RE: OSPF Authentication

From: Yurchenko, Michael (michael.yurchenko@xxxxxxxxxxx)
Date: Sun Apr 15 2001 - 14:05:12 GMT-3


   
Normally, you should either put 0 or omit the argument altogether. It is
used to specify the encryption algorythm the next argument (a password) has
been encrypted. However, in your case you are supplying a plain text
password, and the system is attempting to decrypt it using Cisco's
encryption method.

If you had an encrypted version of a password, then you would be using 7.
Also, the system will place 7 when it encrypts the password and puts it in
the config - that way, you can simply cut and paste it on a different
device.

I am a bit sleepy, so hope that made sense?

ip os message-digest-key 50 md5 ?
  <0-7> Encryption type (0 for not yet encrypted, 7 for proprietary)

Michael Yurchenko
CCIE# 6695, CCDP, CCNP ATM Specialist, MCSE
Customer Support Engineer - 2
michael.yurchenko@verizon.com
610-407-2154

-----Original Message-----
From: Kirk Bollinger [mailto:kirk@thebollingers.net]
Sent: Sunday, April 15, 2001 1:07 AM
To: ccielab@groupstudy.com
Subject: OSPF Authentication

When using md5 ospf authenticaion what exactly is the meaning of this ->

ip ospf message-digest-key 50 md5 7 cisco

The key number is 50
auth type is md5
the password is cisco

the 7 is ????

My assumption is that it is the type of local router encryption that is
used to display the password when doing a sh run / sh run int xxx, etc.

The reason I'm asking is that in my testbed if I use a 7 I get
authenticaion mismtach errors but when I change the authentication
command to using a 1 instead it works fine.

thanks!

-kirk
**Please read:http://www.groupstudy.com/list/posting.html
**Please read:http://www.groupstudy.com/list/posting.html



This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:29:46 GMT-3