Skip to Content.
Sympa Menu

rare-users - Re: [RARE-users] ISIS MD5 hello config

Subject: RARE user and assistance email list

List archive

Re: [RARE-users] ISIS MD5 hello config


Chronological Thread 
  • From: Frédéric LOUI <>
  • To: mc36 <>
  • Cc: , Eoin Kenny <>
  • Subject: Re: [RARE-users] ISIS MD5 hello config
  • Date: Thu, 2 Dec 2021 18:21:08 +0100
  • Dkim-filter: OpenDKIM Filter v2.10.3 zmtaauth01.partage.renater.fr C4055140EEA

I’ll test it on GP4L as soon as it lands with the next auto upgrade. :)

> Le 2 déc. 2021 à 18:07, mc36 <> a écrit :
>
> hi,
> a decision is made here so i just added this md5 stuff for ospf with these
> changes:
> https://github.com/mc36/freeRouter/commit/908ef281b3e26891c94ac0a1bfc09ce6f9765d46
> now some test cases need to cover the functionality then i'll proceed to
> isis md5...
> regards,
> cs
>
>
> On 12/2/21 09:56, Eoin Kenny wrote:
>> Hi Csaba,
>> Thanks for the links. I am using a Juniper at the other end. The ISIS
>> group configuration contains the md5 config for the interfaces, but you
>> can override the global config by explicitly configuring the interfaces
>> under the protocol ISIS.
>> So the following works fine.
>> ekenny@edge1-testlab> show configuration protocols isis interface
>> ge-1/1/8.0
>> hello-padding disable;
>> level 1 disable;
>> level 2 {
>> hello-authentication-key "$9removed"; ## SECRET-DATA
>> hello-authentication-type simple;
>> }
>> ekenny@edge1-testlab>
>> edge5-testlab#show running-config ethernet3
>> interface ethernet3
>> description "Link to edge1-testlab"
>> vrf forwarding isisvrf
>> ipv4 address 192.168.1.1 255.255.255.254
>> router isis4 1 enable
>> router isis4 1 circuit level2
>> router isis4 1 password $v10$removed==
>> no shutdown
>> no log-link-change
>> exit
>> Thank you for your help.
>> Regards
>> Eoin
>> -----Original Message-----
>> From:
>> <> On Behalf Of mc36
>> Sent: Wednesday 1 December 2021 15:43
>> To: ; Eoin Kenny <>
>> Subject: Re: [RARE-users] ISIS MD5 hello config
>> CAUTION[External]: This email originated from outside of the organisation.
>> Do not click on links or open the attachments unless you recognise the
>> sender and know the content is safe.
>> hi,
>> at the moment, freerouter can only do cleartext authentication on
>> interface or lsp level:
>> http://sources.nop.hu/cfg/intop2-isis08.tst
>> http://sources.nop.hu/cfg/intop2-isis11.tst
>> in both tests, r1 is freerouter and r2 is xrv9k...
>> regards,
>> cs
>> On 12/1/21 14:23, Eoin Kenny wrote:
>>> Hi all,
>>>
>>> I maybe missing something obvious but I could not see how to configure
>>> MD5 hello authentication for ISIS on freerouter. Any suggestions or
>>> points would be appreciated.
>>>
>>> Thanks
>>> Eoin
>>>




Archive powered by MHonArc 2.6.19.

Top of Page