From: Bill Eyer (beyer@optonline.net)
Date: Tue Oct 21 2008 - 18:16:41 ARST
That's what I thought too, until a Mock Lab graded me wrong. I still
think you only have to do it under the virtual link, but who wants to
loose points just because the grading script doesn't solve the problem
some ways. Do the Proctors really check? Who knows.
Bill
Hobbs wrote:
> Do you really need "area 0 authentication message-digest" ? I thought this
> just makes it easier to enable authentication on all your are 0 links. You
> can just manually do it in the VL...
>
> On Tue, Oct 21, 2008 at 4:09 AM, Jonny English <redkidneybeans@gmail.com>wrote:
>
>
>> you need the "area 0 authentication message-digest" on routers that have a
>> virtual-link as well, because they are "virtually" connected to area 0.
>>
>> On Tue, Oct 21, 2008 at 10:00 PM, stephen skinner <stephenski@gmail.com
>>
>>> wrote:
>>>
>>> hello Omkar
>>>
>>> thanks for your answer ,
>>>
>>> what do think about adding the "area 0 authentication message-digest"
>>> command on R1 ,
>>>
>>> i suppose because i have put the above command on the Area 0 routers i
>>> should put it on R1 as well, even though it didnt seem to need it??
>>>
>>> any thoughts
>>>
>>> cheers
>>> On Tue, Oct 21, 2008 at 1:56 PM, Omkar Tambalkar <
>>> omkar.groupstudy@gmail.com
>>>
>>>> wrote:
>>>>
>>>> You would configure the authentication on virtual link between R1 and
>>>>
>> R2
>>
>>>> beause area 0 is being extended to R1 via that virtual link. So it will
>>>>
>>> be
>>>
>>>> On R1: area 5 virtual-link [router-id of R2] authentication
>>>>
>>> message-digest
>>>
>>>> message-digest-key md5 xxxx
>>>> On R2: area 5 virtual-link [router-id of R1] authentication
>>>>
>>> message-digest
>>>
>>>> message-digest-key md5 xxxx
>>>>
>>>> I think its tricky because the authentication task was asked before
>>>> creating the virtual link. So you are extending area 0 after
>>>>
>> configuring
>>
>>> the
>>>
>>>> authentication. If you dont configure authentication on the virtual
>>>>
>> link
>>
>>>> then the routes from the area 2 will not propogate to area 0.
>>>>
>>>> HTH,
>>>> -Later
>>>> Omkar
>>>>
>>>> On Mon, Oct 20, 2008 at 10:24 PM, stephen skinner <
>>>>
>> stephenski@gmail.com
>>
>>>> wrote:
>>>>
>>>>
>>>>> hello,
>>>>>
>>>>> i have the following questions i am not to sure about ,
>>>>>
>>>>> could someone please help
>>>>>
>>>>> Area 2 ----Area 5 ------Area 0
>>>>> R1 R1-R2 R2-R3
>>>>> 0/0 0/1 0/0 0/1 0/0 (all ethernets)
>>>>>
>>>>> Senario
>>>>> configure OSPF strongest authentication for area 0 by using the "area
>>>>>
>> 0
>>
>>>>> authentication message-digest" command
>>>>>
>>>>> Connect area 2 to the main ospf network , Do not use tunnels ( use the
>>>>> "area
>>>>> x virtual link" command)
>>>>>
>>>>> my question is ,
>>>>>
>>>>> If i am in the Lab and i have added the "area 0 authentication
>>>>> message-digest" to R2 and R3 ..
>>>>>
>>>>> do i need to add the command "area 0 authentication message-digest"
>>>>>
>> to
>>
>>> my
>>>
>>>>> router R1 , thats in Area 2 ??
>>>>>
>>>>> i have configed it up , without the above command in R1 , and it works
>>>>> fine.
>>>>>
>>>>> i am just wondering what people think is " best practise"
>>>>>
>>>>>
>>>>>
>>>>> Another question
>>>>>
>>>>> when trying this out , i found i had to type all the information on
>>>>>
>> one
>>
>>>>> line
>>>>> , even thought the IOS puts these commands on two lines.
>>>>>
>>>>> i am not going mad am i ???? ,
>>>>> not much sleep this week ..
>>>>>
>>>>> TIA
>>>>>
>>>>> MD5
>>>>> (i typed )
>>>>> area 2 virtual-link 2.2.2.2 authentication message-digest
>>>>> message-digest-key
>>>>> 1 md5 CISCO
>>>>> (IOS Showed)
>>>>> area 2 virtual-link 2.2.2.2 authentication message-digest
>>>>> area 2 virtual-link 2.2.2.2 message-digest-key 1 md5 CISCO
>>>>>
>>>>> --
>>>>> Only two things are infinite, the universe and human stupidity, and
>>>>>
>> I'm
>>
>>>>> not
>>>>> sure about the former.
>>>>>
>>>>>
>>>>> Blogs and organic groups at http://www.ccie.net
>>>>>
>>>>>
>>>>>
>> _______________________________________________________________________
>>
>>>>> Subscription information may be found at:
>>>>> http://www.groupstudy.com/list/CCIELab.html
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>> --
>>> Only two things are infinite, the universe and human stupidity, and I'm
>>>
>> not
>>
>>> sure about the former.
>>>
>>>
>>> Blogs and organic groups at http://www.ccie.net
>>>
>>> _______________________________________________________________________
>>> Subscription information may be found at:
>>> http://www.groupstudy.com/list/CCIELab.html
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>> --
>> Thank You,
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html
>>
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
Blogs and organic groups at http://www.ccie.net
This archive was generated by hypermail 2.1.4 : Sat Nov 01 2008 - 15:35:21 ARST