RE: OSPF Authentication through virtual-link

From: Brian Dennis (bdennis@internetworkexpert.com)
Date: Wed Sep 21 2005 - 15:00:44 GMT-3


Charlie,
        You applied the password to the virtual-link on R2 which is the
second step in the process to configure OSPF authentication. You
skipped over the first step which is to change the authentication type
from the default of null (type 0) to simple (type 1) for the
virtual-link. Changing the authentication type on R2's virtual-link to
simple (type 1) can be done two ways:

area 0 authentication
area 10 virtual-link 10.1.3.3 authentication

HTH,

Brian Dennis, CCIE #2210 (R&S/ISP-Dial/Security)
bdennis@internetworkexpert.com
 
Internetwork Expert, Inc.
http://www.InternetworkExpert.com
Toll Free: 877-224-8987
Direct: 775-745-6404 (Outside the US and Canada)
 
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
charlie
Sent: Wednesday, September 21, 2005 5:47 AM
To: ccielab@groupstudy.com
Subject: OSPF Authentication through virtual-link

Hi, Group

R1(e0)-----(e0) R2 (s0)-----(s0) R3 (s1)----(s0) R4

R1 ~ R2 : ospf area 99
R2 ~ R3 : ospf area 10
R3 ~ R4 : ospf area 0

If scenario asks to apply simple authentication on ospf area 0,
I will set-up area 0 authentication, ip ospf authentication-key on area
0
interface and area 10 virtual-link authentication-key.

However my router keeps sending following message
R2 - OSPF: Rcv pkt from 140.3.36.4, OSPF_VL0 : Mismatch Authentication
type.
Input packet specified type 1, we use type 0
R3 - OSPF: Rcv pkt from 140.3.36.3, OSPF_VL0 : Mismatch Authentication
type.
Input packet specified type 0, we use type 1

What's wrong with my config? Please help!!!
===================
R2# router ospf 2
        router-id 10.1.2.2
        area 10 virtual-link 10.1.3.3 authentication-key cisco

R3# router ospf 3
        router-id 10.1.3.3
        area 0 authentication
        area 10 virtual-link 10.1.2.2 authentication-key cisco
R3# sh run int serial 1
        ip ospf authentication-key cisco

R4# router ospf 4
        router-id 10.1.4.4
        area 0 authentication
R4# sh run int serial 0
        ip ospf authentication-key cisco

any comment would be appreciated.

Charlie



This archive was generated by hypermail 2.1.4 : Sun Oct 02 2005 - 14:40:16 GMT-3