Mailing List Archive: 5.7R2.4 another issue: OSPF authentication with Zebra

5.7R2.4 another issue: OSPF authentication with Zebra

Jun 26, 2003, 2:06 AM

Post #1 of 3 (1172 views)

More things showing up with 5.7R2.4. Now, OSPF authentication doesn't
seem to work at least with Zebra. The authentication with the same
configuration did work while using 5.6R2.4.

The trace from OSPF shows only the following:

Jun 26 08:55:03 OSPF packet ignored: authentication failure (bad cksum).
Jun 26 08:55:03 OSPF packet ignored: authentication failure from n.n.n.n

The problem could be at the Zebra end beacus the MD5 authentication
works with Cisco routers.

--
- Matti -

5.7R2.4 another issue: OSPF authentication with Zebra [ In reply to ]

mjs at cc

Jun 26, 2003, 2:20 AM

Post #2 of 3 (1159 views)

Permalink

I wrote

> More things showing up with 5.7R2.4. Now, OSPF authentication
> doesn't seem to work at least with Zebra. The authentication with
> the same configuration did work while using 5.6R2.4.

And this issue is already solved.

I got access to the Zebra. In its configuration there were two
keys defined for the interface: one with MD5 and one without.
When the key for non-MD5 authentication was removed, the
adjacency between Juniper and Zebra became full.

I wonder why the configuration did work while using 5.6R2.4.

--
- Matti -

5.7R2.4 another issue: OSPF authentication with Zebra [ In reply to ]

rcheh at juniper

Jun 26, 2003, 1:42 PM

Post #3 of 3 (1184 views)

Permalink

Matti,

With JUNOS 5.7, there are 2 ways to set OSPF authentication,

set protocols ospf area <area-id> interface <intf> authentication ...

or,

set protocols ospf area <area-id> authentication-type <type>
set protocols ospf area <area-id> interface <intf> authentication-key ..

Only the latter will work in 5.6 and the only way I can think of
to have both md5 and simple-password "configured" in a 5.6 router
is to have such configured in 5.7 and have it downgraded, in which
case, the configuration using the first method should be ignored.
This is only a guess.

Please let me know if there are more issues concerning this. Thank
you.

Raymond

Matti Saarinen wrote:
> I wrote
>
>
>>More things showing up with 5.7R2.4. Now, OSPF authentication
>>doesn't seem to work at least with Zebra. The authentication with
>>the same configuration did work while using 5.6R2.4.
>
>
> And this issue is already solved.
>
> I got access to the Zebra. In its configuration there were two
> keys defined for the interface: one with MD5 and one without.
> When the key for non-MD5 authentication was removed, the
> adjacency between Juniper and Zebra became full.
>
> I wonder why the configuration did work while using 5.6R2.4.
>
>