[c-nsp] MPLS TE conver from IOS to IOS-XR

Mark Tinka mtinka at globaltransit.net
Sun Feb 26 22:05:24 EST 2012


One thing I'd like to add for those who may be running RSVP-
TE between IOS XR and Junos platforms with HMAC-MD5 
authentication:

Your IOS XR authentication configuration would need to look 
like this:

key chain your-key-chain-name
 key 1
  accept-lifetime 00:00:00 january 01 2000 infinite
  key-string password <your-password-here>
  send-lifetime 00:00:00 january 01 2000 infinite
  cryptographic-algorithm HMAC-MD5


The 'accept-lifetime' and 'send-lifetime' commands are 
required because of an inter-op issue between IOS XR and 
Junos, which IOS and IOS XE don't have.

IOS XR would need to implement the changes that IOS and IOS 
XE did in order to inter-op with Junos without having these 
problems, or needing those commands in the first place.

Without those commands, authentication between IOS XR and 
Junos won't work.

Cheers,

Mark.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part.
URL: <https://puck.nether.net/pipermail/cisco-nsp/attachments/20120227/9b1160d0/attachment.sig>


More information about the cisco-nsp mailing list