From: Frank (ocsic@web.de)
Date: Fri Sep 01 2006 - 02:48:42 ART
sabrina pittarel schrieb:
Well, actually it's Lab 6 from IE. And there are passiv interface
statements i have removed for
testing, because i wanted to get this authentication working first.
So i have remove the neigbor statement, as i think it should be the
same. Cause it just
make multicast to unicast traffic.
....
It actually does not change it, as i have tried it at this moment.
Frank
> Mmmm,
> beside the usual remove and re-add the configuration and be careful about white spaces...
> can you try adding "passive-interface e0/0" and "passive-interface f0/0" respectively?
> Since you are using neighbor statements, the router is currently generating unicast and multicast advertisements out of e0/0, not sure if that may play a role here.
> Not sure though...I'll lab it out as well.
>
> Sabrina
>
> ----- Original Message ----
> From: Frank <ocsic@web.de>
> To: Cisco certification <ccielab@groupstudy.com>
> Sent: Thursday, August 31, 2006 10:03:36 PM
> Subject: Rip authentication problem
>
> Hi,
>
> i have a strange problem, that's driving me nuts. I configured RIP
> authentication between
> two routers. And i have checked the configuration many times, i can see
> no error on this.
> Checked whitespace in the passwords. Both routers are restarted also.
>
> "debug ip rip" tells me still:
>
> R1 (c2600-ik9o3s3-mz.123-10a.bin) says:
> *Mar 1 00:33:25.651: RIP: ignored v2 packet from 192.10.1.6 (invalid
> authentication)
> *Mar 1 00:33:25.651: RIP: ignored v2 packet from 192.10.1.6 (invalid
> authentication)
>
> R6 (c2600-ik9o3s3-mz.123-10a.bin): says:
> *Mar 1 00:06:27.779: RIP: received packet with MD5 authentication
> *Mar 1 00:06:27.779: RIP: ignored v2 packet from 192.10.1.1 (invalid
> authentication)
> *Mar 1 00:06:27.779: RIP: received packet with MD5 authentication
> *Mar 1 00:06:27.779: RIP: ignored v2 packet from 192.10.1.1 (invalid
> authentication)
>
>
> and i can't see routes are installed.
>
> Could someone give me a hint, on how to debug this in a better way?
> Seems line R6 is
> even not sending md5 authentication. Is it an IOS bug?
>
> R1:
>
> key chain RIP
> key 1
> key-string CISCO
>
> interface FastEthernet0/0
> ip address 192.10.1.1 255.255.255.0
> ip rip authentication mode md5
> ip rip authentication key-chain RIP
>
> router rip
> version 2
> redistribute eigrp 200 metric 1
> network 192.10.1.0
> neighbor 192.10.1.254
> neighbor 192.10.1.6
> no auto-summary
>
> R6:
>
> key chain RIP
> key 1
> key-string CISCO
>
> interface Ethernet0/0
> ip address 192.10.1.6 255.255.255.0
> ip rip authentication mode md5
> ip rip authentication key-chain RIP
>
> router rip
> version 2
> network 54.0.0.0
> network 150.1.0.0
> network 162.1.0.0
> network 192.10.1.0
> neighbor 192.10.1.1
> neighbor 192.10.1.254
> no auto-summary
>
>
> Thank you,
>
> Frank
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Sun Oct 01 2006 - 16:55:39 ART