OSPF authentication with key rollover

From: Michy Eika (cciemaster@shingor.net)
Date: Sat Sep 16 2006 - 05:15:55 ART


Hi folks

If R1 is in a transition period( key is being superceded to new_pass from
old_pass),
Is to configure OSPF auth with key for rollover like below correct ? In
general,
 I think the router has two keys in a transition period but I concerned about
whether
this thought is correct or not. Finally old_pass will be absolutely replaced
 in the future( including R2 as well).

---R3 Hub---

interface Serial1/0 multipoint
ip address 10.123.1.3 255.255.255.0
ip ospf message-digest-key 1 md5 old_pass
ip ospf message-digest-key 2 md5 new_pass
frame-relay map ip 10.123.1.1 301 broadcast
frame-relay map ip 10.123.1.2 302 broadcast

---R1 Spoke with new key---

interface Serial0/0
ip address 10.123.1.1 255.255.255.0
encapsulation frame-relay
ip ospf message-digest-key 1 md5 old_pass
ip ospf message-digest-key 2 md5 new_pass
ip ospf priority 0
frame-relay map ip 10.123.1.2 103
frame-relay map ip 10.123.1.3 103 broadcast
no frame-relay inverse-arp
end

---R2 Spoke with old key---

interface Serial1/0
ip address 10.123.1.2 255.255.255.0
encapsulation frame-relay
ip ospf message-digest-key 1 md5 old_pass
ip ospf priority 0
frame-relay map ip 10.123.1.1 203
frame-relay map ip 10.123.1.3 203 broadcast
no frame-relay inverse-arp
end



This archive was generated by hypermail 2.1.4 : Sun Oct 01 2006 - 16:55:40 ART