PROBLEMS WITH OSPF AUTHENTICATION KEYS

[jenseike]

HI ALL ,

I AM RUNNING C2600 Version 12.2(15)T9 IOS.

FIRST OF ALL, I HAVE A FRAME MULTIPONT SUBINTERFACE ON THE HUB ROUTER AND MY GOAL IS TO AUTHENTICATE TO TWO DIFERENT SPOKES ROUTERS WITH DIFERENT KEY. hERE IS PROBLEM NR. 1 : I AM NOT ABLE TO PUT IN MORE THAN ONE AUTHENTICATION KEY ON THE INTERFACE, LIKE THIS :

Rack1R4(config-subif)#IP OSPF AUTHentication-key 35 CISCO35

Rack1R4(config-subif)#IP OSPF AUTHentication-key 45 CISCO45

Rack1R4(config-subif)#DO SH RUN INT S0/0.345

Building configuration...

Current configuration : 266 bytes

!

interface Serial0/0.345 point-to-point

ip address 183.1.0.4 255.255.255.0

backup interface Dialer1

ip ospf authentication message-digest

ip ospf authentication-key 45 CISCO

ip ospf network broadcast

ip ospf priority 0

frame-relay interface-dlci 405

AS YOU CAN SEE, ONLY ONE AUTHENTICATION KEY IS BEEN ABLED ON THE INTERFACE. WHY AND WHAT DO I HAVE TO DO TO MAKE THIS INTERFACE TAKE BOTH AUT-KEY'S

SECOND PROBLEM : LOOK AT THE OUTPUT FROM THE SHOW RUN INT COMMAND... I TYPED IN THE COMMAND: IP OSPF AUTHENTICATION KEY 45 CISCO45.... AS YOU CAN SE IN THE CONFIG THIS IS NOT WHAT IS ON THE INTERFACE, BUT RATER THE KEY CISCO ???

EHY.

COULD SOMWONE EXPLAIN ALL THIS TO ME.

THANKS

JP

[ankurbhasin]

Hi JP,

As you mentioned it is multipoint subinterface I can see point-to-point configured on this sub interface? I am not sure if we can have 2 auth key on point to point interface

Regards,

Ankur

[Harold Ritter]

As pointed out by another poster, the subinterface is configured as a point-to-point, not point-t-multipoint.

As far as the issue with the key, Try using the following command instead:

ip ospf message-digest-key 35 md5 cisco35

ip ospf message-digest-key 45 md5 cisco45

Hope this helps,

[jenseike]

Hi all ,

Thanks for the replies. I did see my error in command syntax also, so fixed the problem

JP

[ankurbhasin]

Hi Hritter,

Just want to confirm was I right or not? We cannot have 2 auth keys on point-to-point interface right?

[Harold Ritter]

There is no restriction of how many keys you can use on a pt-to-pt that I know of. The original poster was just using an unappropriate command.

Hope this helps,