I just finished playing around with something like this at home and discovered the same thing. I don't have the link handy, but I did find an example of OSPF virtual links with authentication on CCO that included this command.
I'm assuming this is necessary because once you've created the virtual link Router A is--as far as it knows--directly connected to area 0. It does seem a little odd to have to configure authentication on the virtual link and then also configure authentication for area 0. Perhaps some debugging would show what it actually happening and why it is necessary. The next time I do an ospf lab I'll check into it, assuming I remember. :-) John >>> "Hollis" 10/28/01 9:16:04 PM >>> Ran into following during a lab scenario, but can't find any documentation on this. Can someone please verify if this is correct? With md5 authentication configured in OSPF Area 0, following must also be configured on ABR with virtual link... (the ABR which is not directly connected to Area 0.) "area 0 authentication message-digest". Note that Router A does not have any interfaces actually in Area 0. Router A.................. router ospf 110 log-adjacency-changes area 0 authentication message-digest (??????) area 1 virtual-link 192.168.5.5 network 172.16.4.0 0.0.0.255 area 1 network 172.16.12.0 0.0.0.255 area 3 Router B............... interface Serial0.504 point-to-point ip address 172.16.1.1 255.255.255.0 ip ospf message-digest-key 4 md5 mypassword frame-relay interface-dlci 504 ! router ospf 110 log-adjacency-changes area 0 authentication message-digest area 1 virtual-link 192.168.2.2 network 172.16.1.0 0.0.0.255 area 0 network 172.16.5.0 0.0.0.255 area 1 Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=24527&t=24457 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]