Re: OSPF Authentication Methods - (3)

From: Marko Milivojevic <markom_at_ipexpert.com>
Date: Fri, 20 May 2011 11:45:01 -0700

It's a perfectly valid point and I stated that in my first sentence.
It depends on the point of view. For me "no authentication" means that
"no information pertaining to the presence or absence of
authentication is present". In OSPF, when using NULL authentication,
information that this authentication type is used is present, hence my
agreement with 3 methods.

In large scheme of things, it's not really that relevant is
authentication type 0 an authentication or not, as long as we know
it's there.

--
Marko Milivojevic - CCIE #18427
Senior Technical Instructor - IPexpert
FREE CCIE training: http://bit.ly/vLecture
Mailto: markom_at_ipexpert.com
Telephone: +1.810.326.1444
Web: http://www.ipexpert.com/
On Fri, May 20, 2011 at 11:40, Narbik Kocharians <narbikk_at_gmail.com> wrote:
> I always saw it as a two step process as well, you enable authentication and
> then, apply. When you enable authentication it needs to be enabled on both
> ends of the link. So i guess we are saying the same thing.
>
> But i still have problems with OSPF having three authentication methods.
> Especially when they say type "0" is one type of authentication and when you
> look it up, it states that "0" means NO Authentication.
>
> But i see everyones point here.
>
> On Fri, May 20, 2011 at 11:07 AM, Marko Milivojevic <markom_at_ipexpert.com>
> wrote:
>>
>> On Fri, May 20, 2011 at 10:50, Narbik Kocharians <narbikk_at_gmail.com>
>> wrote:
>> > So OSPF can not work without authentication.
>>
>> If you consider "null authentication" as "no authentication", then it
>> can. However, if you consider it as authentication, then no, it can't
>> :-).
>>
>> I always approached OSPF authentication as a two-stage authentication
>> - one stage is type-match, the other one is password match. From that
>> perspective, I would agree with the statement above that OSPF cannot
>> work without the authentication, as the first-stage is always present
>> in the packets.
>>
>> --
>> Marko Milivojevic - CCIE #18427
>> Senior Technical Instructor - IPexpert
>>
>> FREE CCIE training: http://bit.ly/vLecture
>>
>> Mailto: markom_at_ipexpert.com
>> Telephone: +1.810.326.1444
>> Web: http://www.ipexpert.com/
>
>
>
> --
> Narbik Kocharians
> CCSI#30832, CCIE# 12410 (R&S, SP, Security)
> www.MicronicsTraining.com
> Sr. Technical Instructor
> Ask about our FREE Lab Voucher with our Boot Camps
> YES! We take Cisco Learning Credits!
> Training & Remote Racks available
Blogs and organic groups at http://www.ccie.net
Received on Fri May 20 2011 - 11:45:01 ART

This archive was generated by hypermail 2.2.0 : Wed Jun 01 2011 - 09:01:11 ART