08-12-2011 12:58 AM - edited 03-03-2019 06:20 AM
customer replaced a chassis of gsr, and forgot ospf md5 key. he use encrypt password from config to config ospf neighbor. he found some neighbor is up.
but some ospf neighbor can't get up.
what affect ospf MD5 comute result!
thank you!
Tom
08-12-2011 01:35 AM
Hi,
if you are doing authentication in OSPF then your password must match on both ends otherwise your adjacency will go down, the authentication type must also be the same.When no key is configured on the interface then the router assumes this is the NULL key.
I don't know if GSR uses the IOS and/or same syntax as on other devices but if so then you can issue the following commands:
-sh run | s router ospf
-sh run interface
-sh ip ospf nei
and then for each neighbour do the 2 first commands.
you could also do a debug ip ospf adjacency so you'll know why the neighbours don't come up.
Regards.
Alain.
08-12-2011 01:51 AM
Hi Alain
thank you!
ios will comupte MD5 value for ospf , i want to know how router computer md5 for ospf.
customer using encrypt password from backup configration file to config md5 after replace the RP and chassis, not using key, because customer forgot key.
customer found some neighbor is up, some neighbor is down. but the interface ,config ,ios ver is same as old chassis.
i want to know what element can affect router compute md5 result.
thank you!
Tom
08-12-2011 01:55 AM
Hi
from another aspect.
step 1 we config ospf md5 authentication for one ospf neighbor,the neighbor is up. we got a md5 string.
step 2 if we delete this config, and reconfig ospf md5 authentication , everthing has not changed, only reconfig. what md5 string we got, i think it is same as step 1 is that right.
thank you!
Tom
08-12-2011 05:03 AM
Hi,
maybe this should help even if I don't totally understand your problem.
http://tools.ietf.org/html/draft-ietf-ospf-md5-02
and yes nothing has changed if you still use the same config.
fly a écrit:
customer using encrypt password from backup configration file to config md5 after replace the RP and chassis, not using key, because customer forgot key.
what you mean by that? type 7 can be decrypted on the router.
Regards.
Alain.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide