From: Snow, Tim (timothy.snow@eds.com)
Date: Mon Sep 22 2003 - 23:09:32 GMT-3
Sorry about that. Oversight on my behalf. I see that you do have multiple
key-chains setup and your referencing the correct names.
I believe key numbers have to be the same.
My initial thought was incorrect, I'll see if I can set this up and see if
it works. Can you "debug eigrp packets" are you seeing any error with
regards to authentication?
Tim
#12042
-----Original Message-----
From: navaid@rogers.com [mailto:navaid@rogers.com]
Sent: Monday, September 22, 2003 9:59 PM
To: Snow, Tim; ccielab@groupstudy.com
Subject: Re: RE: EIGRP authentication failure...
Tim,
Thanks for reply.
I have two eigrp processes running on both R5 and R6. eigrpkey100 is used
for eigrp 100 eigrpkey101 is used for eigrp 101
I am using key 1 for both key chain. Do I have to keep the key number
unique. Since they belong to different key chain I think I can keep the key
number same.
Navaid
>
> From: "Snow, Tim" <timothy.snow@eds.com>
> Date: 2003/09/22 Mon PM 09:47:35 EDT
> To: "'navaid@rogers.com'" <navaid@rogers.com>, ccielab@groupstudy.com
> Subject: RE: EIGRP authentication failure...
>
> Your key chain name is wrong on r5. Either it's supposed to be
> "eigrpkey100" in your "ip authen key eigrp 101 xxxxx" command and your
> key is correct, or vice versa depending upon how you wanted it
> configured.
>
> ip authentication key-chain eigrp 101 eigrpkey101
> end
>
> R5#sh key chain
> Key-chain eigrpkey100:
> key 1 -- text "ipexpert_100"
> accept lifetime (always valid) - (always valid) [valid now]
> send lifetime (always valid) - (always valid) [valid now]
> Key-chain
> eigrpkey101:
> key 1 -- text "ipexpert_101"
> accept lifetime (always valid) - (always valid) [valid now]
> send lifetime (always valid) - (always valid) [valid now]
>
>
>
> Tim
> #12042
>
> -----Original Message-----
> From: navaid@rogers.com [mailto:navaid@rogers.com]
> Sent: Monday, September 22, 2003 9:38 PM
> To: ccielab@groupstudy.com
> Subject: EIGRP authentication failure...
>
>
> Both R6 and R5 are connected to same ethernet segment.
> EIGRP authentication is not working between R5 and R6. I have re-typed
> the key and interface config. Following is config. I am not sure what
> is wrong can someone please help...
>
> Navaid
>
>
> -----------R6--------------------------
> R6#sh run int e1
> Building configuration...
>
> Current configuration : 175 bytes
> !
> interface Ethernet1
> ip address 140.10.101.6 255.255.255.0
> ip authentication mode eigrp 101 md5
> ip authentication key-chain eigrp 101 eigrpkey101
> media-type 10BaseT
> end
>
> R6#sh key chain
> Key-chain eigrpkey101:
> key 1 -- text "ipexpert_101"
> accept lifetime (always valid) - (always valid) [valid now]
> send lifetime (always valid) - (always valid) [valid now]
> Key-chain
> eigrpkey100:
> key 1 -- text "ipexpert_100"
> accept lifetime (always valid) - (always valid) [valid now]
> send lifetime (always valid) - (always valid) [valid now]
>
>
> --------------R5---------------------
> R5#sh run int e0
> Building configuration...
>
> Current configuration : 155 bytes
> !
> interface Ethernet0
> ip address 140.10.101.5 255.255.255.0
> ip authentication mode eigrp 101 md5
> ip authentication key-chain eigrp 101 eigrpkey101
> end
>
> R5#sh key chain
> Key-chain eigrpkey100:
> key 1 -- text "ipexpert_100"
> accept lifetime (always valid) - (always valid) [valid now]
> send lifetime (always valid) - (always valid) [valid now]
> Key-chain
> eigrpkey101:
> key 1 -- text "ipexpert_101"
> accept lifetime (always valid) - (always valid) [valid now]
> send lifetime (always valid) - (always valid) [valid now]
>
> 1
>
> ***Get your CCIE and a FREE vacation: Shop.GroupStudy.com***
> ______________________________________________________________________
> _
> Please help support GroupStudy by purchasing your study materials from:
> shop.groupstudy.com
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
1
***Get your CCIE and a FREE vacation: Shop.GroupStudy.com***
This archive was generated by hypermail 2.1.4 : Wed Oct 01 2003 - 07:24:33 GMT-3