Re: OSPF Mismatch Authentication Key - Message Digest Key

From: John Murphy (jt.murphy@comcast.net)
Date: Sun Feb 27 2005 - 23:53:04 GMT-3


I know it may seem a little obvious, so at the risk of insulting your
intelligence, have you tried 'debug ip ospf adj' on both sides to see
what the error(s) are?

FWIW, I copied your configs directly into a couple of 2600s and there
was an extra space behind "ip ospf message-digest-key 2 md5 IpExPeRt_6
" on R6.

jm

Moin, Imran wrote:

>I tried that already and it still doesnt work.........
>
>-Imran.
>
>
>
>
>-----Original Message-----
>From: ccie2be [mailto:ccie2be@nyc.rr.com]
>Sent: Sunday, February 27, 2005 6:19 PM
>To: Moin, Imran; 'Group Study (E-mail)'
>Subject: RE: OSPF Mismatch Authentication Key - Message Digest Key
>
>
>My guess is that one of the passwords has a space following the password
>which you can't see.
>
>I would remove both the
>
>ip ospf message-digest-key 2 md5 IpExPeRt_6
>
>statements and re-enter one of them. Then copy and paste the statement on
>the other router.
>
>HTH, Tim
>
>-----Original Message-----
>From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
>Moin, Imran
>Sent: Sunday, February 27, 2005 12:26 AM
>To: Group Study (E-mail)
>Subject: OSPF Mismatch Authentication Key - Message Digest Key
>
>Hello All,
>
>I am having issues bringing up OSPF adjacency between R2 and R6.
>
>R2, R5 and R6 are connected in a multipoint FR network with R2 as hub. OSPF
>comes up fine between R2 and R5, but not between R2 and R6. R2 is a 2500
>router running c2500-is-l.122-15.T14.bin and R6 is a 2600 running
>c2500-is-l.122-15.T14.bin.
>
>Here are the configs of those two routers:
>
>
>
>R2#
>R2#sh run
>Building configuration...
>
>Current configuration : 2305 bytes
>!
>version 12.2
>service timestamps debug datetime msec
>service timestamps log datetime msec
>no service password-encryption
>!
>hostname R2
>!
>logging queue-limit 100
>!
>ip subnet-zero
>no ip domain lookup
>!
>!
>key chain ospfkey
> key 1
> key-string IpExPeRt_5
> key 2
> key-string IpExPeRt_6
>!
>!
>!
>interface Loopback0
> ip address 136.10.2.2 255.255.255.0
> ip ospf network point-to-point
>!
>interface Ethernet0
> ip address 136.10.12.2 255.255.255.0
>!
>interface Serial0
> no ip address
> encapsulation frame-relay
> frame-relay lmi-type cisco
>!
>interface Serial0.104 point-to-point
> ip address 136.10.24.2 255.255.255.248
> frame-relay interface-dlci 104
>!
>interface Serial0.105 multipoint
> ip address 136.10.100.2 255.255.255.224
> ip ospf authentication message-digest
> ip ospf message-digest-key 1 md5 IpExPeRt_5
> ip ospf message-digest-key 2 md5 IpExPeRt_6
> ip ospf network point-to-multipoint non-broadcast
> no arp frame-relay
> frame-relay map ip 136.10.100.2 105
> frame-relay map ip 136.10.100.5 105 broadcast
> frame-relay map ip 136.10.100.6 106 broadcast
> no frame-relay inverse-arp
>!
>interface Serial1
> no ip address
> shutdown
>!
>interface BRI0
> ip address 136.10.25.2 255.255.255.252
>!
>router ospf 1
> router-id 136.10.2.2
> log-adjacency-changes
> network 136.10.2.0 0.0.0.255 area 0
> network 136.10.100.0 0.0.0.31 area 0
> neighbor 136.10.100.5 cost 56
> neighbor 136.10.100.6 cost 56
>!
>router rip
> version 2
> timers basic 30 180 0 180
> network 136.10.0.0
> distance 255
> distance 120 136.10.12.1 0.0.0.0
> no auto-summary
>!
>ip http server
>ip classless
>!
>!
>!
>!
>route-map test permit 10
> set metric +56
>!
>route-map OSPF_IN permit 10
> match route-type external type-2
>!
>route-map OSPF_IN permit 20
> set metric +56
>!
>alias configure ro router ospf
>alias configure re router eigrp
>alias configure rr router rip
>alias configure rb router bgp
