RIP Authentication

From: Jimmy Doukas (jdoukas@octa4.net.au)
Date: Mon Apr 21 2003 - 08:17:40 GMT-3


Hi All,

I have a simple question (hopefully) re. RIP authentication.

I have two routers directly connected via serial interfaces

R2 S1 <----------> S0 R1 Encap is HDLC (very simple config)

I'm trying to configure simple RIP authentication between the two - no
luck.
Here are the relevant configs from both

~~~~~~~~
R2
~~~~~~~~
!
key chain RIP_Auth
 key 1
  key-string cisco
  accept-lifetime 13:27:00 Apr 1 2003 infinite
  send-lifetime 13:27:00 Apr 1 2003 infinite
 key 2
  key-string cisco
key chain keychain
 key 2
  key-string cisco
!
interface Serial1
 ip address 10.21.1.1 255.255.0.0
 ip rip send version 2
 ip rip receive version 2
 ip rip authentication mode md5
 ip rip authentication key-chain keychain
 clockrate 125000
!

~~~~~~~~~~
R1
~~~~~~~~~~
!
key chain RIP_Auth
 key 1
  key-string cisco
  accept-lifetime 13:27:00 Apr 1 2003 infinite
  send-lifetime 13:27:00 Apr 1 2003 infinite
 key 2
  key-string cisco
key chain keychain
 key 2
  key-string cisco
!
!
interface Serial0
 ip address 10.21.1.2 255.255.0.0
 ip directed-broadcast
 ip rip send version 2
 ip rip receive version 2
 ip rip authentication mode md5
 ip rip authentication key-chain keychain
 logging event subif-link-status
 fair-queue

a debug of ip rip shows:
00:29:43: RIP: ignored v2 packet from 10.21.1.1 (invalid authentication)

I've tried clear authentication and still nothing.

If anyone can enlighten me that would be great.

Thanks in advance,
Jim

Ps. Clock are synchronised.



This archive was generated by hypermail 2.1.4 : Thu May 01 2003 - 13:35:59 GMT-3