RE: Physical/multipoing Serial OSPF authentication different

From: Ivan Ostre¹ (ivan.ostres@snt.hr)
Date: Fri Nov 19 2004 - 05:05:24 GMT-3

• Next message: Tom Lijnse: "RE: ISIS show command for authentication"
• Previous message: Ivan Ostre¹: "How to test DLSw+"
• Maybe in reply to: Bhagwanani, Pankaj: "Physical/multipoing Serial OSPF authentication different"
• Next in thread: Kian Wah Lai: "Re: Physical/multipoing Serial OSPF authentication different"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

AFAIK it can't be done since OSPF sends "the youngest" key and for hub site youngest key is key 6 and for one of the spokes the youngest key is key 5. So, you have a key mismatch here and just can't work.

You get something like this:

Mar 1 01:10:16.508: OSPF: Send with youngest Key 5
Mar 1 01:10:33.220: OSPF: Rcv pkt from 192.168.1.1, Serial0 : Mismatch Authentication Key - No message digest key 6 on interface

HTH,
Ivan

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of ccie2be
Sent: Thursday, November 18, 2004 2:17 PM
To: Bhagwanani, Pankaj; ccielab@groupstudy.com
Subject: Re: Physical/multipoing Serial OSPF authentication different password s Md5

I don't think this can be done.

I think the rule is: same subnet, same password.

Please, if I'm mistaken, someone correct me.

----- Original Message -----
From: "Bhagwanani, Pankaj" <pankaj.bhagwanani@eds.com>
To: <ccielab@groupstudy.com>
Sent: Thursday, November 18, 2004 3:17 AM
Subject: Physical/multipoing Serial OSPF authentication different password s
Md5

> Hello
>
> I am trying to get md5 authentication working btw spokes with different
> passwords , I can not get it working . Can anyone help, or can this not be
> done ?
>
> Configs are
>
> hub
>
> !
> interface Serial0.2 multipoint
> ip address 136.10.100.2 255.255.255.224
> ip ospf authentication message-digest
> ip ospf message-digest-key 5 md5 cisco1
> ip ospf message-digest-key 6 md5 cisco2
> !
>
> on one spoke
>
> !
> interface Serial0
> ip address 136.10.100.5 255.255.255.224
> ip ospf authentication message-digest
> ip ospf message-digest-key 5 md5 cisco1
>
> on the other spoke
>
> !
> interface Serial1/0
> ip address 136.10.100.6 255.255.255.224
> ip ospf authentication message-digest
> ip ospf message-digest-key 6 md5 cisco2
>
> Thanks
> Pakaj
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

• Next message: Tom Lijnse: "RE: ISIS show command for authentication"
• Previous message: Ivan Ostre¹: "How to test DLSw+"
• Maybe in reply to: Bhagwanani, Pankaj: "Physical/multipoing Serial OSPF authentication different"
• Next in thread: Kian Wah Lai: "Re: Physical/multipoing Serial OSPF authentication different"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Thu Dec 02 2004 - 06:57:47 GMT-3