Re: OSPF Authentication ?

From: Annu (annu_roopa@xxxxxxxxx)
Date: Sat Dec 15 2001 - 18:12:21 GMT-3


   
Group,

Thanks to all those who replied.I added the "Area 0
authetication message-digest" on R12 as u people said
and it works though i had to reboot in the process.

The Virtual Link authentication was not working.Will
also look into the 11.X and 12.X compatibility
problems.

Thanks once again to all.
Annu

--- Mannan Venkatesan <mv70@lucent.com> wrote:
> I would try,
>
> 'area 1 virtual-link 3.3.3.3 message-digest-key 1
> md5' on r9 and
> 'area 0 auth mess' on r12.
>
> Mannan
>
>
>
> ----- Original Message -----
> From: "Annu" <annu_roopa@yahoo.com>
> To: <ccielab@groupstudy.com>
> Sent: Friday, December 14, 2001 12:14 AM
> Subject: OSPF Authentication ?
>
>
> > Gurus,
> >
> > I have the following setup with which I am trying
> to
> > do OSPF MD5 authentication.
> >
> > R9
> > | eo=.1
> > |
> > |--------------------------| (192.1.1.0/24)
> > |e0=.2 |.3
> > R11 R12
> > |
> > |
> > R1
> >
> > R9/R11/R12 are in area 1
> > R1 is in Area 100 with Virtual link to R9.
> >
> > The problem is that OSPF authentication between R9
> and
> > R12 is not working.Its working between R9 and R11
> on
> > same Ethernet network. It gives "invalid
> > authentication type" error on R9. The configs and
> > version information is as follows.
> >
> > R12 (11.2(17)
> > ----
> > interface Ethernet0
> > ip address 192.1.1.1 255.255.255.0
> > no ip directed-broadcast
> > no ip route-cache
> > ip ospf message-digest-key 1 md5 roopa
> > no ip mroute-cache
> >
> > router ospf 100
> > network 10.0.0.0 0.255.255.255 area 0
> > network 192.1.1.0 0.0.0.255 area 1
> > area 0 authentication message-digest
> > area 1 authentication message-digest
> > area 1 virtual-link 3.3.3.3
> >
> > R9#debug ip ospf events
> > OSPF events debugging is on
> > termsrver#
> > 01:13:42: OSPF: Send with youngest Key 0
> > 01:13:43: OSPF: Send with youngest Key 1
> > 01:13:43: OSPF: Send with youngest Key 1
> > 01:13:50: OSPF: Rcv pkt from 192.1.1.3, Ethernet0
> :
> > Mismatch Authentication type. Input packet
> specified
> > type 0, we use type 2
> > 01:13:52: OSPF: Send with youngest Key 0
> > 01:13:53: OSPF: Send with youngest Key 1
> > 01:13:53: OSPF: Send with youngest Key 1
> > 01:14:00: OSPF: Rcv pkt from 192.1.1.3, Ethernet0
> :
> > Mismatch Authentication type. Input packet
> specified
> > type 0, we use type 2
> >
> >
> > ---------------------
> >
> > On R12 (Version 12.0(5)
> >
> > interface Ethernet0
> > ip address 192.1.1.3 255.255.255.0
> > no ip directed-broadcast
> > no ip route-cache
> > ip ospf message-digest-key 1 md5 roopa
> > ip ospf priority 100
> > no ip mroute-cache
> >
> > router ospf 100
> > network 3.3.3.3 0.0.0.0 area 1
> > network 172.16.0.0 0.0.255.255 area 100
> > network 192.1.1.0 0.0.0.255 area 1
> > area 1 authentication message-digest
> > area 1 virtual-link 1.1.1.1 message-digest-key 1
> md5
> > roopa
> >
> > ------------------------
> > AM I missing something or doing something wrong ??
> i
> > think it could be a bug.The "debug ip ospf packet"
> > shows correct Auth type.
> >
> > Let me know.Thanks for ur time to got thru this.
> >
> > Annu
> >
> >
> >



This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:32:43 GMT-3