Re: How do I trace OSPF auth password

Hi,

On Wed, Jun 10, 2009 at 4:55 AM, Jared Scrivener<jscrivener_at_ipexpert.com> wrote:
> "Debug ip packet dump" should do it. Use an ACL that filters for just the
> specific source of R1 and is destined to 224.0.0.5 as the input for the
> debug. Then convert your hex output into ASCII with a tool (Ultraedit or
> something similar) and look for a string. That's one way, but there's
> probably a better one.

Further to Jared's suggestion --

"debug ip packet dump" shows OSPF hellos with the clear text password
in the clear, so you don't need to convert anything.

R1#sh run int fa0/0
Building configuration...

Current configuration : 152 bytes
!
interface FastEthernet0/0
 ip address 10.1.12.1 255.255.255.0
 ip ospf authentication
 ip ospf authentication-key HELLO
 duplex auto
 speed auto
end

R1#sh run | s router ospf
router ospf 1
 log-adjacency-changes

R1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R1(config)#router ospf 1
R1(config-router)#network 10.1.12.1 0.0.0.0 area 0
R1(config-router)#^Z
R1#

3F400990: 45C0004C 000D0000 E@.L....
3F4009A0: 0159C285 0A010C01 E0000005 0201002C .YB.....`......,
3F4009B0: 01010101 00000000 EA9B0001 48454C4C ........j...HELL
3F4009C0: 4F000000 FFFFFF00 000A1201 00000028 O..............(
3F4009D0: 00000000 00000000 FFF60003 00010004 .........v......
3F4009E0: 00000001 ....

(best viewed with a fixed width font)

cheers,
Dale

> On 6/9/09 2:15 PM, "Fahad Khan" <fahad.khan_at_gmail.com> wrote:
>
>> Lets say I need to make adj between R1 and R2 connected via any media. I
>> donot have the access of R1 and only have the access of R2. R1 is
>> preconfigured but the problem is OSPF authentication(simple clear text
>> auth) is also enabled on that, now how do i trace on R2 to get the password
>> that is configured on R1 for ospf auth. Are there any debug options?

Blogs and organic groups at http://www.ccie.net
Received on Wed Jun 10 2009 - 09:50:47 ART