From: yakout esmat (yesmat@xxxxxxxxxxxxxx)
Date: Fri Apr 19 2002 - 05:44:58 GMT-3
Eric,
1) If you are authenticating on area 0 only, then you only need to use
interface authentication on interfaces that are configured for area 0,
including virtual links.
2) if you are authenticating other areas, then you will need to use
interface authentiation on those interfaces that are configured for these
areas.
HTH
Ya
-----Original Message-----
From: Eric Lemmons [mailto:ericlemmons@yahoo.com]
Sent: Friday, April 19, 2002 4:03 AM
To: kym blair; yesmat@iprimus.com.au; tsabry@houston.sns.slb.com;
ccielab@groupstudy.com
Subject: RE: Virtual Links
Do you also need to add the authentication statements to every
interface in the area that is virtual linked to area 0?
If I'm virtual linking from area 4, across area 2, for instance, do
the ospf interfaces in area 4 all have to have the authentication
statements. Also, do you need an "area 4 authentication ... "
statement under the ospf process in addition to the one on the area x
virtual link" command?
Eric
--- kym blair <kymblair@hotmail.com> wrote:
> Thanks Ya. After watching Tarek struggle with it for a few hours I
> got
> interested (thinking it would only distract me for maybe an hour)
> and
> basically spent the rest of the day on it. So I've found all the
> tricks and
> really hope I see it in the lab too!
>
> Kym
>
>
> >From: "yakout esmat" <yesmat@iprimus.com.au>
> >Reply-To: "yakout esmat" <yesmat@iprimus.com.au>
> >To: "kym blair" <kymblair@hotmail.com>,
> <tsabry@houston.sns.slb.com>,
> > <ccielab@groupstudy.com>
> >Subject: RE: Virtual Links
> >Date: Thu, 18 Apr 2002 21:56:36 +1000
> >
> >Kym,
> >
> >When you have Area 0 Authent, you also HAVE to add at the end of
> ALL your
> >"Area x virtual a.b.c.d..." command the authentication Key and
> password
> >like
> >so:
> >
> >"area 2 virtual-link 192.168.1.1 message-digest key md5 cisco",
> and that
> >applies to all area x virtual commands in your network.
> >
> >In your example below, you will not need the Interface serial 0
> >authentication because in router B you have no area 0.
> >
> >I can say I am pretty sure about this one, I spent lots of time
> practicing
> >it.
> >
> >HTH
> >Ya
> >
> >-----Original Message-----
> >From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On
> Behalf Of
> >kym blair
> >Sent: Thursday, April 18, 2002 8:28 AM
> >To: tsabry@houston.sns.slb.com; ccielab@groupstudy.com
> >Subject: Re: Virtual Links
> >
> >
> >Tarek,
> >
> >I could only guess on the answer to your first question, so I'll
> let
> >someone
> >else answer. On your second question, "If area 0 is
> authenticated, do I
> >have to put authentication on the virtual link?", the answer is
> yes. For
> >example:
> >
> >Router A (has area 0 and area 2)
> >
> >Router B (has area 2 and area 3):
> > router ospf 64
> > network 192.168.1.2 0.0.0.0 area 2
> > network 172.48.3.2 0.0.0.0 area 3
> > area 2 virtual-link 192.168.1.1
> > area 0 authentication message-digest
> >interface serial 0
> > ip ospf message-digest-key 1 md5 KEY1
> >
> >
> >HTH, Kym
> >
> >
> >
> >
> > >From: Tarek Sabry <tsabry@houston.sns.slb.com>
> > >Reply-To: Tarek Sabry <tsabry@houston.sns.slb.com>
> > >To: ccielab@groupstudy.com
> > >Subject: Virtual Links
> > >Date: Wed, 17 Apr 2002 16:58:53 -0500
> > >
> > >Hi
> > >
> > >This is a quick one. When I have 2 spokes that can act as ABRs
> between
> >area
> > >1 and area 2 let's say, do I need 2 virtual links to area 0? Or
> should I
> > >only have one virtual link that I choose?
> > >
> > >Another question, if area 0 is authenticated then do I have to
> enable
> > >authentication on the virtual link? I thought I should, but the
> only way
> > >I'm
> > >able to bring one of the virtual links up is to remove the md5
> > >authentication!! Is there a problem because I'm using 2 parallel
> VLinks
> >or
> > >this is the way it is supposed to work?
> > >
> > >Thanks
> > >Tarek
> >
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:58:13 GMT-3