OSPF Key Chain

[Trent211111]

Are there any different requirements or variables when Configuring OSPF Key Chain auth from IOS to Nexus vs IOS to IOS?

I am having issues doing just that on Nexus to IOS. All the configuration options are present on both OS however the authentication/neighbor-ship is not establishing...any thoughts?

[MHM Cisco World]

https://community.cisco.com/t5/switching/nx-os-ospf-key-chain-authentication-algorithms/td-p/3186162

it is nexus issue it not support HASH so you only have MD5 

check link above

[Trent211111]

hmac-sha-256 is present on both of the switches I want to configure.

[MHM Cisco World]

check the link again it seem to me even if the NSK support it platform is not support it.
that what I know.

[Trent211111]

Those are on Nexus 5/6k , Im on Nexus 9k

[Trent211111]

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/7-x/unicast/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_Unicast_Routing_Configuration_Guide_7x/m-configuring-ospfv2-7x.html#id_86820

[MHM Cisco World]

http://www.uni-koeln.de/~pbogusze/posts/OSPF_authentication_between_IOS-XE_and_NX-OS.html

try specify the algorithm

[Trent211111]

That is what I have on each switch and appropriate interface. Obv the date is not correct now but rest assured it is updated to the current time

conf t
key chain OSPF_KEY_CHAIN1
key 1
key-string Test1
cryptographic-algorithm hmac-sha-256
send-lifetime 02:40:00 Jul 11 2022 05:55:00 Jul 11 2022
accept-lifetime 02:40:00 Jul 11 2022 05:55:00 Jul 11 2022
exit
key 2
key-string Test2
cryptographic-algorithm hmac-sha-256
send-lifetime 20:19:00 Jul 10 2022 20:30:00 Jul 10 2022
accept-lifetime 20:18:00 Jul 10 2022 20:31:00 Jul 10 2022
end

conf t
interface gigabitethernet 0/0
ip ospf authentication key-chain OSPF_KEY_CHAIN1
end

[MHM Cisco World]

Check workaround if it success then the algorithm is issue with nexus,

Only config key chain with md5 and see result.

[Trent211111]

Yeah I will give that a try. Ill let you know.

[balaji.bandi]

how is your config look like - as per i know nexus have different support algorithm compare to IOS and IOS XE

good to know IOS and nexus version you having issue, along with sample config. (i would also check MTU)

show ip ospf traffic give you what went wrong :

https://community.cisco.com/t5/networking-knowledge-base/understanding-show-ip-ospf-traffic-command/ta-p/3148322

[paul driver]

Hello
Unless it has changed my understanding is key-chain isnt supported for OSPFv2