[nsp] cisco password hash problems?

[Hank Nussbacher]

At 12:10 PM 13-04-04 -0700, Bruce Pinsky wrote:

>|
>|
>|> Recreate it?  I should downgrade my routers so as to provide debugging?
>|> :-)
>|
>
>Not necessarily.  Or perhaps in your lab.

Lab?  You got me laughing!   -Hank


>|> Versions: 12.0(25)S2 upgraded to 12.2(18)S1 and "some" OSPF+BGP Md5 pswds
>|> stopped working.  Not all - just some.
>|
>
>Yes, the nature of the bug is that some OSPF MD5 passwords could be
>invalid.  Specifically, ones that are marked as encrypted when they are
>really the cleartext or are marked as encrypted, but the supplied password
>is not the properly encrypted one.
>
>As for BGP, I don't see a bug of similar nature.  However, there are the
>ones that I mentioned that could be involved.
>
>
>|> -Hank
>|
>|
>| I found several BGP/MD5 issues including:
>|
>|       CSCeb07106 BGP and md5 authentication issues - TCP-6-TOOBIG
>| ~     CSCeb06813 BGP Peer will not come up after disabling MD5
>|       CSCec29952 bgp md5 authentication not working when configured 
>in                        mpls
>| vpn vrf
>|       CSCed65333 Malformed sync ack packet with BGP MD5 authentication
>|
>|
>| --
>| =========
>| bep
>|
>
>- --
>=========
>bep
>
>-----BEGIN PGP SIGNATURE-----
>Version: GnuPG v1.2.2 (MingW32)
>
>iD8DBQFAfDs+E1XcgMgrtyYRAvesAKCYBN2Nvrbymz66B//R9JJbM+NitgCg7kIM
>Or6Ea6UvsCsqQ8dpRLrxpjw=
>=4QlV
>-----END PGP SIGNATURE-----