Re: OSPF Secure way of AUTH

From: karim jamali <karim.jamali_at_gmail.com>
Date: Sun, 5 Apr 2009 10:38:04 +0300

hello Nauman,

Well there are two things you need to specify regarding ospf authentication
1)Specifying the type of authentication (ip ospf authentication (3 types:
null/clear text/message-digest)
2)Specifying the password

ip ospf authentication-key (clear text key) used with ip ospf
authentication command
ip ospf message-digest-key (Message Digest) used with ip ospf authentication
message-digest

Your first option :

ip ospf message-digest-key 1 md5 cisco
needs also the command ip ospf authentication message-digest

Your second option makes no sense since you are specifying the
authentication type of message-digest and using the clear text password of
cisco.What you should have done is either:
1)Use clear text for both
ip ospf authentication
ip ospf authentication-key cisco

2)Use MD5 for both
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 cisco

Any attempt of combining one with the other i guess makes no sense.

Regards,

Karim

On Sun, Apr 5, 2009 at 10:29 AM, Nauman Habib <mrnauman_at_gmail.com> wrote:

> Dear Experts,
>
> Is there any difference in these commands ?
>
> *ip ospf message-digest-key 1 md5 cisco
> *
> *Or *
> **
> *ip ospf authentication message-digest
> ip ospf authentication-key cisco*
>
> Which one is better - With Respect to CCIE LAB Exam ?
>
> Is there any difference between them - if YES - whats it ?
>
> Regards
>
> Nauman
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>

-- 
KJ
Blogs and organic groups at http://www.ccie.net
Received on Sun Apr 05 2009 - 10:38:04 ART

This archive was generated by hypermail 2.2.0 : Mon May 04 2009 - 07:39:11 ART