[c-nsp] No MD5 for iBGP with 12.3?

Hank Nussbacher hank at efes.iucc.ac.il
Sun Nov 6 04:23:32 EST 2005


Does anyone know what IOS version to use in place of 12.3(13a) on a 7204VXR 
with NPE-G1?

---------------------------------------------------------
CSCef70706 Bug Details


Headline  MD5 authentication fails with iBGP neighbours
Product  IOS
Feature  BGP, Z-Test1  Duplicate of
Severity  3  Severity help Status  Unreproducible  Status help
First Found-in Version  12.3   All affected versions  First Fixed-in 
Version    Version help
Release Notes

Symptoms
Cisco routers configured for BGP may experience peering problems when
running iBGP connections with MD5 authentication.

Conditions
When MD5 passwords are configured between IBGP peers the session may not
establish. You may see an error like the following:

%TCP-6-BADAUTH: Invalid MD5 digest from x.x.x.x(179) to x.x.x.y(11113).

Workaround
Enable BGP session but without MD5 passwords conigured
------------------------------------------------------------------
I don't think Cisco wants every customer running 12.3 to turn off MD5, or 
do they?

Suggestions?

-Hank



More information about the cisco-nsp mailing list