From: Nick Shah (nshah@xxxxxxxxxxxxxx)
Date: Wed May 15 2002 - 05:59:56 GMT-3
Someone will correct me if I am wrong..
I understand that there is such a thing as per-interface authentication in
ospf, and it overrides the per area authentication. That means 2 interfaces
(on different routers) belonging to an area (which has authentication truned
on) can over ride authentication by specifying type (0, 2) which differs
from the type of authentication shared by different interface groups in the
same area.
However what you are trying to do is *per neighbor* authentication (since
all the 3 neighbors share the interface/network). I dont think you can do
this.
Nick
-----Original Message-----
From: David Luu <wicked01@ix.netcom.com>
To: David Lee Steele, Jr. <d.steele2@comcast.net>; ccielab@groupstudy.com
<ccielab@groupstudy.com>
Date: Wednesday, 15 May 2002 6:37
Subject: RE: ospf authentication (point-to-multipoint over frame relay)
>i would still think that it needs to be configured on all of them since
>they all belong to the same area, or else you will get authentication and
>adjacency errors and missing routes
>
>At 03:53 AM 5/15/2002 -0400, David Lee Steele, Jr. wrote:
>>For additional clarification...
>>
>>R1 is not configured with two separate sub interfaces - one to each
>>remote router.
>>
>>-----Original Message-----
>>From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
>>David Lee Steele, Jr.
>>Sent: Wednesday, May 15, 2002 3:09 AM
>>To: ccielab@groupstudy.com
>>Subject: ospf authentication (point-to-multipoint over frame relay)
>>
>>R1, R2, and R3 are all members of the same network in the same OSPF area
>>(area 0).
>>
>>Given a Router(R1) with one interface to a Frame-Relay cloud connecting
>>to two other Routers(R2 and R3), is there a way to turn on ospf
>>authentication between R1 and R2, but not between R1 and R3?
>>
>>
>>
>>It seems that it can't be done since the interface on R1 is shared with
>>both R2 and R3? Is that correct?
>>
>>
>>
>>David
>>
>>[GroupStudy.com removed an attachment of type
>>application/x-pkcs7-signature which had a name of smime.p7s]
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:58:57 GMT-3