From: Harris, Joe F (Joe_Harris@xxxxxxxxxxxx)
Date: Thu Feb 07 2002 - 01:53:32 GMT-3
Dude,
use debug eigrp packet and show ip route commands. If authentication is
actually taking place correctly you should see something similiar to this:
Shiner-Bock#debug eigrp packet
EIGRP Packets debugging is on
(UPDATE, REQUEST, QUERY, REPLY, HELLO, IPXSAP, PROBE, ACK)
Shiner-Bock#
EIGRP: received packet with MD5 authentication
EIGRP: received packet with MD5 authentication
However if authentication is not taking place correctly you will see this:
Shiner-Bock#debug eigrp packet
EIGRP Packets debugging is on
(UPDATE, REQUEST, QUERY, REPLY, HELLO, IPXSAP, PROBE, ACK)
Shiner-Bock#
EIGRP: received packet with MD5 authentication
EIGRP: ignored packet from 10.191.30.2 opcode = 5 (invalid authentication)
Of course the ole, show ip route will always work as well. Also show ip
eigrp neighbor.
Can you post both config's?
-Joe
-----Original Message-----
From: Giveortake@aol.com
To: Giveortake@aol.com; ccielab@groupstudy.com
Sent: 2/6/02 9:54 PM
Subject: Re: MD5 and EIGRP
FYI: R8 is directly connected to R7 via S0.
In a message dated 2/6/2002 10:46:13 PM Eastern Standard Time,
Giveortake@aol.com writes:
>
> Having trouble with "strongest authentication possible" between R7 &
R8.
> Basically I configure authentication on R7, but R8 keeps getting the
> updates. I clear tables, shut interfaces, clear neighbors, reload
> routers.
> Still routes get through to R8.
>
> R7 configured as follows
>
> int s0
> ip address 150.50.5.64 255.255.255.224
> ip authentication mode eigrp 1 md5
> ip authentication key-chain eigrp 1 cisco
>
> router eigrp
> network 150.50.0.0
> no auto-summary
>
> key chain cisco
> key 1
> key-string ipexpert
>
> I configure no authentication stuff on R8 only basic eigrp commands.
Any
> suggested debugs for me to verfiy authentication process? Any
thoughts why
> these are getting through? Am I facing a bug in IOS 12.0(18)??
>
> Thanks,
>
> David
This archive was generated by hypermail 2.1.4 : Thu Jun 20 2002 - 13:46:14 GMT-3