From: Janto Cin (jantocin@datacomm.co.id)
Date: Sun Dec 15 2002 - 23:51:30 GMT-3
Yeah youre absolutely right.
I had advice from my friend to remove the entire authentication first to
see if it was authentication problem.
After I removed the entire authentication, it works.
Then I add authentication for backbone area first then for virtual link
but without area 0 authentication in R1 as you suggest, and it works
perfectly.
Here the configuration:
R1#sh run | begin router ospf
router ospf 1
area 12 virtual-link 192.168.2.2 authentication message-digest
area 12 virtual-link 192.168.2.2 message-digest-key 1 md5 cisco
redistribute connected subnets route-map fa1
network 172.29.12.0 0.0.0.63 area 12
network 192.168.1.1 0.0.0.0 area 1
R2#sh run | begin router ospf
router ospf 1
area 0 authentication message-digest
area 0 range 172.29.100.0 255.255.255.0
area 12 virtual-link 192.168.1.1 message-digest-key 1 md5 cisco
network 172.29.12.0 0.0.0.63 area 12
network 172.29.100.0 0.0.0.7 area 0
network 192.168.2.0 0.0.0.255 area 2
R2#sh ip route | include 192.168.1.1
O IA 192.168.1.1 [110/11] via 172.29.12.1, 00:03:24, Ethernet0/0
R2#sh ip route | include 172.29.100.0
O 172.29.100.0/24 is a summary, 00:08:56, Null0
C 172.29.100.0/29 is directly connected, Serial0/0.100
Thank you for your help.
Janto
-----Original Message-----
From: ccie [mailto:ccieingroup@hotmail.com]
Sent: Saturday, December 14, 2002 4:40 AM
To: Janto Cin; ccielab@groupstudy.com
Subject: Re: OSPF virtual link
Your Virtual link is not working. Cuz on R1, you also need the command '
area 12 virtual-link 192.168.2.2 authentication message-digest' as on
the R2.
area 0 authentication message-digest only work for the whole area 0 but
which is still different from the virtual link authentication. You can
check whether I am right by "show ip ospf virtual-link" for if the
virtual link status is full.
Why I said so is also cuz: from the
R1#sh ip ro | inc 172.29.100.0
O IA 172.29.100.0/24 [110/65] via 172.29.12.2, 00:09:13,
If the Virtual link is working, the status of this route should be O but
not O IA cuz the R1 were to be pulled into area 0.
Richard Hanks.
----- Original Message -----
From: Janto Cin <mailto:jantocin@datacomm.co.id>
To: ccielab@groupstudy.com
Sent: Friday, December 13, 2002 6:19 AM
Subject: OSPF virtual link
Dear All,
I had configured OSPF virtual link as below:
(f1/0) ---R1(f0/0)-------(e0/0)R2 ---- (s0/0)
(lo0) ----| | ---- (lo0)
R1 lo0: 192.168.1.1/32
R1 f1/0: 172.29.10.1/26
R1 f0/0: 172.29.12.1/26
R2 lo0: 192.168.2.2/32
R2 e0/0: 172.29.12.2/26
R2 s0/0: 172.29.100.2/29
Between R1-R2 running OSPF Area 12, Area 2 on R2 lo0, Area 1 on R1 lo0.
Redistribute R1 f1/0 to OSPF.
R1#sh run | begin router ospf
router ospf 1
log-adjacency-changes
area 0 authentication message-digest
area 12 virtual-link 192.168.2.2 message-digest-key 1 md5 cisco
redistribute connected subnets route-map fa1
network 172.29.12.0 0.0.0.63 area 12
network 192.168.1.1 0.0.0.0 area 1
router ospf 1
log-adjacency-changes
area 0 authentication message-digest
area 12 virtual-link 192.168.1.1 authentication message-digest
area 12 virtual-link 192.168.1.1 message-digest-key 1 md5 cisco
network 172.29.12.0 0.0.0.63 area 12
network 172.29.100.0 0.0.0.7 area 0
network 192.168.2.0 0.0.0.255 area 2
distance ospf inter-area 112 external 114
R1#sh ip ro | inc 172.29.100.0
O IA 172.29.100.0/24 [110/65] via 172.29.12.2, 00:09:13,
FastEthernet0/0
R1#sh ip ro | inc 192.168.2.2
O IA 192.168.2.2 [110/2] via 172.29.12.2, 00:09:23, FastEthernet0/0
R1#
R2# sh ip ro | inc 172.29.10.0
O E2 172.29.10.0/24 [114/20] via 172.29.12.1, 00:08:44, Ethernet0/0
R2#sh ip ro 192.168.1.1
% Network not in table
Why I can't see 192.168.1.1 in R2 routing table?
The virtual link already up.
TIA.
Janto
.
.
This archive was generated by hypermail 2.1.4 : Fri Jan 17 2003 - 17:21:46 GMT-3