Re: OSPF Authentication Methods - (3)

Is the glass half empty or half full?

On Fri, May 20, 2011 at 2:45 PM, Marko Milivojevic <markom_at_ipexpert.com>wrote:

> It's a perfectly valid point and I stated that in my first sentence.
> It depends on the point of view. For me "no authentication" means that
> "no information pertaining to the presence or absence of
> authentication is present". In OSPF, when using NULL authentication,
> information that this authentication type is used is present, hence my
> agreement with 3 methods.
>
> In large scheme of things, it's not really that relevant is
> authentication type 0 an authentication or not, as long as we know
> it's there.
>
> --
> Marko Milivojevic - CCIE #18427
> Senior Technical Instructor - IPexpert
>
> FREE CCIE training: http://bit.ly/vLecture
>
> Mailto: markom_at_ipexpert.com
> Telephone: +1.810.326.1444
> Web: http://www.ipexpert.com/
>
> On Fri, May 20, 2011 at 11:40, Narbik Kocharians <narbikk_at_gmail.com>
> wrote:
> > I always saw it as a two step process as well, you enable authentication
> and
> > then, apply. When you enable authentication it needs to be enabled on
> both
> > ends of the link. So i guess we are saying the same thing.
> >
> > But i still have problems with OSPF having three authentication methods.
> > Especially when they say type "0" is one type of authentication and when
> you
> > look it up, it states that "0" means NO Authentication.
> >
> > But i see everyones point here.
> >
> > On Fri, May 20, 2011 at 11:07 AM, Marko Milivojevic <markom_at_ipexpert.com
> >
> > wrote:
> >>
> >> On Fri, May 20, 2011 at 10:50, Narbik Kocharians <narbikk_at_gmail.com>
> >> wrote:
> >> > So OSPF can not work without authentication.
> >>
> >> If you consider "null authentication" as "no authentication", then it
> >> can. However, if you consider it as authentication, then no, it can't
> >> :-).
> >>
> >> I always approached OSPF authentication as a two-stage authentication
> >> - one stage is type-match, the other one is password match. From that
> >> perspective, I would agree with the statement above that OSPF cannot
> >> work without the authentication, as the first-stage is always present
> >> in the packets.
> >>
> >> --
> >> Marko Milivojevic - CCIE #18427
> >> Senior Technical Instructor - IPexpert
> >>
> >> FREE CCIE training: http://bit.ly/vLecture
> >>
> >> Mailto: markom_at_ipexpert.com
> >> Telephone: +1.810.326.1444
> >> Web: http://www.ipexpert.com/
> >
> >
> >
> > --
> > Narbik Kocharians
> > CCSI#30832, CCIE# 12410 (R&S, SP, Security)
> > www.MicronicsTraining.com
> > Sr. Technical Instructor
> > Ask about our FREE Lab Voucher with our Boot Camps
> > YES! We take Cisco Learning Credits!
> > Training & Remote Racks available
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>

-- 
Ronald Angello
Senior Network Architect
CCIE 17846
CCDP, CCIP, CCNP
Blogs and organic groups at http://www.ccie.net