From: Chris Lewis (chrlewiscsco@gmail.com)
Date: Thu Feb 16 2006 - 23:49:38 GMT-3
I am not able to get that configuration to work either.
The documentation says
"Only one authentication packet is sent, regardless of how many valid keys
exist. The software examines the key numbers in order from lowest to
highest, and uses the first valid key it encounters".
From that I take it to mean an interface will only use one authenticaiton
string at a time, and depending on which one authenticates first, the second
one will not get in.
Chris
On 2/16/06, jacque vincent <jacque_vincent@hotmail.com> wrote:
>
> Did anybody got the following config working with the EIGRP
> authentication?
> R3 being the hub and R1&R5 the spokes.
>
> Thanks
>
>
> R3
> !
> key chain TEST
> key 5
> key-string CISCO5
> key 13
> key-string CISCO13
> !
> !
> interface Serial1/0
> ip address 167.1.135.3 255.255.255.0
> ip authentication mode eigrp 100 md5
> ip authentication key-chain eigrp 100 TEST
> encapsulation frame-relay
> no ip split-horizon eigrp 100
> frame-relay map ip 167.1.135.1 301 broadcast
> frame-relay map ip 167.1.135.5 305 broadcast
> no frame-relay inverse-arp
> !
> _______________________________________________
>
> R1
> !
> key chain TEST
> key 13
> key-string CISCO13
> !
> interface Serial0/0
> ip address 167.1.135.1 255.255.255.0
> ip authentication mode eigrp 100 md5
> ip authentication key-chain eigrp 100 TEST
> encapsulation frame-relay
> frame-relay map ip 167.1.135.3 103 broadcast
> frame-relay map ip 167.1.135.5 103
> no frame-relay inverse-arp
> !
> _______________________________________________
>
> R5
> !
> key chain TEST
> key 5
> key-string CISCO5
> !
> interface Serial0/0
> ip address 167.1.135.5 255.255.255.0
> ip authentication mode eigrp 100 md5
> ip authentication key-chain eigrp 100 TEST
> encapsulation frame-relay
> no dce-terminal-timing-enable
> frame-relay map ip 167.1.135.1 503
> frame-relay map ip 167.1.135.3 503 broadcast
> no frame-relay inverse-arp
> !
>
> _________________________________________________________________
> Take charge with a pop-up guard built on patented Microsoft. SmartScreen
> Technology.
>
>
http://join.msn.com/?pgmarket=en-ca&page=byoa/prem&xAPID=1994&DI=1034&SU=http
://hotmail.com/enca&HL=Market_MSNIS_Taglines
> Start enjoying all the benefits of MSN. Premium right now and get the
> first two months FREE*.
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Wed Mar 01 2006 - 11:28:18 GMT-3