From: Brian Dennis (brian@labforge.com)
Date: Thu Jun 26 2003 - 05:39:41 GMT-3
You need to enable plain text (type 1) authentication for area 0 on R5
using the "area 0 authentication" router configuration command. Remember
that a virtual link is an interface in area 0. You have the plain text
key bound to the virtual link on R5 but you haven't plain text
authentication enabled.
R5
router ospf 10
area 0 authentication
You could enable plain text authentication for the virtual link itself
as opposed to using the "area 0 authentication" command.
R5
router ospf 10
area 1 virtual-link 3.3.3.3 authentication authentication-key cisco
area 1 virtual-link 2.2.2.2 authentication authentication-key cisco
Lastly you could override the "area 0 authentication" command on R2 and
R3 by specifying null authentication for the virtual link.
R2 and R3
router ospf 10
area 1 virtual-link 5.5.5.5 authentication null
Brian Dennis, CCIE #2210 (R&S/ISP-Dial/Security)
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Ray Stevens
Sent: Wednesday, June 25, 2003 8:21 PM
To: ccielab@groupstudy.com
Subject: OSPF not inserting route into route table.
Here is the problem i have, once i enable area 0 authentication i seem
to
loose connectivity with Area20 (lo1, s0) on R5 from the rest of the
network.
below is all the outputs and configs i ould think usefull. everything
appears up and I see the networks in the database but it is not being
seen
in the route table. I have reloaded several times the routers each
seperatly
and together. However this link is not being seen. Any suggestions.
Also as a side issue why would a network be in the database table but
not in
the route table. I have not been able to find a link that indicates
what
checks OSPF does prior to inserting routers into the route table
(similar to
how eigrp and BGP will do prechecks)
Thanks in advance.
*************** INFO ********************
R5#siib
Interface IP-Address OK? Method Status
Protocol
Ethernet0 150.50.7.5 YES NVRAM up
up
Loopback0 200.0.0.5 YES NVRAM up
up
Loopback1 205.205.205.5 YES NVRAM up
up <==== Area 20, not being sent
Serial0 150.200.1.5 YES NVRAM up
up <==== Area 20, not being sent
Serial1 unassigned YES NVRAM administratively
down
down
R5#
R5#o int s0
Serial0 is up, line protocol is up
Internet Address 150.200.1.5/24, Area 20
Process ID 10, Router ID 5.5.5.5, Network Type NON_BROADCAST, Cost: 64
Transmit Delay is 1 sec, State DR, Priority 1
Designated Router (ID) 5.5.5.5, Interface address 150.200.1.5
Backup Designated router (ID) 20.20.20.20, Interface address
150.200.1.254
Timer intervals configured, Hello 30, Dead 120, Wait 120, Retransmit 5
Hello due in 00:00:01
Index 1/4, flood queue length 0
Next 0x0(0)/0x0(0)
Last flood scan length is 7, maximum is 7
Last flood scan time is 4 msec, maximum is 4 msec
Neighbor Count is 1, Adjacent neighbor count is 1
Adjacent with neighbor 20.20.20.20 (Backup Designated Router)
Suppress hello for 0 neighbor(s)
R5#
R5#o int lo1
Loopback1 is up, line protocol is up
Internet Address 205.205.205.5/24, Area 20
Process ID 10, Router ID 5.5.5.5, Network Type POINT_TO_POINT, Cost: 1
Transmit Delay is 1 sec, State POINT_TO_POINT,
Timer intervals configured, Hello 15, Dead 90, Wait 90, Retransmit 5
Index 2/6, flood queue length 0
Next 0x0(0)/0x0(0)
Last flood scan length is 0, maximum is 0
Last flood scan time is 0 msec, maximum is 0 msec
Neighbor Count is 0, Adjacent neighbor count is 0
Suppress hello for 0 neighbor(s)
R5#
R5#o int e0
Ethernet0 is up, line protocol is up
Internet Address 150.50.7.5/25, Area 1
Process ID 10, Router ID 5.5.5.5, Network Type BROADCAST, Cost: 10
Transmit Delay is 1 sec, State DROTHER, Priority 0
Designated Router (ID) 2.2.2.2, Interface address 150.50.7.2
Backup Designated router (ID) 3.3.3.3, Interface address 150.50.7.3
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
Hello due in 00:00:00
Index 1/3, flood queue length 0
Next 0x0(0)/0x0(0)
Last flood scan length is 0, maximum is 3
Last flood scan time is 0 msec, maximum is 4 msec
Neighbor Count is 2, Adjacent neighbor count is 2
Adjacent with neighbor 3.3.3.3 (Backup Designated Router)
Adjacent with neighbor 2.2.2.2 (Designated Router)
Suppress hello for 0 neighbor(s)
R5#o virt
Virtual Link OSPF_VL1 to router 3.3.3.3 is up
Run as demand circuit
DoNotAge LSA allowed.
