D-Link DGS-6608 — настройка MD5 аутентификации для LDP на коммутаторах [488/1106]

Превью страниц Страница 488 / 1106

DGS-6600 Series Switch m md5 authentication

CLI Reference Guide

478

md5 authentication

Use this command to enable the LDP authentication. Use the no form of this

command to restore the default value.

md5 authentication

no md5 authentication

Syntax

Description

None.

Default By default, a peer has no password.

Command Mode MPLS router configuration mode.

Usage Guideline Use md5 authentication to enable LDP authentication. If LDP md5 authentication

is enabled, the LSR applies the MD5 algorithm to compute the md5 digest for the

TCP segment that will be sent to the peer. This computation makes use of the

peer password as well as the TCP segment. When the LSR receives a TCP

segment with an md5 digest, it validates the segment by calculating the md5

digest (using its own record of the password) and compares the computed digest

with the received digest. If the comparison fails, the segment is dropped without

any response to the sender. The LSR ignores LDP hellos from and LSR for which

a password has not been configured.

Note: configuring the md5 authentication will lead to an LDP restart.

Example This example shows how to enable LDP md5 authentication.

The user can verify their settings by entering show mpls ldp parameter

command.

Switch(config-mpls-router)#md5 authentication