FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
mle2802
Staff
Staff
Article Id 275853
Description

This article describes the reason for the error 'Mismatched Authentication Key' seen on Cisco when establishing OSPF adjacency with FortiGate using MD5 authentication.

Scope FortiGate.
Solution

This happens because the MD5 key is not set on the FortiGate site. To configure the key in version 6.0 and below, use the following commands:


config router ospf
 config ospf-interface

    edit [Interface Entry Name]
        set interface [Interface]
        set authentication md5
        set md5-key [Key ID] [Key String Value]
    next
end


For version 6.2 and above:


config router ospf
 config ospf-interface

    edit [Interface Entry Name]
        set interface [Interface]
        set authentication md5
         config md5-keys
            edit [Key ID]
                set key-string [Key String Value]
            next
        end
    next
end


After that, verify if the OSPF adjacency is formed by the following commands:

get router info OSPF interface

get router info OSPF neighbor

get router info ospf database brief

Contributors