Transit area 1, via interface Ethernet0, Cost of using 10
Transmit Delay is 1 sec, State POINT_TO_POINT,
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
Hello due in 00:00:06
Virtual Link OSPF_VL0 to router 2.2.2.2 is up
Run as demand circuit
DoNotAge LSA allowed.
Transit area 1, via interface Ethernet0, Cost of using 10
Transmit Delay is 1 sec, State POINT_TO_POINT,
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
Hello due in 00:00:06
R5#sh run int lo1
!
interface Loopback1
ip address 205.205.205.5 255.255.255.0
ip ospf authentication-key cisco
ip ospf network point-to-point
ip ospf hello-interval 15
ip ospf dead-interval 90
end
R5#sh run int s0
!
interface Serial0
ip address 150.200.1.5 255.255.255.0
encapsulation frame-relay
frame-relay map ip 150.200.1.254 506 broadcast
no frame-relay inverse-arp
frame-relay lmi-type ansi
end
R5#sh run int e0
interface Ethernet0
ip address 150.50.7.5 255.255.255.128
ip ospf priority 0
end
!
router ospf 10
router-id 5.5.5.5
log-adjacency-changes
area 1 virtual-link 3.3.3.3 authentication-key cisco
area 1 virtual-link 2.2.2.2 authentication-key cisco
network 150.50.7.0 0.0.0.63 area 1
network 150.200.1.0 0.0.0.255 area 20
network 200.0.0.5 0.0.0.0 area 1
network 205.205.205.0 0.0.0.255 area 20
R5#o n
Neighbor ID Pri State Dead Time Address
Interface
3.3.3.3 2 FULL/BDR 00:00:33 150.50.7.3
Ethernet0
2.2.2.2 1 FULL/DR 00:00:37 150.50.7.2
Ethernet0
20.20.20.20 1 FULL/BDR 00:01:37 150.200.1.254
Serial0
R5#
R5#o dat
Link ID ADV Router Age Seq# Checksum
150.200.1.0 5.5.5.5 292 0x8000000A 0x4936
205.205.205.0 5.5.5.5 292 0x80000008 0xFDB9
Summary Net Link States (Area 1)
Link ID ADV Router Age Seq# Checksum
150.200.1.0 5.5.5.5 296 0x8000000A 0x4936
205.205.205.0 5.5.5.5 296 0x80000008 0xFDB9
Net Link States (Area 20)
Link ID ADV Router Age Seq# Checksum
150.200.1.5 5.5.5.5 296 0x80000008 0x4510
R5#ping 150.50.100.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 150.50.100.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/5/8 ms
R3#o n
Neighbor ID Pri State Dead Time Address
Interface
5.5.5.5 0 FULL/DROTHER 00:00:36 150.50.7.5
Ethernet0
2.2.2.2 1 FULL/DR 00:00:39 150.50.7.2
Ethernet0
4.4.4.4 1 FULL/ - 00:01:39 150.50.100.4
Serial0
R3#o n
Neighbor ID Pri State Dead Time Address
Interface
5.5.5.5 0 FULL/DROTHER 00:00:36 150.50.7.5
Ethernet0
2.2.2.2 1 FULL/DR 00:00:39 150.50.7.2
Ethernet0
4.4.4.4 1 FULL/ - 00:01:39 150.50.100.4
Serial0
R3#o dat
Summary Net Link States (Area 1)
Link ID ADV Router Age Seq# Checksum
