From: Roderick Ta (rta@xxxxxxxxxxxxxxxxxx)
Date: Thu Apr 26 2001 - 18:07:03 GMT-3
You need the same authentication on all interfaces
in the same area. So, normally you don't want to
disable authentication once it started. However,
authentication sometimes extend to more than the
area you explicitly defined. For example, virtual
link. In this case, you have to manually disable
authentication on an interface you did not manually
turned on. :)
Roderick Ta
-----Original Message-----
From: Walter Chen [mailto:wchen@iloka.com]
Sent: Thursday, April 26, 2001 3:37 PM
To: 'Ramesh Ramasamy'; ccielab@groupstudy.com
Subject: RE: ospf authentication-NULL?
You use this interface configuration command to "null" the authentication
requirement configured for an area. Your Q#2 is correct that if you
configured an OSPF area for authentication, then all interfaces that belong
to this area have to be configured for authentication. If you do not want
to do authentication for a particular interface because, say, the other side
dose not know how to do md5 authentication, you can now use "ip ospf authen
null" command. However, you will have to disable authentication on all
other OSPF interfaces connected to this interface.
BTW, unlike BGP, OSPF assignment is on an interface by interface basis
instead of a router by router basis. So, "all the routers in that area"
does not convey an accurate picture.
Walter
-----Original Message-----
From: Ramesh Ramasamy [mailto:ramesh_ramasamy@hotmail.com]
Sent: Thursday, April 26, 2001 2:17 PM
To: ccielab@groupstudy.com
Subject: ospf authentication-NULL?
Hi,
Question#1: When do i use 'ip osp authen NULL' command?
Question#2:I was trying to understand the idea behind this NULL?.
If i have an area x enabled for authentication, then all
the routers in that area must be doing authentication -
is my understanding, am i correct?
Thanks,
Ramesh.
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:29:58 GMT-3