From: Scott Morris (swm@emanon.com)
Date: Sun Oct 01 2006 - 00:24:44 ART
Are you asking or telling? ;)
You CAN.... And it will work with your peers (if they're identical).
However, you won't get any points for it.
"ip ospf authentication message-digest" needs to have "ip ospf
message-digest-key ..." in order to use the password CISCO. You configured
a clear-text key yet enabled message-digest authentication.
When you do "show ip ospf interface s0/0.235" you'll find that
message-digest authentication IS indeed enabled but is using Key 0, which is
the NULL keyset. So if all of your routers are like that you'll get peers,
and things will look good but you aren't using Key 1 CISCO, so you don't get
points.
HTH,
Scott Morris, CCIE4 (R&S/ISP-Dial/Security/Service Provider) #4713, JNCIE
#153, CISSP, et al.
CCSI/JNCI-M/JNCI-J
IPExpert VP - Curriculum Development
IPExpert Sr. Technical Instructor
smorris@ipexpert.com
http://www.ipexpert.com
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Magmax
Sent: Saturday, September 30, 2006 11:06 PM
To: ccielab@groupstudy.com
Subject: ospf authentication
interface Serial0/0.235 multipoint
ip address 190.168.315.3 255.255.255.0
ip ospf authentication message-digest
ip ospf authentication-key CISCO
frame-relay map ip 192.168.315.2 502 broadcast
frame-relay map ip 192.168.315.3 503 broadcast
no frame-relay inverse-arp
Guys,
I can enable ospf authentication on per interface basis like above
This archive was generated by hypermail 2.1.4 : Wed Nov 01 2006 - 07:29:03 ART