From: Gyo (Gabor.Gyori@xxxxxx)
Date: Fri Jul 05 2002 - 16:04:20 GMT-3
Make sure to add the
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 xxx
on all of the three participating interfaces (an hub and all the spokes).
It works for me like this, even if I do not put authentication on the whole
area0 in ospf router
configuration.
Gabor
> -----Original Message-----
> From: kym blair [mailto:kymblair@hotmail.com]
> Sent: Friday, July 05, 2002 12:04 AM
> To: ccielab@groupstudy.com
> Cc: tlarus@cox.net; nshah@connect.com.au
> Subject: OSPF md5 authentication
>
>
> This has been discussed several times, but I haven't see a
> working solution
> and hope someone has it:
>
> --MD5 authentication in area 0 over Frame Relay
>
> --hub router (multipoint subinterface; okay to change the
> ospf network type)
>
> -- two spoke routers (physical serial interface; cannot
> change the interface
> type from non-broadcast [this means that the three routers
> must elect DR;
> you may set the priority to 0 on the spoke routers]).
>
> Adjacencies without authentication, but when a
> message-digest-key is added
> to the three, the hub router forms an adjacency with only one
> of the spokes.
> Generates a mismatch key error with the second spoke router.
>
> If you know the trick to get the hub to form adjacencies with
> both spokes,
> I'd sure appreciate hearing it.
>
>
> Thanks,
>
> Kym
>
>
>
>
This archive was generated by hypermail 2.1.4 : Sat Sep 07 2002 - 19:36:19 GMT-3