I just finished playing around with something like this at home and
discovered the same thing.  I don't have the link handy, but I did find
an example of OSPF virtual links with authentication on CCO that
included this command.  

I'm assuming this is necessary because once you've created the virtual
link Router A is--as far as it knows--directly connected to area 0.  It
does seem a little odd to have to configure authentication on the
virtual link and then also configure authentication for area 0.  Perhaps
some debugging would show what it actually happening and why it is
necessary.

The next time I do an ospf lab I'll check into it, assuming I remember.
 :-)

John

>>> "Hollis"  10/28/01 9:16:04 PM >>>
Ran into following during a lab scenario, but can't find any
documentation
on this. Can someone please verify if this is correct?

With md5 authentication configured in OSPF Area 0, following must also
be
configured on ABR with virtual link... (the ABR which is not directly
connected to Area 0.) "area 0 authentication message-digest".  Note
that
Router A does not have any interfaces actually in Area 0.

Router A..................
router ospf 110
 log-adjacency-changes
 area 0 authentication message-digest  (??????)
 area 1 virtual-link 192.168.5.5
 network 172.16.4.0 0.0.0.255 area 1
 network 172.16.12.0 0.0.0.255 area 3

Router B...............
interface Serial0.504 point-to-point
 ip address 172.16.1.1 255.255.255.0
 ip ospf message-digest-key 4 md5 mypassword
 frame-relay interface-dlci 504
!
router ospf 110
 log-adjacency-changes
 area 0 authentication message-digest
 area 1 virtual-link 192.168.2.2
 network 172.16.1.0 0.0.0.255 area 0
 network 172.16.5.0 0.0.0.255 area 1




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=24527&t=24457
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to