Skip to Content.
Sympa Menu

rare-users - RE: [RARE-users] ISIS MD5 hello config

Subject: RARE user and assistance email list

List archive

RE: [RARE-users] ISIS MD5 hello config


Chronological Thread 
  • From: Eoin Kenny <>
  • To: "" <>, "" <>
  • Subject: RE: [RARE-users] ISIS MD5 hello config
  • Date: Thu, 2 Dec 2021 08:56:24 +0000
  • Accept-language: en-IE, en-GB, en-US
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=heanet.ie; dmarc=pass action=none header.from=heanet.ie; dkim=pass header.d=heanet.ie; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=M4HUolnn3mWiPmPJ8XnpqdjS2sT8kxl/9pBbJKNikww=; b=NJlVG5rqOLeW9XZWoaW4q9mwnBB1NryHfRMX3FHiZH7vpIqeqsl9m66eYp2AYsaACGdvAF390bbIB/6afoqUjQG3duo8Ots4DqsNcYq3muDQEmfnwzhisxqg0LrnIF0KLYdcEgYrPLPw324uSjd+tK9xedhEgGTPDXGaO25fquRsFow4SgKld8vHTInN6qj1XT3dILydhKPJT6vQPt1bsMTHvHHLjXl3RUq2tE0A8PClj8UO+CHztlPaYW6qgshOk5UZVkAmMj4S1YscpFtGwseJ4fY0yynBhIs4G94TCzqhkTCl20skFTezbYEd42GScUXmTeKaJvMdBdA175eEtQ==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=nZMmmtnG18CvgQ7npt0/HO7U6WwtexHxPk0EDXk9rpYoR0HcH8nVeaT9iSlljC+WKjGpR0V77Rg1CbbusE963eXJ0hyHvlYqXiSniIlxk9/CtPv1+BSY7sjFeKy0m8rZ17Lk4fppVXRVKue3TGobUuNWF9JrZQbkGgA8AVUOMMZLd38zUiJUMMBqdALEthC3sS1GXVcg263/dieic1d6ATwka40Ax/qqoGztjVORRpFX4ktSJv5lCWzhbSdYP+cCuRjXxjoWGcNnsw6CqtVtwDoP/48/lX5QTrpBKy7pDGA/PrqiCDu0ps0pWpluSLqleXM2fkzUh6e9Bx3DAZQgGg==
  • Authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=heanet.ie;

Hi Csaba,

Thanks for the links. I am using a Juniper at the other end. The ISIS group
configuration contains the md5 config for the interfaces, but you can
override the global config by explicitly configuring the interfaces under the
protocol ISIS.
So the following works fine.
ekenny@edge1-testlab> show configuration protocols isis interface ge-1/1/8.0
hello-padding disable;
level 1 disable;
level 2 {
hello-authentication-key "$9removed"; ## SECRET-DATA
hello-authentication-type simple;
}
ekenny@edge1-testlab>

edge5-testlab#show running-config ethernet3
interface ethernet3
description "Link to edge1-testlab"
vrf forwarding isisvrf
ipv4 address 192.168.1.1 255.255.255.254
router isis4 1 enable
router isis4 1 circuit level2
router isis4 1 password $v10$removed==
no shutdown
no log-link-change
exit

Thank you for your help.

Regards
Eoin

-----Original Message-----
From: <>
On Behalf Of mc36
Sent: Wednesday 1 December 2021 15:43
To: ; Eoin Kenny <>
Subject: Re: [RARE-users] ISIS MD5 hello config

CAUTION[External]: This email originated from outside of the organisation. Do
not click on links or open the attachments unless you recognise the sender
and know the content is safe.


hi,
at the moment, freerouter can only do cleartext authentication on interface
or lsp level:
http://sources.nop.hu/cfg/intop2-isis08.tst
http://sources.nop.hu/cfg/intop2-isis11.tst
in both tests, r1 is freerouter and r2 is xrv9k...
regards,
cs


On 12/1/21 14:23, Eoin Kenny wrote:
> Hi all,
>
> I maybe missing something obvious but I could not see how to configure MD5
> hello authentication for ISIS on freerouter. Any suggestions or points
> would be appreciated.
>
> Thanks
> Eoin
>



Archive powered by MHonArc 2.6.19.

Top of Page