150.200.1.0 5.5.5.5 66 0x8000000A 0x4936
205.205.205.0 5.5.5.5 66 0x80000008 0xFDB9
R3#siib
Interface IP-Address OK? Method Status
Protocol
Ethernet0 150.50.7.3 YES NVRAM up
up
Loopback0 200.0.0.3 YES NVRAM up
up
Serial0 150.50.100.3 YES NVRAM up
up
R3#sir
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS
inter
area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route
Gateway of last resort is not set
O E2 200.165.4.0/24 [110/20] via 150.50.7.2, 03:10:11, Ethernet0
O E2 200.165.5.0/24 [110/20] via 150.50.7.2, 03:10:11, Ethernet0
O E2 200.165.6.0/24 [110/20] via 150.50.7.2, 03:10:11, Ethernet0
O E2 200.165.7.0/24 [110/20] via 150.50.7.2, 03:10:11, Ethernet0
O E2 200.165.0.0/24 [110/20] via 150.50.7.2, 03:10:11, Ethernet0
200.0.0.0/24 is variably subnetted, 5 subnets, 2 masks
O E1 200.0.0.0/24 [110/84] via 150.50.100.4, 01:45:10, Serial0
O 200.0.0.2/32 [110/11] via 150.50.7.2, 03:22:48, Ethernet0
C 200.0.0.3/32 is directly connected, Loopback0
O 200.0.0.4/32 [110/65] via 150.50.100.4, 03:10:22, Serial0
O 200.0.0.5/32 [110/11] via 150.50.7.5, 03:22:49, Ethernet0
O E2 200.165.1.0/24 [110/20] via 150.50.7.2, 03:10:12, Ethernet0
O E2 200.165.2.0/24 [110/20] via 150.50.7.2, 03:10:12, Ethernet0
O E2 200.165.3.0/24 [110/20] via 150.50.7.2, 03:10:13, Ethernet0
O E2 199.168.100.0/24 [110/20] via 150.50.7.2, 03:10:13, Ethernet0
O E1 10.0.0.0/8 [110/84] via 150.50.100.4, 01:45:12, Serial0
150.50.0.0/16 is variably subnetted, 7 subnets, 5 masks
C 150.50.7.0/25 is directly connected, Ethernet0
C 150.50.9.0/26 is directly connected, BRI0
O E1 150.50.17.0/24 [110/84] via 150.50.100.4, 01:45:12, Serial0
O E1 150.50.24.0/24 [110/84] via 150.50.100.4, 01:45:12, Serial0
C 150.50.100.0/27 is directly connected, Serial0
O 150.50.100.2/32 [110/128] via 150.50.100.4, 03:10:23, Serial0
O 150.50.100.4/32 [110/64] via 150.50.100.4, 03:10:23, Serial0
R3#sh run int e0
interface Ethernet0
ip address 150.50.7.3 255.255.255.128
no ip redirects
ip ospf priority 2
standby 1 priority 115 preempt
standby 1 authentication ipexpert
standby 1 name ipexpert_r3
standby 1 mac-address 0000.0c07.aaaa
standby 1 ip 150.50.7.8
standby 1 track Serial0 20
end
router ospf 10
router-id 3.3.3.3
log-adjacency-changes
area 0 authentication
area 1 virtual-link 5.5.5.5 authentication-key cisco
network 150.50.7.0 0.0.0.127 area 1
network 150.50.9.0 0.0.0.63 area 0
network 150.50.100.0 0.0.0.31 area 0
network 200.0.0.3 0.0.0.0 area 1
R3#o virt
Virtual Link OSPF_VL0 to router 5.5.5.5 is up
Run as demand circuit
DoNotAge LSA allowed.
