Enabling Md5 Authentication On A Tcp Connection - Juniper BGP - CONFIGURATION GUIDE V 11.1.X Configuration Manual

JUNOSe 11.1.x BGP and MPLS Configuration Guide
host1:3# show ip bgp fields intro best peer loc-pref as-path
Local router ID 13.13.13.3, local AS 200
Status codes: > best
> 10.23.40.1/32
> 10.23.40.2/32
> 10.23.40.3/32
> 10.23.40.4/32
> 10.23.40.5/32

Enabling MD5 Authentication on a TCP Connection

You can use the neighbor password command to enable MD5 authentication on a
TCP connection between two BGP peers. Enabling MD5 authentication causes each
segment sent on the TCP connection between them to be verified.
You must configure MD5 authentication with the same password on both BGP peers;
otherwise, the router does not make the connection between the BGP peers.
The MD5 authentication feature uses the MD5 algorithm. When you specify this
command, the router generates and checks the MD5 digest on every segment sent
on the TCP connection.
In the following example, the password is set to " opensesame" :
The show ip bgp neighbors command does not reveal the password, but does indicate
whether MD5 authentication is configured for the session. The output of the show
configuration command varies as follows:
neighbor password
36
Configuring BGP Peer Groups
10 paths, 5 distinct prefixes (520 bytes used)
6 paths selected for route table installation
14 path attribute entries (1943 bytes used)
Prefix Peer
10.23.40.1/32 192.168.13.1
172.123.23.2
192.168.13.1
10.23.40.2/32 172.123.23.2
192.168.13.1
10.23.40.3/32 172.123.23.2
10.23.40.4/32 192.168.13.1
172.123.23.2
192.168.13.1
10.23.40.5/32 172.123.23.2
host1(config)#router bgp 100
host1(config-router)#neighbor 2.2.2.2 password opensesame
If you use the 8 keyword to specify that the password is encrypted, then the
output of the show configuration command displays the text that you entered
(the ciphertext password).
If you do not use the 8 keyword (that is, you use the 0 keyword or no encryption
keyword), and if the service password-encryption command has not been
issued, then the output of the show configuration command displays the text
that you entered (the plaintext password).
If you do not use the 8 keyword (that is, you use the 0 keyword or no encryption
keyword) but the service password-encryption command has been issued, then
the output of the show configuration command displays an encrypted password
that is equivalent to the cleartext password that you entered.
LocPrf AS-path
200 100 211 32 15 67 44 (too long)
100 100 211
200 100 211 32 15 67
100 100 211 32
100 211 32 15
100 211 32 15
100 100 211 32
200 100 211 32 15 67
100 100 211
200 100 211 32 15 67 44 (too long)