From: Ademola Osindero (osindero@xxxxxxxxxxxxxxxxx)
Date: Mon Oct 22 2001 - 12:29:26 GMT-3
John,
You need to add
area 0 authentication message-digest
to R5 to inform it that this kind of authentication is been used in the
backbone. Show ip ospf on any router should inform you whether
authentication is been used in area 0 since all routers talk with it.
Also ensure that the password used in area 0 is the same as that used for
the virtual link. the Virtual link only serves to extend a "cut-off" router
to area 0. The cut off router should then be informed of what holds in the
backbone by specifying area 0 authentication message-digest (or whatever).
Since there is no direct interface on which to use ip ospf
message-digest-key , the virtual-link serves this place and uses area 1
virtual-link ip-address message-digest-key command.
Ademola
At 08:01 AM 10/22/2001 -0700, John Neiberger wrote:
>Yep, I'm positive. I've retyped them many, many times and I learned the
>hard way a couple of years ago the dangers of white space at the end of
>passwords.
>
>Thanks,
>John
>
>On Mon, 22 Oct 2001 02:11:44 -0400 (EDT), Jason Gardiner wrote:
>
>| White spaces at the end of passwords are killers. Are you sure the
>| password match exactly?
>|
>| Thanks,
>|
>| Jason Gardiner
>| Supervisor, Engineering Services
>| Sprint <Insert Division Name>
>|
>| "You can swim all day in the Sea of Knowledge and
>| still come out completely dry. Most people do."
>|
>| - Norton Juster
>|
>| On Sun, 21 Oct 2001, John Neiberger wrote:
>|
>| > I was working on Fatkid 401 OSPF lab tonight and I could never get the
>| > virtual link authentication to work correctly. No matter what I did, I
>| > would get errors stating I had a mismatched authentication key. Well,
>the
>| > key was "cisco" so that's not too hard to type in correctly. Still, I
>| > played with the configs on the two relevant routers and I rebooted them
>| > several times, all to no avail.
>| >
>| > I even changed the authentication type to md5 and got the same message.
>| > Very weird. I thought at one point this was an IOS issue because one
>router
>| > was running 11.2(7) and the other 11.2(25a). I upgraded the first one
>to
>| > 11.2(25a) and I still see the same error.
>| >
>| > I peeked at the solution and saw that I had it configured exactly how
>they
>| > suggested. Then I checked CCO and saw that they suggest the same
>| > configuration.
>| >
>| > Do any of you have any tips for configuring virtual link
>authentication?
>| > This seems to be a pretty simple config and I don't see what I'm
>missing.
>| >
>| > Thanks,
>| > John
>| >
>| >
>| >
>| >
>| >
This archive was generated by hypermail 2.1.4 : Thu Jun 20 2002 - 22:33:23 GMT-3