Master CCNA

How to Master CCNA Ebook

 

 

My book will help you Master CCNA

Master CCNP SWITCH

How to master CCNP SWITCH ebook

 

 

My book will help you Master CCNP SWITCH

Master CCNP ROUTE

How to master CCNP ROUTE Ebook

 

 

My book will help you Master CCNP ROUTE

Print

OSPF Authentication

Written by Rene Molenaar on . Posted in OSPF

Scenario:

The local zoo needs your help with their OSPF network. Since a recent animal breakout the security department decides all routing protocols need authentication. You decide to implement OSPF authentication in any way you can.

Goal:

  • All IP addresses have been preconfigured for you.
  • Configure OSPF on all routers. Achieve full connectivity. Ensure area 2 is directly connected by using a virtual link.
  • Configure MD5 authentication for Area 0. Do not use any interface commands to activate it.
  • Configure plaintext authentication in Area 1. Use interface commands to achieve this.
  • Configure MD5 authentication for the virtual link.

IOS:

c3640-jk9s-mz.124-16.bin

Topology:

OSPF Authentication Network Topology

Video Solution:

You need to a flashplayer enabled browser to view this YouTube video

You need to register to download the GNS3 Topology File. (Registration is Free!)

Only registered users can write comments!

Comments (4)

  • avatar
    uscallesen

    When configuring md5 authentication without assigning an authentication-key at the interface level - The ospf packet contents is NOT encrypted the OSPF header gets an Auth Type = Cryptographic but the LSA's are sent in clear text.

    IE noone should use this setup in real life ;-)

  • avatar
    ReneMolenaar

    Hello Uffe,

    Good point. If you read closely the task says Do not use any interface commands to activate it.

    You can activate authentication for the entire area under the OSPF process and configure a key on the interface level ;) That's the goal of this task.

    Thanks for your comment!

    Rene

  • avatar
    uscallesen

    Hi Rene - yeah it's that exact statement that I feel is a little misleading as you cannot configure MD5 authentication without configuring it at the interface level.

    Thanks alot for your hard work with this site and the labs - I'm prepping for ROUTE and fine them excellent in that regard.

  • avatar
    ReneMolenaar

    Hi Uffe,

    No worries. I'm trying to create tasks that look a bit similar to Cisco exams or the way you get questions at the CCIE exam. It's better to have questions where people have to think about the solution instead of just telling them what to do (or so I hope/believe ;D)

    Good luck with your CCNP!

    Rene