From: Snow, Tim (timothy.snow@eds.com)
Date: Mon Sep 22 2003 - 22:47:35 GMT-3
Your key chain name is wrong on r5. Either it's supposed to be
"eigrpkey100" in your "ip authen key eigrp 101 xxxxx" command and your key
is correct, or vice versa depending upon how you wanted it configured.
ip authentication key-chain eigrp 101 eigrpkey101
end
R5#sh key chain
Key-chain eigrpkey100:
key 1 -- text "ipexpert_100"
accept lifetime (always valid) - (always valid) [valid now]
send lifetime (always valid) - (always valid) [valid now] Key-chain
eigrpkey101:
key 1 -- text "ipexpert_101"
accept lifetime (always valid) - (always valid) [valid now]
send lifetime (always valid) - (always valid) [valid now]
Tim
#12042
-----Original Message-----
From: navaid@rogers.com [mailto:navaid@rogers.com]
Sent: Monday, September 22, 2003 9:38 PM
To: ccielab@groupstudy.com
Subject: EIGRP authentication failure...
Both R6 and R5 are connected to same ethernet segment.
EIGRP authentication is not working between R5 and R6. I have re-typed the
key and interface config.
Following is config. I am not sure what is wrong can someone please help...
Navaid
-----------R6--------------------------
R6#sh run int e1
Building configuration...
Current configuration : 175 bytes
!
interface Ethernet1
ip address 140.10.101.6 255.255.255.0
ip authentication mode eigrp 101 md5
ip authentication key-chain eigrp 101 eigrpkey101
media-type 10BaseT
end
R6#sh key chain
Key-chain eigrpkey101:
key 1 -- text "ipexpert_101"
accept lifetime (always valid) - (always valid) [valid now]
send lifetime (always valid) - (always valid) [valid now] Key-chain
eigrpkey100:
key 1 -- text "ipexpert_100"
accept lifetime (always valid) - (always valid) [valid now]
send lifetime (always valid) - (always valid) [valid now]
--------------R5---------------------
R5#sh run int e0
Building configuration...
Current configuration : 155 bytes
!
interface Ethernet0
ip address 140.10.101.5 255.255.255.0
ip authentication mode eigrp 101 md5
ip authentication key-chain eigrp 101 eigrpkey101
end
R5#sh key chain
Key-chain eigrpkey100:
key 1 -- text "ipexpert_100"
accept lifetime (always valid) - (always valid) [valid now]
send lifetime (always valid) - (always valid) [valid now] Key-chain
eigrpkey101:
key 1 -- text "ipexpert_101"
accept lifetime (always valid) - (always valid) [valid now]
send lifetime (always valid) - (always valid) [valid now]
1
***Get your CCIE and a FREE vacation: Shop.GroupStudy.com***
This archive was generated by hypermail 2.1.4 : Wed Oct 01 2003 - 07:24:33 GMT-3