From: navaid@rogers.com
Date: Mon Sep 22 2003 - 23:27:58 GMT-3
Thanks Tim,
>
> From: "Snow, Tim" <timothy.snow@eds.com>
> Date: 2003/09/22 Mon PM 10:09:32 EDT
> To: "'navaid@rogers.com'" <navaid@rogers.com>
> CC: "'ccielab@groupstudy.com'" <ccielab@groupstudy.com>
> Subject: RE: RE: EIGRP authentication failure...
>
> Sorry about that. Oversight on my behalf. I see that you do have multiple
> key-chains setup and your referencing the correct names.
>
> I believe key numbers have to be the same.
>
> My initial thought was incorrect, I'll see if I can set this up and see if
> it works. Can you "debug eigrp packets" are you seeing any error with
> regards to authentication?
>
> Tim
> #12042
>
> -----Original Message-----
> From: navaid@rogers.com [mailto:navaid@rogers.com]
> Sent: Monday, September 22, 2003 9:59 PM
> To: Snow, Tim; ccielab@groupstudy.com
> Subject: Re: RE: EIGRP authentication failure...
>
>
> Tim,
> Thanks for reply.
> I have two eigrp processes running on both R5 and R6. eigrpkey100 is used
> for eigrp 100 eigrpkey101 is used for eigrp 101
>
> I am using key 1 for both key chain. Do I have to keep the key number
> unique. Since they belong to different key chain I think I can keep the key
> number same.
>
> Navaid
>
>
>
> >
> > From: "Snow, Tim" <timothy.snow@eds.com>
> > Date: 2003/09/22 Mon PM 09:47:35 EDT
> > To: "'navaid@rogers.com'" <navaid@rogers.com>, ccielab@groupstudy.com
> > Subject: RE: EIGRP authentication failure...
> >
> > Your key chain name is wrong on r5. Either it's supposed to be
> > "eigrpkey100" in your "ip authen key eigrp 101 xxxxx" command and your
> > key is correct, or vice versa depending upon how you wanted it
> > configured.
> >
> > ip authentication key-chain eigrp 101 eigrpkey101
> > end
> >
> > R5#sh key chain
> > Key-chain eigrpkey100:
> > key 1 -- text "ipexpert_100"
> > accept lifetime (always valid) - (always valid) [valid now]
> > send lifetime (always valid) - (always valid) [valid now]
> > Key-chain
> > eigrpkey101:
> > key 1 -- text "ipexpert_101"
> > accept lifetime (always valid) - (always valid) [valid now]
> > send lifetime (always valid) - (always valid) [valid now]
> >
> >
> >
> > Tim
> > #12042
> >
> > -----Original Message-----
> > From: navaid@rogers.com [mailto:navaid@rogers.com]
> > Sent: Monday, September 22, 2003 9:38 PM
> > To: ccielab@groupstudy.com
> > Subject: EIGRP authentication failure...
> >
> >
> > Both R6 and R5 are connected to same ethernet segment.
> > EIGRP authentication is not working between R5 and R6. I have re-typed
> > the key and interface config. Following is config. I am not sure what
> > is wrong can someone please help...
> >
> > Navaid
> >
> >
> > -----------R6--------------------------
> > R6#sh run int e1
> > Building configuration...
> >
> > Current configuration : 175 bytes
> > !
> > interface Ethernet1
> > ip address 140.10.101.6 255.255.255.0
> > ip authentication mode eigrp 101 md5
> > ip authentication key-chain eigrp 101 eigrpkey101
> > media-type 10BaseT
> > end
> >
> > R6#sh key chain
> > Key-chain eigrpkey101:
> > key 1 -- text "ipexpert_101"
> > accept lifetime (always valid) - (always valid) [valid now]
> > send lifetime (always valid) - (always valid) [valid now]
> > Key-chain
> > eigrpkey100:
> > key 1 -- text "ipexpert_100"
> > accept lifetime (always valid) - (always valid) [valid now]
> > send lifetime (always valid) - (always valid) [valid now]
> >
> >
> > --------------R5---------------------
> > R5#sh run int e0
> > Building configuration...
> >
> > Current configuration : 155 bytes
> > !
> > interface Ethernet0
> > ip address 140.10.101.5 255.255.255.0
> > ip authentication mode eigrp 101 md5
> > ip authentication key-chain eigrp 101 eigrpkey101
> > end
> >
> > R5#sh key chain
> > Key-chain eigrpkey100:
> > key 1 -- text "ipexpert_100"
> > accept lifetime (always valid) - (always valid) [valid now]
> > send lifetime (always valid) - (always valid) [valid now]
> > Key-chain
> > eigrpkey101:
> > key 1 -- text "ipexpert_101"
> > accept lifetime (always valid) - (always valid) [valid now]
> > send lifetime (always valid) - (always valid) [valid now]
> >
> > 1
> >
> > ***Get your CCIE and a FREE vacation: Shop.GroupStudy.com***
> > ______________________________________________________________________
> > _
> > Please help support GroupStudy by purchasing your study materials from:
> > shop.groupstudy.com
> >
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
> >
>
> 1
>
1
***Get your CCIE and a FREE vacation: Shop.GroupStudy.com***
This archive was generated by hypermail 2.1.4 : Wed Oct 01 2003 - 07:24:33 GMT-3