Home > Ticket 1 – OSPF Authentication

Ticket 1 – OSPF Authentication

May 6th, 2018 in TSHOOT v2 Go to comments

1.Client is unable to ping R1’s serial interface from the client.

Problem was disable authentication on R1, check where authentication is not given under router ospf of R1. (use ipv4 Layer 3)

Configuration of R1:

interface Serial0/0/0
 description Link to R2
 ip address 10.1.1.1 255.255.255.252
 ip nat inside
 encapsulation frame-relay
 ip ospf message-digest-key 1 md5 TSHOOT
 ip ospf network point-to-point
!
router ospf 1
 router-id 1.1.1.1
 log-adjacency-changes
 network 10.1.2.0 0.0.0.255 area 12
 network 10.1.10.0 0.0.0.255 area 12
 default-information originate always
!

Configuration of R2:
interface Serial0/0/0.12 point-to-point
 ip address 10.1.1.2 255.255.255.252
 ip ospf authentication message-digest
 ip ospf message-digest-key 1 md5 TSHOOT
!

Answer: on R1 need command ip ospf authentication message-digest”

Ans1) R1
Ans2) IPv4 OSPF Routing
Ans3) Enable OSPF authentication on the s0/0/0 interface using the “ip ospf authentication message-digest” command.

Note:

There are two ways of configuring OSPF authentication:

interface Serial0/0/0
  ip ospf message-digest-key 1 md5 TSH00T
!
router ospf 1
  area 12 authentication message-digest

OR

interface Serial0/0/0
  ip ospf authentication message-digest
  ip ospf message-digest-key 1 md5 TSH00T

So you have to check carefully in both interface mode and “router ospf 1”. If none of them has authentication then it is a fault.

Comments (30) Comments
Comment pages
1 27 28 29 30 31 50 38
  1. purecoffee
    January 9th, 2015

    hi guys

    here is the Khattak strategy

    https://www.networktut.com/download/TSHOOT_Strategy_by_Khattak.pdf

    good luck

  2. JDub
    January 12th, 2015

    Gezahegn,
    The 169.x.x.x or no ip simply means the client isn’t getting an IP address from the DHCP server. If you look at the khattak strategy, there are 5 different trouble tickets in the exam where this could occur, and 5 different causes/solutions.

  3. Vinnie
    January 12th, 2015

    Hi Guys,

    I passed with a score of 890/1000, I recommend you follow all the advice on this website, it helped me very much, especially a comment I read which warned of scrolling down the screen to see the rest of the answers in the answer 2 part of a trouble ticket. It can easily be overlooked if you are focused on the screen, trying to choose the correct answer.

    A very big thank you to everyone who has provided me with very valuable input on this website!!

    Good luck with your Tshoot exam.

  4. Ali
    January 12th, 2015

    R1(config)#int serial 0/0/0.12

    R1(config-subif)#ip ospf authentication message-digest

  5. Sal
    January 13th, 2015

    I passed the TSHOOT today – thanks guys.

  6. Sam
    January 13th, 2015

    @Ali:

    Or – (depending on Ticket number) – this MD5 Auth config method:

    R1(config)#router ospf 1
    R1(config-router)#router-id 1.1.1.1
    R1(config-router)#area 12 authentication message-digest

  7. ZAI
    January 15th, 2015

    Dears Should we configure the routers or just spot the issue and choose the Answers?

  8. Rehan
    January 15th, 2015

    all ticket is still valid and and thanks to khattak strategy its real nice shortcut to solve tshoot exam and finally i got 1000/1000.

  9. Lycas
    January 15th, 2015

    Do you get the descriptions of the troubleshoot ticket on the exam to

    for example like this: Ticket 1: OSPF Authentication?
    Or just Ticket 1

  10. Sam
    January 15th, 2015

    Just “Ticket 1″…

  11. samer
    January 15th, 2015

    passed today 1000/1000 everything here is valid
    best wishes

  12. today
    January 16th, 2015

    Passed today!everything is valid.

  13. Anonymous
    January 16th, 2015

    In the exam every ticket have the name ? Example ticket 1 OSPF Autenthication

  14. Ahmed
    January 16th, 2015

    @Anonymous
    No, only ticket number without description
    you should trouble shoot to find the problem

  15. Amber
    January 18th, 2015

    @Ahmed

    when you say without description in exam you don’t get the line – “1.Client is unable to ping R1’s serial interface from the client.”?
    or do you get brief line saying what general problem is?

    also are answers Ans1, 2 and 3 on each TT page on this site exact wording as choices given in exam?

