Displaying the authentication string – Brocade Multi-Service IronWare Routing Configuration Guide (Supporting R05.6.00) User Manual

Page 83

Advertising
background image

Multi-Service IronWare Routing Configuration Guide

55

53-1003033-02

Configuring BGP4 neighbors

The BGP4 configuration commands appear in the following format as a result of the show ip bgp
configuration command.

In this output, the software has converted the commands that specify an authentication string into
the new syntax (described below), and has encrypted display of the authentication strings.

Syntax: [no] neighbor ip-addr |peer-group-name password string

The ip-addr | peer-group-name parameters indicate whether you are configuring an individual
neighbor or a peer group. If you specify the IP address of a neighbor, you are configuring that
individual neighbor. If you specify a peer group name, you are configuring a peer group.

The password string parameter specifies an MD5 authentication string to secure sessions between
the device and the neighbor. You can enter a string of up to 80 characters. The string can contain
any alphanumeric characters, but must be placed inside quotes if it contains a space.

The system creates an MD5 hash of the password and uses it to secure sessions between the
device and the neighbors. To display the configuration, the system uses a 2-way encoding scheme
to retrieve the original password.

By default, password is encrypted. If you want the password to be in clear text, insert a 0 between
password and string.

Brocade(config-bgp)# neighbor 10.157.22.26 password 0 admin

The system adds an encryption code followed by the encrypted text of the original password. For
example, the following portion of the code has the encrypted code “2”.

password 2 $IUA2PWc9LW9VIW9zVQ=="

Brocade(config-bgp)# neighbor 10.157.22.26 password 0 marmalade

Displaying the authentication string

To display the authentication string, enter the following commands.

Brocade(config)# enable password-display

Brocade(config)# show ip bgp neighbors

The enable password-display command enables display of the authentication string, but only in the
output of the show ip bgp neighbors command. String display is still encrypted in the startup
configuration file and running configuration.

Brocade(config-bgp)# show ip bgp configuration

Current BGP configuration:

router bgp

local-as 2

neighbor xyz peer-group

neighbor xyz password 2 $b24tbw==

neighbor 10.10.200.102 peer-group xyz

neighbor 10.10.200.102 remote-as 1

neighbor 10.10.200.102 password 2 $on-o

Advertising