From: Godswill Oletu (oletu@inbox.lv)
Date: Sat Apr 29 2006 - 18:11:03 GMT-3
Akaradeth,
If the IGP is OSPF, though each router will complain, but they will be able
to use the different keys to authenticate, the only different will be that
the hub router will be rotating the keys.
For EIGRP, you can use two Interface Virtual Templates on the hub router,
one to each spoke, then create a multilink interface on the hub and assign
the ip address to the multilink interface. Apply your different keys to each
Virtual Template that points to the corresponding spoke Router. You will
need two 'frame-relay interface-dlci XXX ppp virtual-template N' on the hub
router and one each on the spoke routers.
Alternatively, enable two EIGRP processes, eg EIGRP 1 & EIGRP 2 on the hub
router and EIGRP 1 on one of the spokes and EIGRP 2 on the other spoke.
Create your keys and authenticate each spoke and then redistribute between
EIGRP 1 & EIGRP 2 on the hub to achive spoke-to-spoke reachibility - This
might be another method to cheat the 'split horizon' issue on a single
multiaccess interface hub, without disabling 'split horizon eigrp' on the
hub - "future Lab workbook writers take note"
HTH
Godswill Oletu
----- Original Message -----
From: <Akaradeth.N@datacraft-asia.com>
To: <rofernandez@us.telefonica.com>; <ccielab@groupstudy.com>
Sent: Saturday, April 29, 2006 4:31 PM
Subject: RE: EIGRP Authentication, Multiple Keys on a key-chain
> Hi Roberto and GS,
>
>
>
> Have you got the answer of this problem? I have stuck on this problem as
> well, please tell me how to fix this.
>
>
>
> Akaradeth
>
>
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]
> Sent: Wednesday, March 22, 2006 7:49 AM
> To: ccielab@groupstudy.com
> Subject: EIGRP Authentication, Multiple Keys on a key-chain
>
>
>
> Friends,
>
>
>
> IEWEB v3, Lab 14, 4.6
>
>
>
> One hub router needs to authenticate two neighbors on a common
>
> multi-access segment (frame relay, at this case) using different
>
> strings.
>
>
>
> I've configured different keys, with different key-strings, and always
>
> the leaf router which should use the second key-string it's unable to
>
> recognize the Hellos from the hub router. The hub, on the other hand
>
> it's able to see the Hellos from both leaf routers.
>
>
>
> It looks to me than there is a problem for the leaf router to recognize
>
> its key (if it is not the first one), when multiple keys are included.
>
>
>
> The answer key, just considers configuring two keys on the HUB, one to
>
> each leaf, but it doesn't work, at least on the software versions on the
>
> IE Racks.
>
>
>
> Any input on the subject is welcomed
>
>
>
> Best Regards
>
> Roberto
>
>
>
> _______________________________________________________________________
>
> Subscription information may be found at:
>
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
****************************************************************************
> This email and all contents are subject to the following disclaimer:
>
> http://www.datacraft-asia.com/disclaimer
>
****************************************************************************
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Mon May 01 2006 - 11:41:59 GMT-3