RE: RE: EIGRP authentication failure...

From: Jonathan V Hays (jhays@jtan.com)
Date: Mon Sep 22 2003 - 23:45:07 GMT-3


Hi,

I am not trying to flame you, so please don't get angry at me. I see a
lot of comments like yours so I am addressing this to everyone and I am
not trying to single you out.

This mailing list has THOUSANDS of subscribers and anything we can do to
cut back on the number of messages helps. Short comments like "thanks"
would be better made in a direct email to the person you are thanking.

Helpfully yours,

Jonathan

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
navaid@rogers.com
Sent: Monday, September 22, 2003 10:28 PM
To: Snow, Tim
Cc: 'ccielab@groupstudy.com'
Subject: RE: RE: EIGRP authentication failure...

Thanks Tim,

>
> From: "Snow, Tim" <timothy.snow@eds.com>
> Date: 2003/09/22 Mon PM 10:09:32 EDT
> To: "'navaid@rogers.com'" <navaid@rogers.com>
> CC: "'ccielab@groupstudy.com'" <ccielab@groupstudy.com>
> Subject: RE: RE: EIGRP authentication failure...
>
> Sorry about that. Oversight on my behalf. I see that you do have
multiple
> key-chains setup and your referencing the correct names.
>
> I believe key numbers have to be the same.
>
> My initial thought was incorrect, I'll see if I can set this up and
see if
> it works. Can you "debug eigrp packets" are you seeing any error
with
> regards to authentication?
>
> Tim
> #12042
>
> -----Original Message-----
> From: navaid@rogers.com [mailto:navaid@rogers.com]
> Sent: Monday, September 22, 2003 9:59 PM
> To: Snow, Tim; ccielab@groupstudy.com
> Subject: Re: RE: EIGRP authentication failure...
>
>
> Tim,
> Thanks for reply.
> I have two eigrp processes running on both R5 and R6. eigrpkey100 is
used
> for eigrp 100 eigrpkey101 is used for eigrp 101
>
> I am using key 1 for both key chain. Do I have to keep the key number
> unique. Since they belong to different key chain I think I can keep
the key
> number same.
>
> Navaid
>
>
>
> >
> > From: "Snow, Tim" <timothy.snow@eds.com>
> > Date: 2003/09/22 Mon PM 09:47:35 EDT
> > To: "'navaid@rogers.com'" <navaid@rogers.com>,
ccielab@groupstudy.com
> > Subject: RE: EIGRP authentication failure...
> >
> > Your key chain name is wrong on r5. Either it's supposed to be
> > "eigrpkey100" in your "ip authen key eigrp 101 xxxxx" command and
your
> > key is correct, or vice versa depending upon how you wanted it
> > configured.
> >
> > ip authentication key-chain eigrp 101 eigrpkey101
> > end
> >
> > R5#sh key chain
> > Key-chain eigrpkey100:
> > key 1 -- text "ipexpert_100"
> > accept lifetime (always valid) - (always valid) [valid now]
> > send lifetime (always valid) - (always valid) [valid now]
> > Key-chain
> > eigrpkey101:
> > key 1 -- text "ipexpert_101"
> > accept lifetime (always valid) - (always valid) [valid now]
> > send lifetime (always valid) - (always valid) [valid now]
> >
> >
> >
> > Tim
> > #12042
> >
> > -----Original Message-----
> > From: navaid@rogers.com [mailto:navaid@rogers.com]
> > Sent: Monday, September 22, 2003 9:38 PM
> > To: ccielab@groupstudy.com
> > Subject: EIGRP authentication failure...
> >
> >
> > Both R6 and R5 are connected to same ethernet segment.
> > EIGRP authentication is not working between R5 and R6. I have
re-typed
> > the key and interface config. Following is config. I am not sure
what
> > is wrong can someone please help...
> >
> > Navaid
> >
> >
> > -----------R6--------------------------
> > R6#sh run int e1
> > Building configuration...
> >
> > Current configuration : 175 bytes
> > !
> > interface Ethernet1
> > ip address 140.10.101.6 255.255.255.0
> > ip authentication mode eigrp 101 md5
> > ip authentication key-chain eigrp 101 eigrpkey101
> > media-type 10BaseT
> > end
> >
> > R6#sh key chain
> > Key-chain eigrpkey101:
> > key 1 -- text "ipexpert_101"
> > accept lifetime (always valid) - (always valid) [valid now]
> > send lifetime (always valid) - (always valid) [valid now]
> > Key-chain
> > eigrpkey100:
> > key 1 -- text "ipexpert_100"
> > accept lifetime (always valid) - (always valid) [valid now]
> > send lifetime (always valid) - (always valid) [valid now]
> >
> >
> > --------------R5---------------------
> > R5#sh run int e0
> > Building configuration...
> >
> > Current configuration : 155 bytes
> > !
> > interface Ethernet0
> > ip address 140.10.101.5 255.255.255.0
> > ip authentication mode eigrp 101 md5
> > ip authentication key-chain eigrp 101 eigrpkey101
> > end
> >
> > R5#sh key chain
> > Key-chain eigrpkey100:
> > key 1 -- text "ipexpert_100"
> > accept lifetime (always valid) - (always valid) [valid now]
> > send lifetime (always valid) - (always valid) [valid now]
> > Key-chain
> > eigrpkey101:
> > key 1 -- text "ipexpert_101"
> > accept lifetime (always valid) - (always valid) [valid now]
> > send lifetime (always valid) - (always valid) [valid now]
> >
> > 1
> >
> > ***Get your CCIE and a FREE vacation: Shop.GroupStudy.com***
> >



This archive was generated by hypermail 2.1.4 : Wed Oct 01 2003 - 07:24:34 GMT-3