From: alain faure (alainfaure@xxxxxxxx)
Date: Thu Mar 07 2002 - 11:13:25 GMT-3
Hi,
1- area 0 (area 1 virtual-link 3.3.3.3 message-digest-key 1 md5 cisco is just
securing the virtual link as it is an extension of area 0 just normal)
2- because e 2/0/0 is part of area 0 (look network 4.0.
0.0 0.255.255.255 area 0)
3- because you secure area 0 not area 1
I think the authentication of virtual-link (because of area 0 authentication)
is some thingh not trivial at first sight, but with time is not so difficult:
secure the virtual link on both side of the link (on the two router) just as
you do for area 0.
But maybye now that we can authenticate by network in a area you can change
this , somebody know that ?
Best regards
--- Jeongwoo Park <jpark@wams.com> a icrit : > hi all
> I found this link http://www.cisco.com/warp/public/104/27.html on Cisco
> website.
> It is MD5 authentication over virtual link
> According to the diagram, there area 3 areas--area0,1,and 2
> Now,
> Question 1 is what area it is securing based on that config? Is it area 0 or
> 1?
>
> Question 2 is what "ip ospf message-digest-key 1 md5 cisco" is doing under
> interface e2/0/0 on router1.1.1.1?
> Question 3 is why there is no "ip ospf message-digest-key 1 md5 cisco" under
> interface ATM2/0.20 on router3.3.3.3?
> Thanks in adv.
>
> JP
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:56:56 GMT-3