From: Jens Petter (jenseike@start.no)
Date: Fri Sep 01 2006 - 02:33:59 ART
This is usually one of two things, first you maybe have emty spaces at the
end of the key and second "order of operation"... Make sure you do the
config in the right order.
Be sure that you have made the key chains before you enter the config on to
the interface..
Jens
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Frank
Sent: 1. september 2006 07:04
To: Cisco certification
Subject: Rip authentication problem
Hi,
i have a strange problem, that's driving me nuts. I configured RIP
authentication between
two routers. And i have checked the configuration many times, i can see
no error on this.
Checked whitespace in the passwords. Both routers are restarted also.
"debug ip rip" tells me still:
R1 (c2600-ik9o3s3-mz.123-10a.bin) says:
*Mar 1 00:33:25.651: RIP: ignored v2 packet from 192.10.1.6 (invalid
authentication)
*Mar 1 00:33:25.651: RIP: ignored v2 packet from 192.10.1.6 (invalid
authentication)
R6 (c2600-ik9o3s3-mz.123-10a.bin): says:
*Mar 1 00:06:27.779: RIP: received packet with MD5 authentication
*Mar 1 00:06:27.779: RIP: ignored v2 packet from 192.10.1.1 (invalid
authentication)
*Mar 1 00:06:27.779: RIP: received packet with MD5 authentication
*Mar 1 00:06:27.779: RIP: ignored v2 packet from 192.10.1.1 (invalid
authentication)
and i can't see routes are installed.
Could someone give me a hint, on how to debug this in a better way?
Seems line R6 is
even not sending md5 authentication. Is it an IOS bug?
R1:
key chain RIP
key 1
key-string CISCO
interface FastEthernet0/0
ip address 192.10.1.1 255.255.255.0
ip rip authentication mode md5
ip rip authentication key-chain RIP
router rip
version 2
redistribute eigrp 200 metric 1
network 192.10.1.0
neighbor 192.10.1.254
neighbor 192.10.1.6
no auto-summary
R6:
key chain RIP
key 1
key-string CISCO
interface Ethernet0/0
ip address 192.10.1.6 255.255.255.0
ip rip authentication mode md5
ip rip authentication key-chain RIP
router rip
version 2
network 54.0.0.0
network 150.1.0.0
network 162.1.0.0
network 192.10.1.0
neighbor 192.10.1.1
neighbor 192.10.1.254
no auto-summary
Thank you,
Frank
This archive was generated by hypermail 2.1.4 : Sun Oct 01 2006 - 16:55:39 ART