From: Peter (peter@cyscoexpert.com)
Date: Mon Sep 22 2003 - 21:15:10 GMT-3
Make sure key chain name applied on the interface and key-string itself
doesn't have an extra space at the end on one of the routers.
_____________________________
Peter
#7247 (R&S, Security, SP)
CyscoExpert Corp.
4433 W. Touhy Ave. Suite 410
Lincolnwood, IL 60712
Phone (847) 674-3392
Toll Free (866) CyscoXP (297-2697)
Fax (847) 674-2625
----- Original Message -----
From: <navaid@rogers.com>
To: "Snow, Tim" <timothy.snow@eds.com>; <ccielab@groupstudy.com>
Sent: Monday, September 22, 2003 8:59 PM
Subject: Re: RE: EIGRP authentication failure...
> Tim,
> Thanks for reply.
> I have two eigrp processes running on both R5 and R6.
> eigrpkey100 is used for eigrp 100
> eigrpkey101 is used for eigrp 101
>
> I am using key 1 for both key chain. Do I have to keep the key number
unique. Since they belong to different key chain I think I can keep the key
number same.
>
> Navaid
>
>
>
> >
> > From: "Snow, Tim" <timothy.snow@eds.com>
> > Date: 2003/09/22 Mon PM 09:47:35 EDT
> > To: "'navaid@rogers.com'" <navaid@rogers.com>, ccielab@groupstudy.com
> > Subject: RE: EIGRP authentication failure...
> >
> > Your key chain name is wrong on r5. Either it's supposed to be
> > "eigrpkey100" in your "ip authen key eigrp 101 xxxxx" command and your
key
> > is correct, or vice versa depending upon how you wanted it configured.
> >
> > ip authentication key-chain eigrp 101 eigrpkey101
> > end
> >
> > R5#sh key chain
> > Key-chain eigrpkey100:
> > key 1 -- text "ipexpert_100"
> > accept lifetime (always valid) - (always valid) [valid now]
> > send lifetime (always valid) - (always valid) [valid now]
Key-chain
> > eigrpkey101:
> > key 1 -- text "ipexpert_101"
> > accept lifetime (always valid) - (always valid) [valid now]
> > send lifetime (always valid) - (always valid) [valid now]
> >
> >
> >
> > Tim
> > #12042
> >
> > -----Original Message-----
> > From: navaid@rogers.com [mailto:navaid@rogers.com]
> > Sent: Monday, September 22, 2003 9:38 PM
> > To: ccielab@groupstudy.com
> > Subject: EIGRP authentication failure...
> >
> >
> > Both R6 and R5 are connected to same ethernet segment.
> > EIGRP authentication is not working between R5 and R6. I have re-typed
the
> > key and interface config.
> > Following is config. I am not sure what is wrong can someone please
help...
> >
> > Navaid
> >
> >
> > -----------R6--------------------------
> > R6#sh run int e1
> > Building configuration...
> >
> > Current configuration : 175 bytes
> > !
> > interface Ethernet1
> > ip address 140.10.101.6 255.255.255.0
> > ip authentication mode eigrp 101 md5
> > ip authentication key-chain eigrp 101 eigrpkey101
> > media-type 10BaseT
> > end
> >
> > R6#sh key chain
> > Key-chain eigrpkey101:
> > key 1 -- text "ipexpert_101"
> > accept lifetime (always valid) - (always valid) [valid now]
> > send lifetime (always valid) - (always valid) [valid now]
Key-chain
> > eigrpkey100:
> > key 1 -- text "ipexpert_100"
> > accept lifetime (always valid) - (always valid) [valid now]
> > send lifetime (always valid) - (always valid) [valid now]
> >
> >
> > --------------R5---------------------
> > R5#sh run int e0
> > Building configuration...
> >
> > Current configuration : 155 bytes
> > !
> > interface Ethernet0
> > ip address 140.10.101.5 255.255.255.0
> > ip authentication mode eigrp 101 md5
> > ip authentication key-chain eigrp 101 eigrpkey101
> > end
> >
> > R5#sh key chain
> > Key-chain eigrpkey100:
> > key 1 -- text "ipexpert_100"
> > accept lifetime (always valid) - (always valid) [valid now]
> > send lifetime (always valid) - (always valid) [valid now]
Key-chain
> > eigrpkey101:
> > key 1 -- text "ipexpert_101"
> > accept lifetime (always valid) - (always valid) [valid now]
> > send lifetime (always valid) - (always valid) [valid now]
> >
> > 1
> >
> > ***Get your CCIE and a FREE vacation: Shop.GroupStudy.com***
> > _______________________________________________________________________
> > Please help support GroupStudy by purchasing your study materials from:
> > shop.groupstudy.com
> >
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
> >
>
> 1
>
> ***Get your CCIE and a FREE vacation: Shop.GroupStudy.com***
> _______________________________________________________________________
> Please help support GroupStudy by purchasing your study materials from:
> shop.groupstudy.com
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
***Get your CCIE and a FREE vacation: Shop.GroupStudy.com***
This archive was generated by hypermail 2.1.4 : Wed Oct 01 2003 - 07:24:33 GMT-3