
Cisco IOS XR Training Page 77
© 2012 Jeffrey Fry FryGuy.Net
Now here is something different than normal IOS, as soon as you enable
authentication – the LDP session resets and enables the password. With IOS,
you would need to clear the LDP session and allow it to re-establish.
RP/0/7/CPU0:Apr 1 19:40:06.205 : tcp[400]: %IP-TCP-3-BADAUTH : Invalid MD5
digest from 2.2.2.2:57032 to 1.1.1.1:646
Ok, I made the change to R2 so the passwords match, now we can look at our
neighbor
RP/0/7/CPU0:R1#sh mpls ldp neighbor
Sun Apr 1 19:40:33.961 UTC
Peer LDP Identifier: 2.2.2.2:0
TCP connection: 2.2.2.2:57491 - 1.1.1.1:646; MD5 on
Graceful Restart: No
Session Holdtime: 180 sec
State: Oper; Msgs sent/rcvd: 7/18; Downstream-Unsolicited
Up time: 00:00:10
LDP Discovery Sources:
GigabitEthernet0/3/0/2
Addresses bound to this peer:
2.2.2.2 150.1.12.2 200.100.200.100 200.200.200.200
200.200.200.201 200.200.200.202 200.200.200.203 200.200.200.204
200.200.200.205 200.200.200.206 200.200.200.207 200.200.200.208
200.200.200.209 200.200.200.210
RP/0/7/CPU0:R1#
As you can see, next to the TCP connection, it now says MD5 on. Previously
nothing was after the port number.
You can also configure a password for any LDP session, that is done like
follows:
RP/0/7/CPU0:R1#conf t
Sun Apr 1 19:40:45.561 UTC
RP/0/7/CPU0:R1(config)#mpls ldp
RP/0/7/CPU0:R1(config-ldp)#neighbor ?
A.B.C.D IP address of neighbor
password Configure password for MD5 authentication for all neighbors
RP/0/7/CPU0:R1(config-ldp)#neighbor password cisco
RP/0/7/CPU0:R1(config-ldp)#comm
Sun Apr 1 19:40:57.167 UTC
Now any LDP session must have a password. Now remember this in case you need
to do directed LDP session some time down the road.
Commenti su questo manuale