![background image](http://html.mh-extra.com/html/foundry-networks/switch-and-router/switch-and-router_installation-and-configuration-manual_2324275702.webp)
Foundry Switch and Router Installation and Configuration Guide
19 - 20
December 2000
20. Enter a password in the MD5 Password field to secure the Layer 3 Switch’s sessions with this neighbor.
NOTE:
You must configure the neighbor to use the same password.
21. Click the Add button (if you are adding a new neighbor) or the Modify button (if you are modifying a neighbor
that is already configured) to apply the changes to the device’s running-config file.
22. Select the Save link at the bottom of the dialog, then select Yes when prompted to save the configuration
change to the startup-config file on the device’s flash memory.
Encryption of BGP4 MD5 Authentication Keys
When you configure a BGP4 neighbor or neighbor peer group, you can specify an MD5 authentication string for
authenticating packets exchanged with the neighbor or peer group of neighbors.
For added security, the software encrypts display of the authentication string by default. The software also
provides an optional parameter to disable encryption of the authentication string, on an individual neighbor or peer
group basis. By default, the MD5 authentication strings are displayed in encrypted format in the output of the
following commands:
•
show running-config
(or
write terminal
)
•
show configuration
•
show ip bgp config
When encryption of the authentication string is enabled, the string is encrypted in the CLI regardless of the access
level you are using.
If you are upgrading from a software release earlier than 07.1.14 on a device that is already configured for BGP4,
when you save the configuration to the startup-config file, the software automatically converts the command
syntax for BGP4 neighbors and peer groups into the new syntax that includes the encryption option. If you display
the running-config after reloading with software release 07.1.14 or later, the BGP4 commands that specify an
authentication string show the string in encrypted form.
In addition, when you save the configuration to the startup-config file, the file contains the new BGP4 command
syntax and encrypted passwords or strings.
NOTE:
Foundry recommends that you save a copy of the startup-config file for each Layer 3 Switch you plan to
upgrade. If you need to return to a software release earlier than 07.1.14, the earlier software will not recognize the
passwords or authentication keys in their encrypted form and will not be able to convert them back to their clear
form.
Encryption Example
The following commands configure a BGP4 neighbor and a peer group, and specify MD5 authentication strings
(passwords) for authenticating packets exchanged with the neighbor or peer group.
BigIron(config-bgp-router)# local-as 2
BigIron(config-bgp-router)# neighbor xyz peer-group
BigIron(config-bgp-router)# neighbor xyz password abc
BigIron(config-bgp-router)# neighbor 10.10.200.102 peer-group xyz
BigIron(config-bgp-router)# neighbor 10.10.200.102 password test
Here is how the commands appear when you display the BGP4 configuration commands:
BigIron(config-bgp-router)# show ip bgp config
Current BGP configuration:
router bgp
local-as 2
neighbor xyz peer-group
neighbor xyz password
1 $!2d
neighbor 10.10.200.102 peer-group xyz
Summary of Contents for Switch and Router
Page 2: ...December 2000 Copyright 2000 by Foundry Networks Inc ...
Page 26: ...Foundry Switch and Router Installation and Configuration Guide xxvi December 2000 ...
Page 64: ...Foundry Switch and Router Installation and Configuration Guide 2 34 December 2000 ...
Page 162: ...Foundry Switch and Router Installation and Configuration Guide 5 38 December 2000 ...
Page 196: ...Foundry Switch and Router Installation and Configuration Guide 6 34 December 2000 ...
Page 208: ...Foundry Switch and Router Installation and Configuration Guide 7 12 December 2000 ...
Page 236: ...Foundry Switch and Router Installation and Configuration Guide 8 28 December 2000 ...
Page 258: ...Foundry Switch and Router Installation and Configuration Guide 9 22 December 2000 ...
Page 420: ...Foundry Switch and Router Installation and Configuration Guide 13 32 December 2000 ...
Page 442: ...Foundry Switch and Router Installation and Configuration Guide 14 22 December 2000 ...
Page 554: ...Foundry Switch and Router Installation and Configuration Guide 15 112 December 2000 ...
Page 574: ...Foundry Switch and Router Installation and Configuration Guide 16 20 December 2000 ...
Page 626: ...Foundry Switch and Router Installation and Configuration Guide 17 52 December 2000 ...
Page 682: ...Foundry Switch and Router Installation and Configuration Guide 18 56 December 2000 ...
Page 826: ...Foundry Switch and Router Installation and Configuration Guide 20 20 December 2000 ...
Page 994: ...Foundry Switch and Router Installation and Configuration Guide 26 10 December 2000 ...
Page 1004: ...Foundry Switch and Router Installation and Configuration Guide B 6 December 2000 ...
Page 1044: ...Foundry Switch and Router Installation and Configuration Guide C 40 December 2000 ...
Page 1048: ...Foundry Switch and Router Installation and Configuration Guide D 4 December 2000 ...
Page 1070: ...Foundry Switch and Router Installation and Configuration Guide Index 18 December 2000 ...