Re: OSPF Authentication

From: Michael Bausenwein (mikeb55@xxxxxxxx)
Date: Wed May 17 2000 - 12:37:17 GMT-3


   
   think of it this way:
   
   use the ip ospf message-digest-key command to set the MD5 password to
   use for authentication on the interface level.
   
   After you have configured the key, you enable it under the ospf router
   process.
   router ospf 10
   area 0 aut mess
   
   It is similar to access-list configuration. First you define what
   will be allowed, then you apply it. The concept is similar here.
   first define the md5 key and then apply it to an area.
   
   
   The example I used uses MD5 authentication. You could also use clear
   text passwords, using the ip ospf authentication-key command. Then
   you apply it to ospf using the area 0 authentication command.
   
   
   Hope this helps
   
   
   Michael Bausenwein
   Senior Network Engineer
   Greenwich Technology Partners
   CCIE 5865
   email:mbausenwein@greenwichtech.com
   
   ----- Original Message -----
   
   From: Li Chaoyong (Company)
   
   To: GroupStudy CCIE
   
   Sent: Wednesday, May 17, 2000 9:55 AM
   
   Subject: OSPF Authentication
   
   Could any one tell me how to use ospf authentication?
   
   There is a command "ip ospf authentication-key" and "ip ospf
   message-digest-key" in interface configuration mode. There is another
   command "area x authentication [message-digest]". I want to know what
   is the relationship between these two commands.
   
   Document CD said that "ip ospf authentication-key" is used with "area
   x authentication" and "ip ospf message-digest-key" is used with "area
   x authentication message-digest-key". But I found that "ip ospf
   authentication-key" can be used with "area x authentication
   message-digest-key" and "ip ospf message-digest-key" can be used with
   "area x authentication".
   
   So could anyone tell me what is the relationship with these two
   commands on earth.
   
   ------------------
   
   I find that the authentication type is identified by "area x authen"
   command. ???



This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:23:29 GMT-3