3, define a security association (SA) with the security-association sa-name configuration option at the [edit security ipsec] hierarchy level for both platforms. You then apply the configured SA to the BGP, OSPF, and OSPFv3 configurations.

To view the configured IPsec SAs for BGP, OSPF, and OSPFv3:

• On devices and vSRX running the liked process, use the show security ipsec control-plane-security-associations command.
• On devices with hardware, use the show ipsec securityassociations command.
• On devices running the kmd process, use the show security ipsec security-associations command.