From: mark salmon (masalmon@xxxxxxxxx)
Date: Thu Aug 03 2000 - 16:40:58 GMT-3
Observances on a recent lab scenario
Set uP:
6 routers connected via serial interfaces and ethernet. There are 3
OSPF areas in the scenario. Area 3 is separated from the backbone by
area 1. I set up a virtual link and everything works fine.
I enables MD5 authentication and set up the passwords on area 0 only.
The area 0 neighbors come up fine (once the authentication is set up
correctly)
However, I then realized that on the area 1/3 abr which is one end of
the virtual link, I must configure area 0 authentication.
Second, I had to save an reboot both routers at each end of the cirtual
link.
Bottomline, set up authentication first (if required) before doing the
virtual link.
The drawback is it would be nice to see the network functional before
making it so complex as troubleshooting can be time consuming.
In addition, the show ip ospf virt command shows the link as up even if
authentication fails. Tip, do it on BOTH sides of the link. THis is
how I discovered that I failed to set up authentication on the 1/3 abr.
Finally USE DEBUG (am I shouting?) it will tell a lot about what is
going on.
--Mark Salmon Project Engineer Cisco Professional Services Phone:773-695-8235 Pager:800-365-4578 email: masalmon@cisco.com
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:24:20 GMT-3