Re: Rip authentication problem

From: sabrina pittarel (sabri_esame@yahoo.com)
Date: Fri Sep 01 2006 - 02:29:32 ART


Mmmm,
 beside the usual remove and re-add the configuration and be careful about white spaces...
 can you try adding "passive-interface e0/0" and "passive-interface f0/0" respectively?
 Since you are using neighbor statements, the router is currently generating unicast and multicast advertisements out of e0/0, not sure if that may play a role here.
 Not sure though...I'll lab it out as well.
 
 Sabrina

----- Original Message ----
From: Frank <ocsic@web.de>
To: Cisco certification <ccielab@groupstudy.com>
Sent: Thursday, August 31, 2006 10:03:36 PM
Subject: Rip authentication problem

Hi,

i have a strange problem, that's driving me nuts. I configured RIP
authentication between
two routers. And i have checked the configuration many times, i can see
no error on this.
Checked whitespace in the passwords. Both routers are restarted also.

"debug ip rip" tells me still:

R1 (c2600-ik9o3s3-mz.123-10a.bin) says:
*Mar 1 00:33:25.651: RIP: ignored v2 packet from 192.10.1.6 (invalid
authentication)
*Mar 1 00:33:25.651: RIP: ignored v2 packet from 192.10.1.6 (invalid
authentication)

R6 (c2600-ik9o3s3-mz.123-10a.bin): says:
*Mar 1 00:06:27.779: RIP: received packet with MD5 authentication
*Mar 1 00:06:27.779: RIP: ignored v2 packet from 192.10.1.1 (invalid
authentication)
*Mar 1 00:06:27.779: RIP: received packet with MD5 authentication
*Mar 1 00:06:27.779: RIP: ignored v2 packet from 192.10.1.1 (invalid
authentication)

and i can't see routes are installed.

Could someone give me a hint, on how to debug this in a better way?
Seems line R6 is
even not sending md5 authentication. Is it an IOS bug?

R1:

key chain RIP
 key 1
  key-string CISCO

interface FastEthernet0/0
 ip address 192.10.1.1 255.255.255.0
 ip rip authentication mode md5
 ip rip authentication key-chain RIP

router rip
 version 2
 redistribute eigrp 200 metric 1
 network 192.10.1.0
 neighbor 192.10.1.254
 neighbor 192.10.1.6
 no auto-summary

R6:

key chain RIP
 key 1
  key-string CISCO

interface Ethernet0/0
 ip address 192.10.1.6 255.255.255.0
 ip rip authentication mode md5
 ip rip authentication key-chain RIP

router rip
 version 2
 network 54.0.0.0
 network 150.1.0.0
 network 162.1.0.0
 network 192.10.1.0
 neighbor 192.10.1.1
 neighbor 192.10.1.254
 no auto-summary

Thank you,

Frank



This archive was generated by hypermail 2.1.4 : Sun Oct 01 2006 - 16:55:39 ART