Re: ospf virtual link Area authentication

From: Fahad Khan (fahad.khan@gmail.com)
Date: Tue Oct 21 2008 - 04:04:04 ARST

Dear Stephen,

In case of virtual-link , you have to enable authentication on virtual link
as well.

so far the second query is concerned, You don't have to set the password
string necessarily; Just enable message-digest authentication. (any one plz
confirm if i am wrong).

HTH

regards,

On 10/21/08, stephen skinner <stephenski@gmail.com> wrote:
>
> hello,
>
> i have the following questions i am not to sure about ,
>
> could someone please help
>
> Area 2 ----Area 5 ------Area 0
> R1 R1-R2 R2-R3
> 0/0 0/1 0/0 0/1 0/0 (all ethernets)
>
> Senario
> configure OSPF strongest authentication for area 0 by using the "area 0
> authentication message-digest" command
>
> Connect area 2 to the main ospf network , Do not use tunnels ( use the
> "area
> x virtual link" command)
>
> my question is ,
>
> If i am in the Lab and i have added the "area 0 authentication
> message-digest" to R2 and R3 ..
>
> do i need to add the command "area 0 authentication message-digest" to my
> router R1 , thats in Area 2 ??
>
> i have configed it up , without the above command in R1 , and it works
> fine.
>
> i am just wondering what people think is " best practise"
>
>
>
> Another question
>
> when trying this out , i found i had to type all the information on one
> line
> , even thought the IOS puts these commands on two lines.
>
> i am not going mad am i ???? ,
> not much sleep this week ..
>
> TIA
>
> MD5
> (i typed )
> area 2 virtual-link 2.2.2.2 authentication message-digest
> message-digest-key
> 1 md5 CISCO
> (IOS Showed)
> area 2 virtual-link 2.2.2.2 authentication message-digest
> area 2 virtual-link 2.2.2.2 message-digest-key 1 md5 CISCO
>
> --
> Only two things are infinite, the universe and human stupidity, and I'm not
> sure about the former.
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
> 

-- 
Fahad Khan

Blogs and organic groups at http://www.ccie.net

This archive was generated by hypermail 2.1.4 : Sat Nov 01 2008 - 15:35:21 ARST