Use this command to enable MD5 authentication of TCP segments sent to and received from a neighbor, and configures an authentication key.
MD5 must either be enabled or disabled on both peers. The same password must be configured on both peers. After a TCP connection is established, if the password on one end is changed, then the password on the other end must be changed to match before the hold time expires. With default hold times, both passwords must be changed within 120 seconds to guarantee the connection is not dropped.
Issue this command in Peer Template Configuration Mode to add it to a peer template.
| Default | MD5 authentication is disabled. |
| Format | neighbor {ip-address | autodetect interface interface-name} password string |
| Mode | IPv4 VRF Address Family Config |
| Parameter | Description |
|---|---|
| ip-address | The neighbor's IP address. |
| autodetect interface interface-name | The routing interface on which the neighbor's link local IPv6 address is auto-detected. |
| string | Case-sensitive password from 1 to 25 characters in length. |