Skip to Content.
Sympa Menu

rare-users - Re: [RARE-users] ISIS MD5 hello config

Subject: RARE user and assistance email list

List archive

Re: [RARE-users] ISIS MD5 hello config


Chronological Thread 
  • From: mc36 <>
  • To: , Eoin Kenny <>
  • Subject: Re: [RARE-users] ISIS MD5 hello config
  • Date: Fri, 3 Dec 2021 12:35:51 +0100

hi,
so i proceeded with isis md5 authentication, here is the change from today:
https://github.com/mc36/freeRouter/commit/7f5f80a62bbe2343afcba8c4c33bd002353d4465
it contains all the code changes plus the test cases covering new
functionality...
now a full interop test round need to be passed before i let this beast out,
so imho it'll be out for tomorrow... if your freerouter have internet access,
then issue "flash upgrade" tomorrow to have the new code in place... if not,
you'll have to manually upgrade: wget www.freertr.net/rtr.jar in the router's
directory...
sorry for the inconvenience and thanks for asking for this feature request,
for which, i listed you in the www.freertr.net/greet.html ...
regards,
cs



On 12/2/21 18:07, mc36 wrote:
hi,
a decision is made here so i just added this md5 stuff for ospf with these
changes:
https://github.com/mc36/freeRouter/commit/908ef281b3e26891c94ac0a1bfc09ce6f9765d46
now some test cases need to cover the functionality then i'll proceed to isis
md5...
regards,
cs


On 12/2/21 09:56, Eoin Kenny wrote:
Hi Csaba,

Thanks for the links. I am using a Juniper at the other end. The ISIS group configuration contains the md5 config for the interfaces, but you can override the global config by explicitly configuring the interfaces under the protocol ISIS.
So the following works fine.
ekenny@edge1-testlab> show configuration protocols isis interface ge-1/1/8.0
hello-padding disable;
level 1 disable;
level 2 {
hello-authentication-key "$9removed"; ## SECRET-DATA
hello-authentication-type simple;
}
ekenny@edge1-testlab>

edge5-testlab#show running-config ethernet3
interface ethernet3
description "Link to edge1-testlab"
vrf forwarding isisvrf
ipv4 address 192.168.1.1 255.255.255.254
router isis4 1 enable
router isis4 1 circuit level2
router isis4 1 password $v10$removed==
no shutdown
no log-link-change
exit

Thank you for your help.

Regards
Eoin

-----Original Message-----
From: <>
On Behalf Of mc36
Sent: Wednesday 1 December 2021 15:43
To: ; Eoin Kenny <>
Subject: Re: [RARE-users] ISIS MD5 hello config

CAUTION[External]: This email originated from outside of the organisation. Do not click on links or open the attachments unless you recognise the sender and know the content is safe.


hi,
at the moment, freerouter can only do cleartext authentication on interface
or lsp level:
http://sources.nop.hu/cfg/intop2-isis08.tst
http://sources.nop.hu/cfg/intop2-isis11.tst
in both tests, r1 is freerouter and r2 is xrv9k...
regards,
cs


On 12/1/21 14:23, Eoin Kenny wrote:
Hi all,

I maybe missing something obvious but I could not see how to configure MD5
hello authentication for ISIS on freerouter. Any suggestions or points would
be appreciated.

Thanks
Eoin




Archive powered by MHonArc 2.6.19.

Top of Page