Specifications

mpls ldp neighbor password
MP-248
Cisco IOS Multiprotocol Label Switching Command Reference
January 2010
Usage Guidelines You can invoke authentication between two LDP peers, verifying each segment sent on the TCP
connection between the peers. To do so, you must configure authentication on both LDP peers using the
same password; otherwise, the peer session is not established.
The authentication capability uses the MD5 algorithm. MD5, an algorithm used in conjunction with
SNM
P, verifies the integrity of the communication, authenticates the origin of the message, and checks
for timeliness.
Invoking the mpl
s ldp neighbor password command causes the generation and checking of the MD5
digest for every segment sent on the TCP connection.
Configuring a password for an LDP neighbor causes an existing LDP session to be torn down and a new
se
ssion to be established.
If a router has a password configured for a neighbor, but the neighbor router does not have a password
co
nfigured, a message such as the following appears on the console while the two routers attempt to
establish an LDP session:
%TCP-6-BADAUTH: No MD5 digest from [peer's IP address]:11003 to [local router's
IP address]:646
Similarly, if the two routers have different passwords configured, a message such as the following
appears on the console:
%TCP-6-BADAUTH: Invalid MD5 digest from [peer's IP address]:11004 to [local router's
IP address]:646
Examples In the following example, the password (password1) is configured as the password for use with MD5 for
the neighbor whose router ID is 139.27.0.15:
Router(config)# mpls ldp neighbor 139.27.0.15 password password1
In the following example, the password (password1) is configured as the password for use with MD5 for
the LDP neighbor having router ID 4.4.4.4 in the VPN routing and forwarding instance named vpn1:
Router(config)# mpls ldp neighbor vrf vpn1 4.4.4.4 password password1
Related Commands Command Description
mpls ldp neighbor
implici
t-widthdraw
Configures the advertisement of a new label for a FEC without the
withdrawal of the previously advertised label.
mpls ldp neighbor
ta
rgeted
Sets up a targeted session with the specified neighbor.