RE: Per Interface Authen in OSPF

From: Joe Martin (jmartin@capitalpremium.net)
Date: Fri Jul 25 2003 - 11:08:14 GMT-3


Raj,
I have had trouble in the past getting type-1 per interface authentication
to work properly when using key number 0. Don't know why, perhaps a bug.
Try using key 1 or higher; and, of course, be sure to use the same key
number and string on both sides of the link.

HTH,

Joe Martin

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
ccie2be
Sent: July 25, 2003 6:03 AM
To: Group Study
Subject: Per Interface Authen in OSPF

Hi,

I tried to get per link authen to work but didn't succeed. ( Until I read
Brian Dennis's post I didn't know per link authen was even possible)

I looked at Cisco OSPF's support page but couldn't find any sample config's
so
I tried the following approach: Don't use the "area x authen" under router
ospf, instead do the following

R1 s0 ---- s0 R2

R1 config

int s0

ip addr x.x.x.1 m.m.m.m
ip os authen
ip os authentication-key 0 ccie

router ospf 1
net x.x.x.0 0.0.0.255 area 0

R2 config

int s0

ip addr x.x.x.2 m.m.m.m
ip os authen
ip os authentication-key 0 ccie

router ospf 1
net x.x.x.0 0.0.0.255 area 0

This didn't work even though both routers are running IOS 12.1.

Anybody see what's wrong with this config? Thanks, Raj



This archive was generated by hypermail 2.1.4 : Wed Aug 06 2003 - 06:52:52 GMT-3