From: Theodore TZEVELEKIS (theodore_tzevelekis@xxxxxxxxx)
Date: Sun Jun 17 2001 - 11:52:58 GMT-3
Hi John,
Thanks for your reply.
It works fine without authentication, even without the neighbor statements.
Besides, R2 and R4 authenticate with just one neighbor statement.
Nevertheless, I did try with the neighbor statements as well. No luck.
I even tried completely removing the V-L link config in case it was
interfering... but no... still does not work...
Any other ideas?
Theo
-----Original Message-----
From: John Mistichelli [mailto:jmistichelli@yahoo.com]
Sent: Sunday, June 17, 2001 4:49 PM
To: Theodore TZEVELEKIS; ccielab@groupstudy.com
Subject: Re: OSPF authentication
looks like you forgot neighbor statements on R1 and
R2.
John Mistichelli
CCIE, CCSI, MCSE, CNE
--- Theodore TZEVELEKIS
<theodore_tzevelekis@yahoo.com> wrote:
> Hi all,
>
> I have the following setup:
>
> R1,R2,R4 in area 0 (frame - R4 is hub)
> R1 - V-L - R6
>
> authentication on V-L and area 0
> R4 and R2 authenticate.
> V-L authenticates
> R4 and R1 REFUSE to authenticate.
> I get on R1:
>
> *Mar 1 00:39:03.092: OSPF: Rcv pkt from
> 137.3.124.4, Serial0/0 : Mismatch
> Authe
> ntication Key - Message Digest Key 1
>
> Am I missing something here?
>
> Thanks.
>
> Theo
>
>
> **************related configs****************
>
> R2
> interface Serial0/0
> ip address 137.3.124.2 255.255.255.224
> no ip directed-broadcast
> encapsulation frame-relay
> ip ospf message-digest-key 1 md5 cisco
> ip ospf interface-retry 0
> ip ospf priority 0
> no ip mroute-cache
> no fair-queue
> frame-relay map ip 137.3.124.1 204
> frame-relay map ip 137.3.124.4 204
> no frame-relay inverse-arp
> !
> router ospf 100
> area 0 authentication message-digest
> redistribute connected metric-type 1 subnets
> redistribute rip metric-type 1 subnets
> network 137.3.2.0 0.0.0.255 area 0
> network 137.3.124.0 0.0.0.31 area 0
>
> R4
> interface Serial0/0
> ip address 137.3.124.4 255.255.255.224
> no ip directed-broadcast
> encapsulation frame-relay
> ip ospf message-digest-key 1 md5 cisco
> ip ospf interface-retry 0
> ip ospf priority 255
> no ip mroute-cache
> no fair-queue
> frame-relay map ip 137.3.124.1 401
> frame-relay map ip 137.3.124.2 402
> no frame-relay inverse-arp
> !
> router ospf 100
> area 0 authentication message-digest
> redistribute connected metric-type 1 subnets
> network 137.3.4.0 0.0.0.255 area 0
> network 137.3.40.0 0.0.0.255 area 3
> network 137.3.124.0 0.0.0.31 area 0
> neighbor 137.3.124.2
> neighbor 137.3.124.1
>
> R1
> !
> interface Serial0/0
> ip address 137.3.124.1 255.255.255.224
> no ip directed-broadcast
> encapsulation frame-relay
> ip ospf message-digest-key 1 md5 cisco
> ip ospf priority 0
> no ip mroute-cache
> no fair-queue
> frame-relay map ip 137.3.124.2 104
> frame-relay map ip 137.3.124.4 104
> no frame-relay inverse-arp
> !
> router ospf 100
> area 0 authentication message-digest
> area 4 virtual-link 137.3.6.6 message-digest-key 1
> md5 cisco
> timers spf 10 15
> redistribute connected metric-type 1 subnets
> redistribute static metric 1000 metric-type 1
> subnets
> network 137.3.1.0 0.0.0.255 area 0
> network 137.3.16.0 0.0.0.255 area 4
> network 137.3.124.0 0.0.0.31 area 0
> !
>
> R6
> router ospf 100
> area 0 authentication message-digest
> area 4 virtual-link 137.3.1.1 message-digest-key 1
> md5 cisco
> area 5 nssa no-summary
> network 137.3.6.0 0.0.0.255 area 4
> network 137.3.16.0 0.0.0.255 area 4
> network 137.3.36.0 0.0.0.255 area 5
> network 137.3.60.0 0.0.0.255 area 4
>
>
>
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:31:25 GMT-3