nanog mailing list archives
Re: BCP38 making it work, solving problems
From: Joe Abley <jabley () isc org>
Date: Thu, 21 Oct 2004 15:12:00 -0400
On 20 Oct 2004, at 21:49, Jon Lewis wrote:
On Wed, 20 Oct 2004, Patrick W Gilmore wrote:Have you actually done the work to see how many packets it takes to shut down a session with and without MD5 enabled? (The question is rhetorical, since your post shows that you have not.)Just a bit more sauce for the goose...enabling MD5 on BGP peers under certain latest in their train IOS versions will immediately crash IOS. Guess how I know that?
In a similar vein, upgrading from certain flavours of 12.0 to certain flavours of 12.2 seems to cause password hashes to become disfunctional, leaving BGP sessions down after the first reboot until the passwords are re-entered in plain text from the command line. (Guess how I know that, too).
This is not a statement in support of not using MD5 auth passwords. Just a reminder to include MD5 passwords in your lab testing before deployment, if you use them.
Joe
Current thread:
- Re: BCP38 making it work, solving problems, (continued)
- Re: BCP38 making it work, solving problems Suresh Ramasubramanian (Oct 12)
- Re: BCP38 making it work, solving problems Steven Champeon (Oct 13)
- Re: BCP38 making it work, solving problems JP Velders (Oct 19)
- Re: BCP38 making it work, solving problems Fred Baker (Oct 19)
- Re: BCP38 making it work, solving problems Randy Bush (Oct 19)
- Re: BCP38 making it work, solving problems JP Velders (Oct 19)
- Re: BCP38 making it work, solving problems David G. Andersen (Oct 19)
- Re: BCP38 making it work, solving problems JP Velders (Oct 19)
- Re: BCP38 making it work, solving problems Patrick W Gilmore (Oct 19)
- Re: BCP38 making it work, solving problems Jon Lewis (Oct 20)
- Re: BCP38 making it work, solving problems Joe Abley (Oct 21)
- Re: BCP38 making it work, solving problems Paul Vixie (Oct 19)
- Re: BCP38 making it work, solving problems JP Velders (Oct 19)
- Re: BCP38 making it work, solving problems Jared Mauch (Oct 19)
- Re: BCP38 making it work, solving problems Mark Andrews (Oct 19)
- Re: BCP38 making it work, solving problems Paul Vixie (Oct 12)
- Re: BCP38 making it work, solving problems Suresh Ramasubramanian (Oct 12)
- Re: BCP38 making it work, solving problems Bora Akyol (Oct 12)
- Re: BCP38 making it work, solving problems Patrick W Gilmore (Oct 12)
- Re: BCP38 making it work, solving problems Christopher L. Morrow (Oct 12)
- Re: BCP38 making it work, solving problems Hank Nussbacher (Oct 13)