From: Justin Menga (Justin.Menga@nz.logical.com)
Date: Thu Dec 26 2002 - 03:11:21 GMT-3
Also, if you enable authentication for a virtual link, you must also ensure
area 0 has authentication enabled:
router ospf 1
area 0 authentication
area 1 virtual-link .....
Regards,
Justin
-----Original Message-----
From: Jude Servi [mailto:jservi@cisco.com]
Sent: Wednesday, December 25, 2002 12:36 PM
To: 'Robert Slaski'; 'Manish Gupta'
Cc: 'Lysyuk Andrew'; ccielab@groupstudy.com
Subject: RE: Help me pls with OSPF authentication.
Don't forget to add authentication to a virtual link if needed. Example for
md5 auth:
router ospf 1
area # virtual-link <neighbor ip addr> authentication message-digest
message-digest-key # <key>
Jude
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Robert Slaski
Sent: Saturday, December 21, 2002 11:16 AM
To: Manish Gupta
Cc: Lysyuk Andrew; ccielab@groupstudy.com
Subject: Re: Help me pls with OSPF authentication.
Manish Gupta wrote:
> I always prefer
>
> Under router ospf x
> area x authentication (plain or MD5)
>
> Under interface:
> ip opsf authetication <password> if plain
You meant 'ip ospf authentication-key' I think, but this does not answer
the Andrew's question.
There are two authentication types available in OSPF: per area and per
interface, if both are configured then per interface authentication
takes precedence. Both have plain-text and MD5 checksum variants.
Per area:
1. enable area authentication
(config-router)# area <area> authentication [message-digest]
2. setup keys (this should be done on each area interface)
(config-if)# ip ospf authentication-key <text> # for plain text
or
(config-if)# ip ospf message-digest-key <key_id> md5 0 <text> # for MD5
Per interface:
1. enable interface authentication
(config-if)# ip ospf authentication [message-digest | null]
2. setup keys (same as above)
mikrobi,
-- .
This archive was generated by hypermail 2.1.4 : Fri Jan 17 2003 - 17:21:52 GMT-3