RE: OSPF Authentication : Best Practice

From: Darby Weaver (darbyweaver@yahoo.com)
Date: Mon Mar 19 2007 - 09:12:06 ART


Yes, actually there is.

And it is a very noble question.

All you have to do is create more than one key and
then rotate them. You are allowed to have more than
one key and the ability to rotate them as I recall.

I did this and it works as I recall on one of the NMC
Labs.

As I recall.

--- "Salau,Olayemi" <Olayemi.Salau@southampton.gov.uk>
wrote:

> I've come across a task somewhere that stipulates to
> do authentication
> without letting the neighbour relationships go down.
>
> Is there a logic to resolve this kind of issue, ie.
> a way of doing
> things 1 by 1 so that the "neighbourships" don't get
> affected during the
> configuration of authentication?
>
> Many Thanks
> _________________________________________________
> Olayemi Salau
> Network Analyst
> I.T. Solutions Division
> Southampton City Council
> ( 023 8083 4070 7 077 8811 2036 3 079 5825 7509
> * olayemi.salau@southampton.gov.uk
> _________________________________________________
> This e-mail is intended for the addressee only. If
> you are not the
> intended recipient, please be aware that the
> unauthorised use or
> disclosure of the information it contains, or the
> unauthorised copying
> or re-transmission of the e-mail are strictly
> prohibited. Such action
> may result in legal proceedings. If the e-mail has
> been sent to you in
> error, please accept our apologies, advise the
> sender as soon as
> possible and then delete the message. Under the
> Freedom of Information
> Act 2000 / Data Protection Act 1998, the contents of
> this e-mail,
> whether it is marked confidential or otherwise, may
> be disclosed. No
> employee, Councillor or agent is authorised to
> conclude by e-mail any
> binding agreement with another party on behalf of
> Southampton City
> Council. The Council does not accept service by
> e-mail of court
> proceedings, other processes or formal notices of
> any kind without
> specific prior written agreement. E-mails to and
> from Southampton City
> Council may be monitored in accordance with the law
>
> -----Original Message-----
> From: nobody@groupstudy.com
> [mailto:nobody@groupstudy.com] On Behalf Of
> Scott Morris
> Sent: 17 March 2007 12:56
> To: 'Jeff Mullan'; 'Cisco certification'
> Subject: RE: OSPF Authentication : Best Practice
>
> On the exam do whatever you want, as long as the
> exam doesn't give you
> specifics.
>
> The "area # authentication" is a Cisco shortcut to
> enable authentication
> on
> each interface in a particular area. You have to
> put the key on the
> interface, so whether you do both there or not is
> really a personal
> choice.
>
>
> Scott Morris, CCIE4 (R&S/ISP-Dial/Security/Service
> Provider) #4713,
> JNCIE
> #153, CISSP, et al.
> CCSI/JNCI-M/JNCI-J
> IPexpert VP - Curriculum Development
> IPexpert Sr. Technical Instructor
> smorris@ipexpert.com
> http://www.ipexpert.com
>
>
>
> -----Original Message-----
> From: nobody@groupstudy.com
> [mailto:nobody@groupstudy.com] On Behalf Of
> Jeff
> Mullan
> Sent: Saturday, March 17, 2007 4:55 AM
> To: Cisco certification
> Subject: OSPF Authentication : Best Practice
>
> Folks, Seeking recommendation from exam
> point-of-view. For OSPF
> authentication, if the task doesnt mention where to
> bind the
> authentication
> what would be the best practice ? Ideally, I like to
> do it on the
> interface,
> it gives me more visibility into whats going on and
> where !! Just wanted
> your thoughts ? How would you folks do it in the
> exam ?
> Thanks,
> -JM
>
>



This archive was generated by hypermail 2.1.4 : Sun Apr 01 2007 - 06:35:51 ART