Transit area 1, via interface Ethernet0, Cost of using 10
Transmit Delay is 1 sec, State POINT_TO_POINT,
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
Hello due in 00:00:07
Simple password authentication enabled
R3#o n 5.5.5.5 det
Neighbor 5.5.5.5, interface address 150.50.7.5
In the area 1 via interface Ethernet0
Neighbor priority is 0, State is FULL, 6 state changes
DR is 150.50.7.2 BDR is 150.50.7.3
Options is 0x42
Dead timer due in 00:00:37
Neighbor is up for 03:32:09
Index 2/2, retransmission queue length 0, number of retransmission 0
First 0x0(0)/0x0(0) Next 0x0(0)/0x0(0)
Last retransmission scan length is 0, maximum is 0
Last retransmission scan time is 0 msec, maximum is 0 msec
R2#sir 205.205.205.5
% Network not in table
R2#sir 150.200.1.5
% Network not in table
R2#o n
Neighbor ID Pri State Dead Time Address
Interface
4.4.4.4 1 FULL/ - 00:01:30 150.50.100.4
Serial1
3.3.3.3 2 FULL/BDR 00:00:36 150.50.7.3
Ethernet0
5.5.5.5 0 FULL/DROTHER 00:00:36 150.50.7.5
Ethernet0
R2#o dat
Summary Net Link States (Area 1)
Link ID ADV Router Age Seq# Checksum
150.200.1.0 5.5.5.5 1380 0x8000000A 0x4936
205.205.205.0 5.5.5.5 1380 0x80000008 0xFDB9
R2#o virt
Virtual Link OSPF_VL0 to router 5.5.5.5 is up
Run as demand circuit
DoNotAge LSA allowed.
Transit area 1, via interface Ethernet0, Cost of using 10
Transmit Delay is 1 sec, State POINT_TO_POINT,
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
Hello due in 00:00:07
Simple password authentication enabled
R2#o int e0
Ethernet0 is up, line protocol is up
Internet Address 150.50.7.2/25, Area 1
Process ID 10, Router ID 2.2.2.2, Network Type BROADCAST, Cost: 10
Transmit Delay is 1 sec, State DR, Priority 1
Designated Router (ID) 2.2.2.2, Interface address 150.50.7.2
Backup Designated router (ID) 3.3.3.3, Interface address 150.50.7.3
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
Hello due in 00:00:05
Index 1/2, flood queue length 0
Next 0x0(0)/0x0(0)
Last flood scan length is 0, maximum is 10
Last flood scan time is 0 msec, maximum is 4 msec
Neighbor Count is 2, Adjacent neighbor count is 2
Adjacent with neighbor 3.3.3.3 (Backup Designated Router)
Adjacent with neighbor 5.5.5.5
Suppress hello for 0 neighbor(s)
!
router ospf 10
router-id 2.2.2.2
log-adjacency-changes
area 0 authentication
area 1 virtual-link 5.5.5.5 authentication-key cisco
redistribute eigrp 4 subnets
network 150.50.7.0 0.0.0.127 area 1
network 150.50.100.0 0.0.0.31 area 0
network 200.0.0.2 0.0.0.0 area 1
!
interface Ethernet0
ip address 150.50.7.2 255.255.255.128
standby 1 ip 150.50.7.8
standby 1 preempt
standby 1 authentication ipexpert
standby 1 mac-address 0000.0c07.aaaa
end
This archive was generated by hypermail 2.1.4 : Fri Jul 04 2003 - 11:11:10 GMT-3