RE: OSPF authentication question

From: Asbjorn Hojmark (Asbjorn@xxxxxxxxxxx)
Date: Fri Dec 07 2001 - 11:24:20 GMT-3


   
> inter f0/0
> ip add 1.1.1.1 255.255.255.0
> ip ospf mess 1 md5 cisco

That sets the MD5 key for the authentication. It doesn't actually
turn on authentication...

> but I also find the "ip ospf authentication mess" from the
> IOS command list.

That can be used to turn on authentication for the interface.

Back in the Old Days(TM), you could only turn on authentication
for an entire area, which of course is done in OSPF router config
mode (with 'area x authen').

If you turn on authentication for the complete area, you don't
need 'ip ospf authen' on the interfaces in that particular area.

> who can tell me whether I need add the "ip ospf authentication
> mess" to my config?

You only need to do that if you want to use a different type of
authentication (plain, md5, null) for an interface than what you
use for the rest of the area.

HTH,
-A

--
Heroes: Vint Cerf & Bob Kahn, Leonard Kleinrock, Robert Metcalfe
Links : http://www.hojmark.org/networking/


This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:32:40 GMT-3