One thing I'd like to add for those who may be running RSVP-
TE between IOS XR and Junos platforms with HMAC-MD5 
authentication:

Your IOS XR authentication configuration would need to look 
like this:

key chain your-key-chain-name
 key 1
  accept-lifetime 00:00:00 january 01 2000 infinite
  key-string password <your-password-here>
  send-lifetime 00:00:00 january 01 2000 infinite
  cryptographic-algorithm HMAC-MD5


The 'accept-lifetime' and 'send-lifetime' commands are 
required because of an inter-op issue between IOS XR and 
Junos, which IOS and IOS XE don't have.

IOS XR would need to implement the changes that IOS and IOS 
XE did in order to inter-op with Junos without having these 
problems, or needing those commands in the first place.

Without those commands, authentication between IOS XR and 
Junos won't work.

Cheers,

Mark.

Attachment: signature.asc
Description: This is a digitally signed message part.

_______________________________________________
cisco-nsp mailing list  [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Reply via email to