OSPFv2 HMAC SHA-1 keychain authentication and optimization for multi-active MD5 keys

You can enable OSPFv2 HMAC-SHA1 authentication with keychain to authenticate packets reaching or originating from an OSPF interface.This feature ensures smooth transition from one key to another for OSPFv2 with enhanced security. You can enable OSPFv2 to send packets authenticated with only the latest MD5 key after all the neighbors switch to the latest configured key. In Junos OS releases earlier than Release 23.4R1, we support advertising authenticated OSPF packets always with multiple active MD5 keys with a maximum limit of two keys per interface. To enable OSPFv2 HMAC-SHA1 authentication, configure the authentication keychain <keychain name> option at the [edit protocols ospf area area-id interface interface_name hierarchy level. To enable optimization of multiple active MD5 keys, configure the delete-if-not-inuse option at the [edit protocols ospf area area-id interface interface_name authentication multi-active-md5] hierarchy level.