>alias configure ri router isis
>alias exec c config terminal
>alias exec siib show ip interface brief
>alias exec sir show ip route
>alias exec soi show ip ospf interface
>alias exec son show ip ospf neighbor
>alias exec sbs show ip bgp sum
>alias exec sb show ip bgp
>alias exec sr show run
>alias exec sri show run interface
>alias exec sen show ip eigrp neighbor
>alias exec si show run | inc
>!
>line con 0
> exec-timeout 0 0
> logging synchronous
>line aux 0
>line vty 0 4
> login
>!
>end
>
>R2#
>
>
>
>
>
>
>
>
>
>R6#sr
>Building configuration...
>
>Current configuration : 2496 bytes
>!
>version 12.2
>service timestamps debug uptime
>service timestamps log uptime
>no service password-encryption
>!
>hostname R6
>!
>!
>memory-size iomem 15
>ip subnet-zero
>!
>!
>no ip domain-lookup
>!
>!
>key chain eigrpkey
> key 1
> key-string ipexpert_R69
>call rsvp-sync
>!
>!
>!
>!
>!
>!
>!
>!
>interface Loopback0
> ip address 136.10.6.6 255.255.255.0
> ip ospf network point-to-point
>!
>interface FastEthernet0/0
> ip address 136.10.56.6 255.255.255.240
> speed 100
> full-duplex
>!
>interface Serial0/0
> ip address 136.10.100.6 255.255.255.224
> encapsulation frame-relay
> ip ospf authentication message-digest
> ip ospf message-digest-key 2 md5 IpExPeRt_6
> ip ospf network point-to-multipoint non-broadcast
> no arp frame-relay
> frame-relay map ip 136.10.100.2 601 broadcast
> frame-relay map ip 136.10.100.5 601 broadcast
> frame-relay map ip 136.10.100.6 601 broadcast
> no frame-relay inverse-arp
> frame-relay lmi-type cisco
>!
>interface FastEthernet0/1
> ip address 136.10.69.6 255.255.255.240
> ip authentication mode eigrp 100 md5
> ip authentication key-chain eigrp 100 eigrpkey
> ip summary-address eigrp 100 100.10.0.0 255.255.240.0 170
> speed 100
> full-duplex
>!
>interface Serial0/1
> no ip address
> shutdown
>!
>router eigrp 100
> redistribute ospf 1
> network 136.10.6.0 0.0.0.255
> network 136.10.69.0 0.0.0.15
> metric weights 0 1 0 1 1 1
> default-metric 1544 1000 255 1 1500
> no auto-summary
> no eigrp log-neighbor-changes
>!
>router ospf 1
> router-id 136.10.6.6
> log-adjacency-changes
> redistribute static subnets route-map OSPFSTATIC
> network 136.10.6.0 0.0.0.255 area 0
> network 136.10.56.0 0.0.0.15 area 3
> network 136.10.100.0 0.0.0.31 area 0
> neighbor 136.10.100.2
>!
>ip classless
>ip route 209.10.90.0 255.255.255.0 Null0
>ip http server
>ip pim bidir-enable
>!
>access-list 6 permit 209.10.90.0 0.0.0.255
>route-map OSPFSTATIC permit 10
> match ip address 6
> set metric-type type-1
>!
>!
>dial-peer cor custom
>!
>!
>!
>alias configure ro router ospf
>alias configure re router eigrp
>alias configure rr router rip
>alias configure rb router bgp
>alias configure ri router isis
>alias exec c config terminal
>alias exec siib show ip interface brief
>alias exec sir show ip route
>alias exec soi show ip ospf interface
>alias exec son show ip ospf neighbor
>alias exec sbs show ip bgp sum
>alias exec sb show ip bgp
>alias exec sr show run
>alias exec sri show run interface
>alias exec sen show ip eigrp neighbor
>alias exec si show run | inc
>!
>line con 0
> exec-timeout 0 0
> logging synchronous
>line aux 0
>line vty 0 4
>!
>no scheduler allocate
>end
>
>R6#
>
>
>Please let me know if you find something wrong in the configs.
>
>thanks,
>Imran Moin.
>
>_______________________________________________________________________
>Subscription information may be found at:
>http://www.groupstudy.com/list/CCIELab.html
>
>_______________________________________________________________________
>Subscription information may be found at:
>http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Thu Mar 03 2005 - 08:51:26 GMT-3