  16. Aadi
    January 18th, 2015

    its gugent please

  17. Arshad
    January 18th, 2015

    TSHOOT Tickets: When IP addresses [10.2.x.x] on Clients are assigned: Follow below flowchart

    IF From Client1:
    PING to 209.65.200..226,OK? —Yes>>> BGP Neighbor on R1
    |
    No
    |
    IF Ping to 10.1.1.1,OK?—Yes>>> Ping from R1 to server, OK?–Yes>>>NAT ACL on R1
    | ……………………………………………………………………|
    No“““““““““““““““““““No>>>ACL permit on R1
    |
    IF ping to 10.1.1.2,OK?—Yes>>>OSPF Auth on R1
    |
    No
    |
    IF ping to gateway,OK?—Yes>>>PING to f0/0 on R4, OK?—Yes>>>IF ping to s0/0 on R4, OK?
    |………………………………………………..|………………………………………………..|
    No“““““““““““““No“““““““““““““`No
    |……………………………………………….|…………………………………………………|
    VACL on DSW1“““““““`Passive Interface on R1“““““then, EIGRP AS, correct?
    “““““““““““““““““““““““““““|“““““““|
    “““““““““““““““““““““““““““No““““““`Yes
    “““““““““““““““““““““““““““`|“““““““|
    ““““““““““““““““““““““““Correct AS on R4““`Redis-
    “““““““““““““““““““““““““““““““`tribute on R4

  18. Anonymous
    January 18th, 2015

    comment box doesn’t like txt format

  19. Farid
    January 18th, 2015

    Please note answer is:
    ip ospf authentication message-digest command has to be added on subinterface s0/0/0/0.12 on R1 (even Khattak says that).

    Also note there are 2 ways to enable OSPF authentication
    (config-if)# ip ospf authentication message-digest <<<< interface
    Or
    (config-router)# area # authentication message-digest <<<<< ospf process

  20. Eng.shaymaa
    January 19th, 2015

    ALhamdollah I will passss teshoot exam today with 1000/1000
    with 13 t/t no ip helper and no eigrp AS and 3 MCQ no D/D
    thanx networktut
    I m CCNP now
    go to CCIE….

  21. ENGR-TMUS-CCNP
    January 19th, 2015

    Thanks Networktut, your format helped a lot with my TSHOOT exam.
    13 TT, 2 MCQ and 1 DD. – – – 1000/1000

  22. Student4help
    January 20th, 2015

    “””””Ticket Answers + Tech notes and Tips & Tricks etc. are supplied within the available PULL DOWN MENU, located at the MIDDLE/BOTTOM of each Packet Tracer Main Screen – Pls. click at the small “v”-sign there, to select a Ticket Answer etc. from the Menu.””””””

    what does the above statement means, i am not able to find the PULL DOWN MENU, please guide.

  23. anon
    January 21st, 2015

    @student4help

    bottom center…right above the bottoms that say new and delete there is a drop down field that says “ticket answers” drop down to ans1, 2 ,3

  24. anon
    January 21st, 2015

    buttons*

  25. palo73
    January 21st, 2015

    Hi all,
    all great on this page! However the example of configuration above is bad.
    Once the R1 has following configuration (just copy lines which regards of authentication):

    Configuration of R1:
    interface Serial0/0/0/0

    ip ospf message-digest-key 1 md5 TSHOOT

    !
    router ospf 1

    area 12 authentication message-digest

    !

    and the R2 has:
    interface Serial0/0/0/0.12 point-to-point

    ip ospf authentication message-digest
    ip ospf message-digest-key 1 md5 TSHOOT
    !

    routers becomes ospf neighbors. So probably the router R1 is missing the line with area 12 authentication message-digest and then the answer ic correct.

  26. Student4help
    January 21st, 2015

    @Anon

    Thank you..

  27. Ravi..
    January 21st, 2015

    Jai Shree Ram!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    Finally clear Tshoot with 1000/1000 and completed CCNP…………………
    2xMCQ, 1xDD and 13 TTs except DHCP helper and wrong eigrp AS.
    It was so nervousness before exam but while attempting feel quit better.
    Thanks to all guys who advised. Lot of thanks for Networktut team, you guys are rock.
    Just read and memorize Khatak strategy and go ahead. Even With khatak strategy you can complete the exam within 30 mnts by running “ipconfig and ping” command at clients.

    It’s so easy…..best of luck for all who are going for exam.

  28. Lynn
    January 21st, 2015

    Palo73:

    OSPF authentication message-digest can be enabled EITHER on the (ospf) I/F (pointing towards it’s ospf Auth peer) OR within the actual OSPF Process / Area –

    The 2 Config methods can be mixed and matched among the 2 peers.

  29. Gary
    January 21st, 2015

    Just got pass on tshoot with 1000/1000, 3 MCQ, 13 tickets, thanks 9tut, all the meterial in here still valid, I had 2 tickets on ospf authentication with the same answer. I don’t have IP HELPER, IP NAT&WRONG AS NUMBER.

  30. jemmo
    January 22nd, 2015

    Give thanks to God.May his name be praised. The ccnp journey has been a good and exciting adventure. I managed 1000/1000 today, Alleluia. Thanks to networktut, Khattak and naren .
    I cannot thank you enough.

Comment pages
1 27 28 29 30 31 50 38