[c-nsp] IOS-XR IS-IS authentication

Aaron dudepron at gmail.com
Wed Jun 3 11:41:59 EDT 2020


I believe the OP was about interop between cisco and juniper using
key-chains.

On Wed, Jun 3, 2020 at 1:56 AM Phil Bedard <philxor at gmail.com> wrote:

> There shouldn't be an issue using keychains for these functions, I have XR
> and XE devices running IS-IS between each other with keychains on both
> without an issue.
>
> One thing to always watch out for is inadvertent spaces after you type in
> a clear text password.
>
> Thanks,
> Phil
>
> On 5/28/20, 3:44 AM, "cisco-nsp on behalf of Mark Tinka" <
> cisco-nsp-bounces at puck.nether.net on behalf of mark.tinka at seacom.mu>
> wrote:
>
>
>
>     On 27/May/20 21:08, Eric Van Tol wrote:
>     > Unless I get suggestions otherwise, I suppose I'll just not use
> keys, which seems prohibitive, particularly if a password needs changing at
> some point. The 'lsp-password' without a key chain seems to work just fine.
> :-/
>
>     In IOS and IOS XE, we use key chains.
>
>     In IOS XR, we use "lsp-password hmac-md5" at the "router isis" level,
>     and "hello-password hmac-md5" at the "router isis 1 interface" level.
>
>     Mark.
>     _______________________________________________
>     cisco-nsp mailing list  cisco-nsp at puck.nether.net
>     https://puck.nether.net/mailman/listinfo/cisco-nsp
>     archive at http://puck.nether.net/pipermail/cisco-nsp/
>
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>


More information about the cisco-nsp mailing list