From: Justin Menga (Justin.Menga@nz.logical.com)
Date: Fri Dec 27 2002 - 06:16:03 GMT-3
Hmmm,
Strange, I tested this in the lab and found it to be this way. Maybe older
versions of IOS...
Regards,
Justin #6640 (R&S, Security)
-----Original Message-----
From: Geoff Zinderdine [mailto:geoffz@mts.net]
Sent: Friday, December 27, 2002 11:36 AM
To: Justin Menga
Cc: Groupstudy
Subject: Re: Help me pls with OSPF authentication.
----- Original Message -----
From: "Justin Menga" <Justin.Menga@nz.logical.com>
To: "Jude Servi" <jservi@cisco.com>; "'Robert Slaski'" <robin@atm.com.pl>;
"'Manish Gupta'" <manishgu@cisco.com>
Cc: "'Lysyuk Andrew'" <lysyuk@ics.ua>; <ccielab@groupstudy.com>
Sent: Thursday, December 26, 2002 12:11 AM
Subject: RE: Help me pls with OSPF authentication.
> Also, if you enable authentication for a virtual link, you must also
ensure
> area 0 has authentication enabled:
>
> router ospf 1
> area 0 authentication
> area 1 virtual-link .....
There are two ways to specify OSPF authentication: per area and per
interface. If you specify mode and key on the virtual link you do not have
to include area 0 auth any more than if you used per interface
authentication on any other link. The only requirement for per interface
authentication is that all directly connected neighbors reachable via that
interface must possess the same mode and same key. It needn't apply to the
whole area.
Regards,
Geoff Zinderdine
CCIE #10410
.
This archive was generated by hypermail 2.1.4 : Fri Jan 17 2003 - 17:21:53 GMT-3