From: Joe Martin (jmartin@capitalpremium.net)
Date: Thu May 22 2003 - 14:06:18 GMT-3
The virtual link is just that, a virtual interface to area 0. Even though
R2 does not have any physical interfaces in area 0, it does have a "virtual"
interface in area 0. Because of this the virtual link must use the same
authentication-type as area 0, but not necessarily the same
authentication-key. Also, R2 must specify that area 0 is using
authentication, thus the need for the area 0 authentication command on R2.
So to sum it up:
-Virtual link must use same auth type as area 0
-If area 0 is using auth, then all virtual link routers must be configured
with "area 0 authentication [message-digest]"
-Virtual link does not care about authentication of other areas/interfaces.
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
Re-act
Sent: May 22, 2003 3:38 AM
To: ccielab@groupstudy.com
Subject: OSPF Virtual-LInk Authentication
Hi,everyone
I have a question about OSPF authentication--
AREA 0----R1--AREA 1---R2---AREA 2---R3
poppose the area 0 use clear text authentication, area 1 use MD5.the
following is R1&R2's configuration:
R1:
router-id 202.97.1.1
area 0 authentication
area 1 authentication message-digest
area 1 virtual-link 202.97.2.2 authentication message-digest
area 1 virtual-link 202.97.2.2 message-digest-key 1 md5 cisco
...
R2:
router-id 202.97.2.2
area 1 authentication message-digest
area 1 virtual-link 202.97.1.1 authentication message-digest
area 1 virtual-link 202.97.1.1 message-digest-key 1 md5 cisco
...
when I finished,I found that on R2:
show ip ospf
Area BACKBONE(0)
Number of interfaces in this area is 1
Area has no authentication
my question is: AREA 0 has clear text authe in fact,but on R2 no authe,is
this right? and following i added "area 0 authentication" on R2,then showed
Area BACKBONE(0) has simple password authentication.
I pluzzed...
This archive was generated by hypermail 2.1.4 : Mon Jun 02 2003 - 15:13:46 GMT-3