%OSPF-4-INVALIDKEY: Key ID 0 received on interface gi0/0/0 %OSPF-4-NOVALIDKEY: No valid authentication send key is available on interface gi0/0/0

[yaqoobkk]

%OSPF-4-INVALIDKEY: Key ID 0 received on interface gi0/0/0 

%OSPF-4-NOVALIDKEY: No valid authentication send key is available on interface gi0/0/0

Above messages are received while configuring the OSPF on ASR 100X platform and the IOS-XE version16.6.4 Is there any way we can configure a NULL md5 key for the message digest. The rest of our network is configured with md5-digest authentication but without defining any md5 key

OSPF

Device Info:ASR1001-X-V05

[Leo Laohoo]

---

@yaqoobkk wrote:

Is there any way we can configure a NULL md5 key for the message digest.

---

Remove the OSPF password configuration on Gi0/0/0.

[yaqoobkk]

But rest of all network OSPF password is there and working.

[yaqoobkk]

But rest of all network OSPF password is there and working.

Any suggestion please

Thanks

[pman]

Hi,

I Suggests you look at the answer in the attached link:

https://community.cisco.com/t5/routing/asr900-ospf-4-novalidkey-no-valid-authentication-send-key-is/td-p/2625879

[yaqoobkk]

Dear Thanks for the reply and below is my auth config on ospf and interface:


facing the same issue on ASR1001x



Router OSPF 212:

area 0 authentication message-digest



On interface:

ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 xxxxx



Kindly suggest

[yaqoobkk]

I have configure ASR1001-X-V05 device as BRAS and working fine.

In case of  AAA/Radius server failure want to users can connect through username and password without AAA authentication and can serve the internet.

Any suggestion please.

Reagrds 

[pman]

Hi,

aaa authorization exec default group radius local

All users who want to log in to the access server have to be authorized using Radius (first method) or local database (second method)