RE: OSPF authenication

From: Steven Weber (itweber@xxxxxxxxxxxxx)
Date: Sun Mar 04 2001 - 09:49:36 GMT-3


   

Thanks, I'll try that ;-)

----- Original Message -----

From: Mark Fyvie

To: Troy Allen McCarty ;ccielab@groupstudy.com ;tok cok ;Steven Weber

Sent: 3/4/01 3:34:36 AM

Subject: RE: OSPF authenication

Steve,

The "authentication" command you are looking for is performed inside
the

ospf process. You need to use the authentication key at the interface
level,

and then in your router process you use the "area x authentication"
command

where x is your area number.

You say that it works without this, but are you sure that it is

authenticated? Maybe you have a neighbor relationship, but it is

unauthenticated. Try mismatching the passwords and see if they still form
a

neighbor relationship. I think you will find that they still will, until
you

use the area based authentication command.

Mark

-----Original Message-----

From: nobody@groupstudy.com [mailto:nobody@groupstudy.com ]On
Behalf Of

Steven Weber

Sent: 04 March 2001 05:39

To: tok cok; ccielab@groupstudy.com; Troy Allen
McCarty

Subject: RE: OSPF authenication

Troy,

Thanks for verifying that I'm not crazy ;-)

whenever I do a ? I only get an authentication-key keyword never the

authentication keyword. I am using 11.2 12.0 and 12.1

Cheers,

Steve

----- Original Message -----

From: Troy Allen McCarty

To: ccielab@groupstudy.com ;tok
cok ;Steven Weber

Sent: 3/3/01 11:29:18 PM

Subject: RE: OSPF authenication

Steve,

Interestingly enough, the documentation shows that you are

correct. However, the old command may still be on the
routers:

Rack10_Router5(config-subif)#ip ospf ?

  authentication Enable

authentication

  authentication-key Authentication password

(key)

Cisco Internetwork Operating System Software

IOS (tm) 2500 Software (C2500-JS-L), Version 12.0(14), RELEASE
SOFTWARE

(fc1)

C

I configured authentication using only the authentication-key command
and

it works fine.

Regards,

Troy McCarty

CCIE #6967

At 11:06 PM 3/3/2001 -0500, Steven Weber wrote:

what I've come to notice is that their isn't any ip ospf
authentication

command only an authentication-key command. they do the same thing
but

when you

are using md5 you have to enter a key as well but for simple

authentication you

just have to enter a password.

Someone please correct me if I'm wrong.

Hope this helps,

Steve

--- Steven Weber

--- itweber@earthlink.net

--- EarthLink: It's your Internet.



This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:29:19 GMT-3