OSPF without authentication !!!

CCIE_2011

Hi all ..... guys how risky it is to have OSPF without authentication ?

I have seen so far around 4 private networks none use authentication for ospf. Is itn't this too risky ?
Can you please tell also if in your network you are using authintication for ospf( or eigrp, Rip V2) .

dtlokee

To determine how risky it may be you need to look at the structure of the network. If the routers are connected together over point to point links with no other devices on them there is no possibility of incorrect routing nformation being injected into the network. This combined with passive interfaces on the access-layer links (or redustributed connected to advertise them) will usually be good enough.

I still prefer to use authentication on customer networks, and I use authentication and filtering here at work.