Re: Resolved, was OSPF Virtual Link Authentication [7:23867]

From: Hansang Bae (hbae@xxxxxxxxxx)
Date: Wed Oct 24 2001 - 03:38:10 GMT-3


   
At 09:07 PM 10/23/01 -0700, John Neiberger wrote:
>[snip] This time it still would
>not work, but instead of getting a Mismatched Authentication Key error
>during debugging I was getting a Mismatched Authentication Type. It claimed
>that one end was using Type 0 and the other was Type 1. I don't really know
>what that means so I tinkered for a while.

Type 0 authentication means you're not using any authentication. Type 1 is
simple password (i.e. not md5 hash)

>I tried many different combinations to no avail and eventually put
>everything back the way I honestly thought it should be. Still nothing.
>So, I rebooted...and guess what...it came up just fine.
>
>This really irritates me. Why would I need to reboot? It seems like I do a
>lot of rebooting when playing with ospf! :-) Maybe that's just me, though.
>Anyway, here is what the final working config looks like (and it's exactly
>what I *thought* should have worked in the first place):
>
>R4 is in Area 0 and Area 1. R5 connects to R4 and has interfaces in area 5.
>
>R4 ospf config:
>
>router ospf 1
> log-adjacency-changes
> area 0 authentication
> area 1 virtual-link 212.1.22.1 authentication-key cisco
[snip]

>R5 ospf config:
>
>router ospf 1
> area 0 authentication
> area 1 virtual-link 200.100.100.17 authentication-key cisco
>
>Very simple, very straightforward, and dang it, it should have worked two
>days ago! Oh well. Perhaps I was overlooking something and tonight's
>configs are *exactly* the same as I had them two days ago.

But did you make sure that EVERY area 0 router had it? And if you used the
format below, you should have been OK. (I don't know that the router
will Auto-Assume that you want Type 1 authentication if you just type in
"authentication-key")

area 1 virtual-link 1.1.1.1 authentication authentication-key cisco

hsb



This archive was generated by hypermail 2.1.4 : Thu Jun 20 2002 - 22:33:24 GMT-3