RE: OSPF Mismatch Authentication Key - Message Digest Key

From: Moin, Imran (imoin@virtela.net)
Date: Sun Feb 27 2005 - 23:13:06 GMT-3


I tried that already and it still doesnt work.........

-Imran.

-----Original Message-----
From: ccie2be [mailto:ccie2be@nyc.rr.com]
Sent: Sunday, February 27, 2005 6:19 PM
To: Moin, Imran; 'Group Study (E-mail)'
Subject: RE: OSPF Mismatch Authentication Key - Message Digest Key

My guess is that one of the passwords has a space following the password
which you can't see.

I would remove both the

ip ospf message-digest-key 2 md5 IpExPeRt_6

statements and re-enter one of them. Then copy and paste the statement on
the other router.

HTH, Tim

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Moin, Imran
Sent: Sunday, February 27, 2005 12:26 AM
To: Group Study (E-mail)
Subject: OSPF Mismatch Authentication Key - Message Digest Key

Hello All,

I am having issues bringing up OSPF adjacency between R2 and R6.

R2, R5 and R6 are connected in a multipoint FR network with R2 as hub. OSPF
comes up fine between R2 and R5, but not between R2 and R6. R2 is a 2500
router running c2500-is-l.122-15.T14.bin and R6 is a 2600 running
c2500-is-l.122-15.T14.bin.

Here are the configs of those two routers:

R2#
R2#sh run
Building configuration...

Current configuration : 2305 bytes
!
version 12.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2
!
logging queue-limit 100
!
ip subnet-zero
no ip domain lookup
!
!
key chain ospfkey
 key 1
  key-string IpExPeRt_5
 key 2
  key-string IpExPeRt_6
!
!
!
interface Loopback0
 ip address 136.10.2.2 255.255.255.0
 ip ospf network point-to-point
!
interface Ethernet0
 ip address 136.10.12.2 255.255.255.0
!
interface Serial0
 no ip address
 encapsulation frame-relay
 frame-relay lmi-type cisco
!
interface Serial0.104 point-to-point
 ip address 136.10.24.2 255.255.255.248
 frame-relay interface-dlci 104
!
interface Serial0.105 multipoint
 ip address 136.10.100.2 255.255.255.224
 ip ospf authentication message-digest
 ip ospf message-digest-key 1 md5 IpExPeRt_5
 ip ospf message-digest-key 2 md5 IpExPeRt_6
 ip ospf network point-to-multipoint non-broadcast
 no arp frame-relay
 frame-relay map ip 136.10.100.2 105
 frame-relay map ip 136.10.100.5 105 broadcast
 frame-relay map ip 136.10.100.6 106 broadcast
 no frame-relay inverse-arp
!
interface Serial1
 no ip address
 shutdown
!
interface BRI0
 ip address 136.10.25.2 255.255.255.252
!
router ospf 1
 router-id 136.10.2.2
 log-adjacency-changes
 network 136.10.2.0 0.0.0.255 area 0
 network 136.10.100.0 0.0.0.31 area 0
 neighbor 136.10.100.5 cost 56
 neighbor 136.10.100.6 cost 56
!
router rip
 version 2
 timers basic 30 180 0 180
 network 136.10.0.0
 distance 255
 distance 120 136.10.12.1 0.0.0.0
 no auto-summary
!
ip http server
ip classless
!
!
!
!
route-map test permit 10
 set metric +56
!
route-map OSPF_IN permit 10
 match route-type external type-2
!
route-map OSPF_IN permit 20
 set metric +56
!
alias configure ro router ospf
alias configure re router eigrp
alias configure rr router rip
alias configure rb router bgp
alias configure ri router isis
alias exec c config terminal
alias exec siib show ip interface brief
alias exec sir show ip route
alias exec soi show ip ospf interface
alias exec son show ip ospf neighbor
alias exec sbs show ip bgp sum
alias exec sb show ip bgp
alias exec sr show run
alias exec sri show run interface
alias exec sen show ip eigrp neighbor
alias exec si show run | inc
!
line con 0
 exec-timeout 0 0
 logging synchronous
line aux 0
line vty 0 4
 login
!
end
      
R2#

R6#sr
Building configuration...

Current configuration : 2496 bytes
!
version 12.2
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname R6
!
!
memory-size iomem 15
ip subnet-zero
!
!
no ip domain-lookup
!
!
key chain eigrpkey
 key 1
  key-string ipexpert_R69
call rsvp-sync
!
!
!
!
!
!
!
!
interface Loopback0
 ip address 136.10.6.6 255.255.255.0
 ip ospf network point-to-point
!
interface FastEthernet0/0
 ip address 136.10.56.6 255.255.255.240
 speed 100
 full-duplex
!
interface Serial0/0
 ip address 136.10.100.6 255.255.255.224
 encapsulation frame-relay
 ip ospf authentication message-digest
 ip ospf message-digest-key 2 md5 IpExPeRt_6
 ip ospf network point-to-multipoint non-broadcast
 no arp frame-relay
 frame-relay map ip 136.10.100.2 601 broadcast
 frame-relay map ip 136.10.100.5 601 broadcast
 frame-relay map ip 136.10.100.6 601 broadcast
 no frame-relay inverse-arp
 frame-relay lmi-type cisco
!
interface FastEthernet0/1
 ip address 136.10.69.6 255.255.255.240
 ip authentication mode eigrp 100 md5
 ip authentication key-chain eigrp 100 eigrpkey
 ip summary-address eigrp 100 100.10.0.0 255.255.240.0 170
 speed 100
 full-duplex
!
interface Serial0/1
 no ip address
 shutdown
!
router eigrp 100
 redistribute ospf 1
 network 136.10.6.0 0.0.0.255
 network 136.10.69.0 0.0.0.15
 metric weights 0 1 0 1 1 1
 default-metric 1544 1000 255 1 1500
 no auto-summary
 no eigrp log-neighbor-changes
!
router ospf 1
 router-id 136.10.6.6
 log-adjacency-changes
 redistribute static subnets route-map OSPFSTATIC
 network 136.10.6.0 0.0.0.255 area 0
 network 136.10.56.0 0.0.0.15 area 3
 network 136.10.100.0 0.0.0.31 area 0
 neighbor 136.10.100.2
!
ip classless
ip route 209.10.90.0 255.255.255.0 Null0
ip http server
ip pim bidir-enable
!
access-list 6 permit 209.10.90.0 0.0.0.255
route-map OSPFSTATIC permit 10
 match ip address 6
 set metric-type type-1
!
!
dial-peer cor custom
!
!
!
alias configure ro router ospf
alias configure re router eigrp
alias configure rr router rip
alias configure rb router bgp
alias configure ri router isis
alias exec c config terminal
alias exec siib show ip interface brief
alias exec sir show ip route
alias exec soi show ip ospf interface
alias exec son show ip ospf neighbor
alias exec sbs show ip bgp sum
alias exec sb show ip bgp
alias exec sr show run
alias exec sri show run interface
alias exec sen show ip eigrp neighbor
alias exec si show run | inc
!
line con 0
 exec-timeout 0 0
 logging synchronous
line aux 0
line vty 0 4
!
no scheduler allocate
end

R6#

Please let me know if you find something wrong in the configs.

thanks,
Imran Moin.



This archive was generated by hypermail 2.1.4 : Thu Mar 03 2005 - 08:51:26 GMT-3