From: David Luu (wicked01@xxxxxxxxxxxxx)
Date: Thu May 16 2002 - 01:03:18 GMT-3
i went through cisco's site and found the answer and i stand corrected...
"Message Digest 5 (MD5) authentication provides higher security than plain
text authentication. Like plain text authentication, passwords don't have
to be the same throughout an area, but they do need to be same between
neighbors."
At 04:18 AM 5/15/2002 -0400, David Lee Steele, Jr. wrote:
>I don't believe that just because they are all in the same area they all
>need to be configured. Starting in Cisco IOSR 12.0.8, authentication is
>supported on a per-interface basis, as mentioned in RFC 2328, Appendix
>D. This feature was added in bug CSCdk33792.
>
>I do think, however, that I might no be able to configure different
>authentication types between R1 and R2 versus R1 and R3. I am thinking
>that whatever authentication type I choose for R1 I will HAVE to choose
>the same type for R2 and R3.
>
>David
>
>-----Original Message-----
>From: David Luu [mailto:wicked01@ix.netcom.com]
>Sent: Wednesday, May 15, 2002 4:08 AM
>To: David Lee Steele, Jr.; ccielab@groupstudy.com
>Subject: RE: ospf authentication (point-to-multipoint over frame relay)
>
>i would still think that it needs to be configured on all of them since
>they all belong to the same area, or else you will get authentication
>and
>adjacency errors and missing routes
>
>At 03:53 AM 5/15/2002 -0400, David Lee Steele, Jr. wrote:
> >For additional clarification...
> >
> >R1 is not configured with two separate sub interfaces - one to each
> >remote router.
> >
> >-----Original Message-----
> >From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
> >David Lee Steele, Jr.
> >Sent: Wednesday, May 15, 2002 3:09 AM
> >To: ccielab@groupstudy.com
> >Subject: ospf authentication (point-to-multipoint over frame relay)
> >
> >R1, R2, and R3 are all members of the same network in the same OSPF
>area
> >(area 0).
> >
> >Given a Router(R1) with one interface to a Frame-Relay cloud connecting
> >to two other Routers(R2 and R3), is there a way to turn on ospf
> >authentication between R1 and R2, but not between R1 and R3?
> >
> >
> >
> >It seems that it can't be done since the interface on R1 is shared with
> >both R2 and R3? Is that correct?
> >
> >
> >
> >David
> >
> >[GroupStudy.com removed an attachment of type
> >application/x-pkcs7-signature which had a name of smime.p7s]
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:58:58 GMT-3