Re: OSPF authentication using rollover keys

From: Mike O (mikeeo@email.msn.com)
Date: Sun Jul 09 2006 - 19:40:51 ART


Just a heads up. When I was in RTP last Thursday, Howard (the proctor) told
us to log off , restart our workstations and he would login and save our
configs. One thing I know the script looks for the right config and the
desired out come. For example if the script looks for a certain route in the
table and its not there it will go login to the configured router and
examine the configuration. Then a real proctor goes over your config "line
by line" as Howard stated.
----- Original Message -----
From: "Standley, Jeffrey" <jeffrey.standley@shawgrp.com>
To: <sy1977@gmail.com>; <frenzeus@streamyx.com>
Cc: <swm@emanon.com>; <pbhatkoti@gmail.com>; <lchuon@gmail.com>;
<ccielab@groupstudy.com>
Sent: Sunday, July 09, 2006 6:27 PM
Subject: Re: OSPF authentication using rollover keys

> In an answer to part of frenzeus's question about reloading of equipment
> in the lab...I've been personally told by 2 of the cisco proctors that
> they DO NOT reload the devices before grading. I was told they grade the
> rack as you leave it. This of course doesn't mean that a device will not
> get reloaded by accident.
>
> Jeff Standley
> Network Engineer (CCNP, CCSP)
> The Shaw Group, Inc.
> 4171 Essen Ln
> Baton Rouge, LA 70809
> 225.987.6209
>
> ----- Original Message -----
> From: nobody@groupstudy.com <nobody@groupstudy.com>
> To: allboutcisco <frenzeus@streamyx.com>
> Cc: Scott Morris <swm@emanon.com>; Radioactive Frog <pbhatkoti@gmail.com>;
> Larry Chuon <lchuon@gmail.com>; Cisco certification
> <ccielab@groupstudy.com>
> Sent: Sun Jul 09 17:06:21 2006
> Subject: Re: OSPF authentication using rollover keys
>
> I am also facing the same problem , everything works fine with brodacst
> network..but with NBMA I always have problem when two diffrent key on
> HUB.
>
> Appreciate if some one can test this on NBMA and confirm if it works or
> not?
>
> Thanks
>
>
> On 7/9/06, allboutcisco <frenzeus@streamyx.com> wrote:
>>
>> Hi group,
>>
>> I picked this thread up some time back. Till date, myself i have yet to
>> be
>> able to get it working after reloading of the routers, despite the
>> numerous
>> attempts with all the debugs, it jus seems that the rollover stops after
>> a
>> reload.
>>
>> Even attempts to wait "forever" the neighbor just wouldn't form. I
>> believe
>> i'm not the only person faced with this issue. Question is, is there
>> really
>> a way to get by this or the only way after a reload is to manually
>> re-apply
>> the "ip ospf message-digest-key" command on the hub?
>>
>> Appreciate if someone could shed some light, if being faced with this in
>> the
>> real lab, can i safely assume that the proctors will not reload the
>> routers
>> before grading or should i just NOT configure the authentication (thereby
>> losing crucial points) to avoid neigbors not establishing if in the event
>> that the proctors DO reload the routers?
>>
>> Any advice out there is greatly appreciated!
>>
>> Thanks.
>>
>> -K
>>
>> ----- Original Message -----
>> From: "Scott Morris" <swm@emanon.com>
>> To: "'Radioactive Frog'" <pbhatkoti@gmail.com>
>> Cc: "'Larry Chuon'" <lchuon@gmail.com>; "'Cisco certification'"
>> <ccielab@groupstudy.com>
>> Sent: Monday, May 29, 2006 1:29 AM
>> Subject: RE: OSPF authentication using rollover keys
>>
>>
>> > Not sure about that (haven't tried real hard). According to the
>> > debugs,
>> > it
>> > sends with the keys it knows about. And there are notes about
>> mismatched
>> > keys (key-id not present on spoke side), but it just seems that after a
>> > while the hub side gives up and thinks he's surrounded by idiots. :)
>> >
>> > Perhaps it's a count thing, in which case changing the frequency of
>> > your
>> > hello's would change it. I was running on non-broadcast interface, so
>> > things were only every 30 seconds anyway. I'm not by my systems at the
>> > moment, so anyone else wanna give it a whirl?
>> >
>> >
>> > Scott Morris, CCIE4 (R&S/ISP-Dial/Security/Service Provider) #4713,
>> JNCIE
>> > #153, CISSP, et al.
>> > CCSI/JNCI
>> > IPExpert CCIE Program Manager
>> > IPExpert Sr. Technical Instructor
>> > smorris@ipexpert.com
>> > http://www.ipexpert.com
>> >
>> >
>> >
>> > -----Original Message-----
>> > From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
>> > Radioactive Frog
>> > Sent: Sunday, May 28, 2006 10:28 AM
>> > To: Scott Morris
>> > Cc: Larry Chuon; Cisco certification
>> > Subject: Re: OSPF authentication using rollover keys
>> >
>> > Is there any way, to reduce this convergence time from 10 minute to
>> couple
>> > of minute ?
>> >
>> > Frog.
>> >
>> > _______________________________________________________________________
>> > Subscription information may be found at:
>> > http://www.groupstudy.com/list/CCIELab.html
>> >
>> > _______________________________________________________________________
>> > Subscription information may be found at:
>> > http://www.groupstudy.com/list/CCIELab.html
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
> -----------------------------------------
> *****************Internet Email Confidentiality
> Footer******************
>
> Privileged/Confidential Information may be contained in this
> message.
> If you are not the addressee indicated in this message (or
> responsible
> for delivery of the message to such person), you may not copy or
> deliver
> this message to anyone. In such case, you should destroy this
> message
> and notify the sender by reply email. Please advise immediately if
> you
> or your employer do not consent to Internet email for messages of
> this
> kind. Opinions, conclusions and other information in this message
> that
> do not relate to the official business of The Shaw Group Inc. or
> its
> subsidiaries shall be understood as neither given nor endorsed by
> it.
> ___________________________________________________________________
> _____
> The Shaw Group Inc.
> http://www.shawgrp.com
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Tue Aug 01 2006 - 07:13:47 ART