From: michale_lee50@xxxxxxxxxxx
Date: Sat May 12 2001 - 13:06:10 GMT-3
We I played with this for sometime yesterday. Here are the results
Router ospf 1
area 0 authentication message-digest
!
int s0/0.5
ip ospf message-digest-key 1 md5 cisco ( same for all in area 0)
!
area 5 virtual-link 143.1.7.7 authentication message-digest (on far end of
virtual-link)
area 5 virtual-link 143.1.7.7 message-digest-key 1 md5 cisco (for virtual
link)
The thing is that if you do not say that you are using message-digest for
extended area 0 " the virtual-link", the extended area will try to
authenticate with a key value of "0".
check to make sure with debug, you will still see ospf routes with the
authentication key of 0 but there is an error message for mitch match.
Mr. Lee
----- Original Message -----
From: <Ccieyet2b@aol.com>
To: <ccielab@groupstudy.com>
Sent: Friday, May 11, 2001 6:52 PM
Subject: OSPF: area 0 authentication and the virtual-link
> Hi all,
>
> I've tried a number of different ways to get routes seen in an area
connected
> to area 0 via a virtual link, but if I have authentication on area 0,
nothing
> I've tried so far works. (All subnets are visable when area 0 doesn't
have
> authentication).
>
> Here are some of the things that don't work:
>
> Configuring authentication on the transit area with the same passwords
as
> used in area 0.
> Configuring authentication on the virtual link itself (both ends),
area x
> virtual x.x.x.x authen-key password
> Configuring both of the above at the same time.
>
> If you know how to make this work, could you show me the actual config?
> thanks a whole bunch.
>
> Jim
> **Please read:http://www.groupstudy.com/list/posting.html
**Please read:http://www.groupstudy.com/list/posting.html
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:30:40 GMT-3