RE: OSPF Auth with Key Rollover on Hub & Spoke (non-broadcast)

From: Victor Cappuccio (cvictor@protokolgroup.com)
Date: Thu Jul 27 2006 - 01:12:26 ART


Please sorry if I erased the thread log of this email, but it was to long to
still add more

 

Bill.

 

 

I've copied your exact configuration, but with my IP Addressing and seems to
be working nice and smooth

R3(s) - R1(h) - R2(s). Try to put the ip ospf authentication me to see what
happes also try to change the hello interval to 1 sec to make things for
testing for rapid, maybe it's just in its way to establish adjacencies.

 

 

R1

show ip ospf neigh

 

Neighbor ID Pri State Dead Time Address Interface

204.12.3.3 0 FULL/DROTHER 00:00:03 204.12.123.3 Serial0/0

204.12.2.2 0 FULL/DROTHER 00:00:03 204.12.123.4 Serial0/0

 

interface Serial0/0

 ip address 204.12.123.1 255.255.255.0

 encapsulation frame-relay

 ip ospf authentication message-digest

 ip ospf message-digest-key 1 md5 CISCO

 ip ospf message-digest-key 2 md5 CISCONEW

 ip ospf hello-interval 1

 frame-relay map ip 204.12.123.3 103 broadcast

 frame-relay map ip 204.12.123.2 102 broadcast

 no frame-relay inverse-arp

 frame-relay lmi-type cisco

 

 

 

R2:

 

interface Serial0/0

 ip address 204.12.123.2 255.255.255.0

 encapsulation frame-relay

 ip ospf authentication message-digest

 ip ospf message-digest-key 1 md5 CISCO

 ip ospf message-digest-key 2 md5 CISCONEW

 ip ospf hello-interval 1

 ip ospf priority 0

 frame-relay map ip 204.12.123.1 201 broadcast

 frame-relay map ip 204.12.123.3 201

 no frame-relay inverse-arp

 frame-relay lmi-type cisco

 

router ospf 1

 router-id 204.12.2.2

 log-adjacency-changes

 network 204.12.123.2 0.0.0.0 area 0

 

R3

 

router ospf 1

 router-id 204.12.3.3

 network 204.12.123.3 0.0.0.0 area 0

 

interface Serial0/0

 ip address 204.12.123.3 255.255.255.0

 encapsulation frame-relay

 ip ospf authentication message-digest

 ip ospf message-digest-key 1 md5 CISCO

 ip ospf hello-interval 1

 ip ospf priority 0

 clock rate 64000

 no fair-queue

 frame-relay map ip 204.12.123.1 301 broadcast

 frame-relay map ip 204.12.123.2 301

 no frame-relay inverse-arp



This archive was generated by hypermail 2.1.4 : Tue Aug 01 2006 - 07:13:48 ART