Ok, then obviously this is an error - you don't need the area 0
authentication command if no virtual link is configured or required.
-----Original Message-----
From: Peng Zheng [mailto:pzheng830@xxxxxxxxx]
Sent: Saturday, November 30, 2002 5:51 AM
To: Justin Menga; Joe Wong; security@xxxxxxxxxxxxxx
Subject: RE: NLI's Security CCIE Boot Camp
R3 does not have interface in an area other than area
3.
--- Justin Menga <Justin.Menga@xxxxxxxxxxxxxx> wrote:
> Hi,
>
> As Joe has stated, if you have an OSPF router that
> has all physical
> interfaces in an area other than area 0, the only
> time you will ever need
> area 0 authentication commands is if a virtual-link
> is configured. Because
> a virtual-link in effect belongs to area 0, you must configure this.
>
> You state that R5 is in area 0 - I'm assuming the
> interface that connects to
> R3 is in area 3. Does R3 have any other interfaces
> in an area other than
> area 3 - if so, then you'd need a virtual link to
> R5, and therefore an area
> 0 authentication statement.
>
> Regards,
> Justin
>
> -----Original Message-----
> From: Peng Zheng [mailto:pzheng830@xxxxxxxxx]
> Sent: Friday, November 29, 2002 10:20 AM
> To: Joe Wong; security@xxxxxxxxxxxxxx
> Subject: Re: NLI's Security CCIE Boot Camp
>
>
> But R3 has no a virtual link to OSPF area 0, it
> connect to R5 by ethernet, the Ethernet is in area
> 3.
> Serial 0 on R5 is in area 0.
>
>
> --- Joe Wong <vr2zjw@xxxxxxxxxxx> wrote:
> > Yes, it is necessary as R3 has a virtual link to
> > OSPF area 0, so it is
> > consider attached to backbone area and the area 0 authentication
> > message-digest statment is need.
> >
> > >From: Peng Zheng >Reply-To: Peng Zheng >To:
> > security@xxxxxxxxxxxxxx
> > >Subject: NLI's Security CCIE Boot Camp >Date:
> Thu,
> > 28 Nov 2002 11:26:08
> > -0800 (PST) > >Hi, > >Does anyone know NLI's
> > Security CCIE Boot Camp
> > >Practice Lab Subscription? It's not a
> > >security-related question. > >R13
> > belongs to area 0 in OSPF, >R3 belong to area 3 in
> > OSPF, > >There exists
> > a tunnel between R3 and R13. All OSPF >areas has
> MD5
> > authentication. On
> > R3, they configure: >area 0 authentication
> > message-digest > >Is this
> > necessary? Why? > >Thanks for help. > >Best
> Wishes,
> > >Peng Zheng > >
> >
> >__________________________________________________
> > >Do you Yahoo!?
> > >Yahoo! Mail Plus - Powerful. Affordable. Sign up
> > now.
> > >http://mailplus.yahoo.com
> >
> >
>
------------------------------------------------------------------------
> >
> > Add photos to your messages with MSN 8. Get 2
> months
> FREE*.
>
>
> __________________________________________________
> Do you Yahoo!?
> Yahoo! Mail Plus - Powerful. Affordable. Sign up
> now.
> http://mailplus.yahoo.com
__________________________________________________
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com
