Use this command to enable MD5 authentication of TCP segments sent to and received from a neighbor, and configures an authentication key.
MD5 must either be enabled or disabled on both peers. The same password must be configured on both peers. After a TCP connection is established, if the password on one end is changed, then the password on the other end must be changed to match before the hold time expires. With default hold times, both passwords must be changed within 120 seconds to guarantee the connection is not dropped.
Issue this command in Peer Template Configuration Mode to add it to a peer template.
| Default | MD5 authentication is disabled. |
| Format | neighbor {ip-address | ipv6-address [interface interface-name] |autodetect interface interface-name} password string |
| Mode |
|
| Parameter | Description |
|---|---|
| ip-address | The neighbor's IP address. |
| ipv6-address [interface interface-name] | The neighbor's IPv6 address. if the neighbor's IPv6 address is a link local address, the local interface must also be specified. |
| autodetect interface interface-name | The routing interface on which the neighbor's link local IPv6 address is auto-detected. |
| string | Case-sensitive password from 1 to 25 characters in length. |