Solved: Cisco ASR9006 MD5 Authentication config fails

sbattula301 · ‎07-21-2016

Hi All,

I am trying to configure MD5 Authentication (Cisco ASR 9006 with version 5.3.2) per LDP Neighbor , seeing below error

RP/0/RSP1/CPU0:ios#config t
Thu Jul 21 20:40:20.476 UTC
RP/0/RSP1/CPU0:ios(config)#mpls ldp neighbor 10.20.1.2:0 password encrypted scr
RP/0/RSP1/CPU0:ios(config)#mpls ldp
RP/0/RSP1/CPU0:ios(config-ldp)#commit
Thu Jul 21 20:42:07.993 UTC

% Failed to commit one or more configuration items during a pseudo-atomic operation. All changes made have been reverted. Please issue 'show configuration failed [inheritance]' from this session to view the errors
RP/0/RSP1/CPU0:ios(config-ldp)#do show configuration failed inheritance
Thu Jul 21 20:42:23.604 UTC
RP/0/RSP1/CPU0:ios(config-ldp)#

LDP Neighbor ship is Up with the neighbor --> 10.20.1.2

RP/0/RSP1/CPU0:ios(config-ldp)#do show mpls ldp neighbor
Thu Jul 21 20:47:24.340 UTC

Peer LDP Identifier: 10.20.1.3:0
TCP connection: 10.20.1.3:646 - 10.20.1.8:36475
Graceful Restart: No
Session Holdtime: 30 sec
State: Oper; Msgs sent/rcvd: 456/416; Downstream-Unsolicited
Up time: 00:59:05
LDP Discovery Sources:
IPv4: (1)
GigabitEthernet0/0/0/18
IPv6: (0)
Addresses bound to this peer:
IPv4: (6)
10.10.2.3 10.10.5.3 10.10.11.3 10.10.26.3
10.10.85.1 10.20.1.3
IPv6: (0)

Peer LDP Identifier: 10.20.1.2:0
TCP connection: 10.20.1.2:646 - 10.20.1.8:58025
Graceful Restart: No
Session Holdtime: 30 sec
State: Oper; Msgs sent/rcvd: 142/133; Downstream-Unsolicited
Up time: 00:16:54
LDP Discovery Sources:
IPv4: (1)
GigabitEthernet0/0/0/16
IPv6: (0)
Addresses bound to this peer:
IPv4: (2)
10.10.45.1 10.20.1.2
IPv6: (0)

RP/0/RSP1/CPU0:ios(config-ldp)#

Also I tried :

RP/0/RSP1/CPU0:ios#configure t
Thu Jul 21 20:48:08.244 UTC
RP/0/RSP1/CPU0:ios(config)#mpls ldp neighbor 10.20.1.2 password encrypted cisco
RP/0/RSP1/CPU0:ios(config)#commit
Thu Jul 21 20:48:33.067 UTC

% Failed to commit one or more configuration items during a pseudo-atomic operation. All changes made have been reverted. Please issue 'show configuration failed [inheritance]' from this session to view the errors
RP/0/RSP1/CPU0:ios(config)#do show con
configuration connected context controllers
RP/0/RSP1/CPU0:ios(config)#do show configuration failed inheritance
Thu Jul 21 20:48:45.677 UTC
RP/0/RSP1/CPU0:ios(config)#

Vinit Jain · ‎07-21-2016

This is expected. The reason for the config failed is, the router is expecting an encrypted password where as you are entering password as cisco which is not an encrypted password.

when you run show configuration failed command, you will see the error as invalid encrypted password. the encrypted keyword takes the string as encrypted string and not plain text string.

You can use the below steps:

RP/0/0/CPU0:P2(config)#mpls ldp neighbor 192.168.2.2 password clear cisco
RP/0/0/CPU0:P2(config)#commit
Fri Jul 22 01:48:10.551 UTC
RP/0/0/CPU0:P2(config)#end
RP/0/0/CPU0:P2#sh run mpls ldp
Fri Jul 22 01:48:14.171 UTC
mpls ldp
 router-id 192.168.12.12
 neighbor
 192.168.2.2:0 password encrypted 121A0C041104
 !
 interface GigabitEthernet0/0/0/1
 !
 interface GigabitEthernet0/0/0/2
 !

Hope this clarifies and answers your question.

Regards

Vinit

PS: Please rate useful posts and mark the question as answered if your query has been resolved.

Thanks
--Vinit

View solution in original post

Vinit Jain · ‎07-21-2016