From: Khawar Butt (khawarb@khawarb.com)
Date: Wed Aug 06 2008 - 09:41:02 ART
Hi Tony,
As Shahid said, Virtual Links are a link in Area 0. So, you want all links
in Area 0 to be authenticated, the Virtual Link is also a part of it. There
are 2 different ways of doing it.
In your example, you have Area 0 connected to Area 5 and Area 5 connected to
Area 2. Let's assume R1 is the ABR connecting Area 0 and Area 5 and R2 is
the router connecting Area 5 and Area 2.
Option 1
R1
Router OSPF 1
Area 5 virtual-link 2.2.2.2 authentication message-digest
Area 5 virtual-link 2.2.2.2 message-digest-key 1 MD5 cisco
(Assuming that 2.2.2.2 is the router-id of R2)
R2
Router OSPF 1
Area 5 virtual-link 1.1.1.1 authentication message-digest
Area 5 virtual-link 1.1.1.1 message-digest-key 1 MD5 cisco
(Assuming that 1.1.1.1 is the router-id of R1)
Option 2
R1
Router OSPF 1
Area 0 authentication message-digest
Area 5 virtual-link 2.2.2.2 message-digest-key 1 MD5 cisco
(Assuming that 2.2.2.2 is the router-id of R2)
R2
Router OSPF 1
Area 0 authentication message-digest
Area 5 virtual-link 1.1.1.1 message-digest-key 1 MD5 cisco
(Assuming that 1.1.1.1 is the router-id of R1)
Although R2 is not physically connected to Area 0, it is logically connected
via the Virtual Link.
Hope this helps.
Khawar Butt
CCIE#12353 (R/S , Security , SP , Voice)
http://www.khawarb.com
http://www.netmetric-solutions.com
E-mail : khawarb@khawarb.com
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Shahid Ansari
Sent: Wednesday, August 06, 2008 8:26 PM
To: Tony Grooves
Cc: Cisco certification
Subject: Re: Area 0 and Virtual links authenticated.
In Short ,A virtual link is really an extension of Area 0, and if Area 0
is running link authentication, the virtual link must be configured for it
as well.
If you go through Internetwork expert Workbook R/S labs will clarify lots of
things.
Shahid Ansari
On Wed, Aug 6, 2008 at 3:08 PM, Tony Grooves <tgrooves@gmail.com> wrote:
> Hi guys.
>
> I have a concern about authentication with area 0 and virtual links.
> If the task ask to configure Area 0 authenticated and you have it
separeted
> with area 5 in the middle.
> Will you consider virtual links as part of area 0 and also configure the
> same method of authentication on them?
>
> Also what about if you have area 0, area 5 and area 2 in this order, will
> you authenticate the virtual links between the ABRs?
>
> Thanks a lot for any help on this.
>
> Tony.
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
Blogs and organic groups at http://www.ccie.net
This archive was generated by hypermail 2.1.4 : Mon Sep 01 2008 - 08:15:29 ART