Per-interface authentication OSPF

From: Robert Massiache (robert2140@hotmail.com)
Date: Tue Feb 18 2003 - 03:43:43 GMT-3


Hi

I have a question on ospf.

Its on OSPF per-interface authentication.

In a hub and spoke frame relay environment, I want do best possible
authentication betweek hub and only one spoke.

Where as with other spoke I don't need authentication. The configuration
below is not satisfying the requirement. Any clue?
I choosed Type-1 simple password. Even with message digets also i cann't
make it work.

Regards

My config with hub is (R2)

interface Serial0.256 multipoint
ip address 150.50.111.2 255.255.255.0
ip ospf authentication
ip ospf authentication-key cisco
ip ospf priority 250
frame-relay map ip 150.50.111.5 205 broadcast
frame-relay map ip 150.50.111.6 206 broadcast
no frame-relay inverse-arp

router ospf 1
router-id 150.50.2.2
log-adjacency-changes
area 1 virtual-link 150.50.1.1
network 150.50.2.2 0.0.0.0 area 100
network 150.50.12.0 0.0.0.3 area 1
network 150.50.111.0 0.0.0.255 area 0
neighbor 150.50.111.6
neighbor 150.50.111.5

first spoke with Authentication R5

interface Serial0
ip address 150.50.111.5 255.255.255.0
encapsulation frame-relay
ip ospf authentication
ip ospf authentication-key 7 13061E010803
frame-relay map ip 150.50.111.2 502 broadcast
frame-relay map ip 150.50.111.6 502 broadcast
frame-relay lmi-type cisco

router ospf 1
router-id 150.50.5.5
log-adjacency-changes
network 150.50.5.5 0.0.0.0 area 100
network 150.50.111.0 0.0.0.255 area 0
neighbor 150.50.111.2 priority 250

Second spoke without Auth R6

interface Serial0
ip address 150.50.111.6 255.255.255.0
encapsulation frame-relay
ip ospf authentication null
ip ospf priority 0
no fair-queue
frame-relay map ip 150.50.111.2 602 broadcast
frame-relay map ip 150.50.111.5 602 broadcast
no frame-relay inverse-arp
!

router ospf 1
router-id 150.50.6.6
log-adjacency-changes
network 150.50.6.6 0.0.0.0 area 100
network 150.50.111.0 0.0.0.255 area 0



This archive was generated by hypermail 2.1.4 : Sat Mar 01 2003 - 11:06:26 GMT-3