[c-nsp] No MD5 for iBGP with 12.3?
Hank Nussbacher
hank at efes.iucc.ac.il
Sun Nov 6 04:23:32 EST 2005
Does anyone know what IOS version to use in place of 12.3(13a) on a 7204VXR
with NPE-G1?
---------------------------------------------------------
CSCef70706 Bug Details
Headline MD5 authentication fails with iBGP neighbours
Product IOS
Feature BGP, Z-Test1 Duplicate of
Severity 3 Severity help Status Unreproducible Status help
First Found-in Version 12.3 All affected versions First Fixed-in
Version Version help
Release Notes
Symptoms
Cisco routers configured for BGP may experience peering problems when
running iBGP connections with MD5 authentication.
Conditions
When MD5 passwords are configured between IBGP peers the session may not
establish. You may see an error like the following:
%TCP-6-BADAUTH: Invalid MD5 digest from x.x.x.x(179) to x.x.x.y(11113).
Workaround
Enable BGP session but without MD5 passwords conigured
------------------------------------------------------------------
I don't think Cisco wants every customer running 12.3 to turn off MD5, or
do they?
Suggestions?
-Hank
More information about the cisco-nsp
mailing list