Re: OSPF Secure way of AUTH

Adding to what Karim has said:

The advantage I see with using Type 2(Message-Digest) as opposed to Type
1(Clear Text) authentication would be that Type 2 allows you to change the
password without having to disable authentication as below:

interface Serial0/1
ip address x.x.x.x x.x.x.x.
ip ospf message-digest-key 15 md5 test1
ip ospf message-digest-key 20 md5 test2

where "test2" is the new password string.

Regards,
W.

On Sun, Apr 5, 2009 at 10:38 AM, karim jamali <karim.jamali_at_gmail.com>wrote:

> hello Nauman,
>
> Well there are two things you need to specify regarding ospf authentication
> 1)Specifying the type of authentication (ip ospf authentication (3 types:
> null/clear text/message-digest)
> 2)Specifying the password
>
> ip ospf authentication-key (clear text key) used with ip ospf
> authentication command
> ip ospf message-digest-key (Message Digest) used with ip ospf
> authentication
> message-digest
>
> Your first option :
>
> ip ospf message-digest-key 1 md5 cisco
> needs also the command ip ospf authentication message-digest
>
>
> Your second option makes no sense since you are specifying the
> authentication type of message-digest and using the clear text password of
> cisco.What you should have done is either:
> 1)Use clear text for both
> ip ospf authentication
> ip ospf authentication-key cisco
>
> 2)Use MD5 for both
> ip ospf authentication message-digest
> ip ospf message-digest-key 1 md5 cisco
>
> Any attempt of combining one with the other i guess makes no sense.
>
> Regards,
>
> Karim
>
>
> On Sun, Apr 5, 2009 at 10:29 AM, Nauman Habib <mrnauman_at_gmail.com> wrote:
>
> > Dear Experts,
> >
> > Is there any difference in these commands ?
> >
> > *ip ospf message-digest-key 1 md5 cisco
> > *
> > *Or *
> > **
> > *ip ospf authentication message-digest
> > ip ospf authentication-key cisco*
> >
> > Which one is better - With Respect to CCIE LAB Exam ?
> >
> > Is there any difference between them - if YES - whats it ?
> >
> > Regards
> >
> > Nauman
> >
> >
> > Blogs and organic groups at http://www.ccie.net
> >
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
> >
> >
> >
> >
> >
> >
> >
> >
>
>
> --
> KJ
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Sun Apr 05 2009 - 10:44:23 ART