[c-nsp] No MD5 for iBGP with 12.3?

[Oliver Boehmer (oboehmer)]

Hank,

are you encountering this problem? The bug you referenced was closed as
unreproducible, we were not able to recreate the problem. So it could
have been a corner case in a single customer environment. 
I am aware of networks running 12.3M with MD5 just fine, so if you do
see the problem, please contact TAC and provide all available details so
we can nail this one down..

	oli

Hank Nussbacher <> wrote on Sunday, November 06, 2005 10:24 AM:

> Does anyone know what IOS version to use in place of 12.3(13a) on a
> 7204VXR with NPE-G1?
> 
> ---------------------------------------------------------
> CSCef70706 Bug Details
> 
> 
> Headline  MD5 authentication fails with iBGP neighbours
> Product  IOS
> Feature  BGP, Z-Test1  Duplicate of
> Severity  3  Severity help Status  Unreproducible  Status help
> First Found-in Version  12.3   All affected versions  First Fixed-in
> Version    Version help
> Release Notes
> 
> Symptoms
> Cisco routers configured for BGP may experience peering problems when
> running iBGP connections with MD5 authentication.
> 
> Conditions
> When MD5 passwords are configured between IBGP peers the session may
> not establish. You may see an error like the following:
> 
> %TCP-6-BADAUTH: Invalid MD5 digest from x.x.x.x(179) to
> x.x.x.y(11113). 
> 
> Workaround
> Enable BGP session but without MD5 passwords conigured
> ------------------------------------------------------------------
> I don't think Cisco wants every customer running 12.3 to turn off
> MD5, or do they?
> 
> Suggestions?
> 
> -Hank
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/