Last Updated on July 31, 2021 by Admin 1
You are configuring BGP speakers RouterA and RouterB to authenticate one another. The following conditions exist:
RouterA has an IP address of 192.168.5.3
RouterB has an IP address of 192.168.5.2
Both routers reside in AS 6550.
Which of the following commands will result in successful authentication?
- neighbor 192.168.5.2 password routera executed on RouterA
neighbor 192.168.5.3 password routerb executed on RouterB - neighbor 192.168.5.2 password routerb executed on RouterA
neighbor 192.168.5.3 password routera executed on RouterB - neighbor 192.168.5.2 password routera executed on RouterA
neighbor 192.168.5.3 password routera executed on RouterB - neighbor 192.168.5.2 password routera executed on RouterA
- neighbor 192.168.5.2 password routerb executed on RouterB
The following command pair should be used to configure successful authentication:
neighbor 192.168.5.2 password routera executed on RouterA neighbor 192.168.5.3 password routera executed on RouterB
When setting the keys for authentication, the keys must match. The keys do not need to be the names of either router, and should be a combination of letters numbers and symbols. In this example, both keys are set to the value routera.
The following two command pairs are incorrect because the keys do not match:
neighbor 192.168.5.2 password routera executed on RouterA neighbor 192.168.5.3 password routerb executed on RouterB
and
neighbor 192.168.5.2 password routerb executed on RouterA neighbor 192.168.5.3 password routera executed on RouterB
If you executed the debug ip bgp command to perform troubleshooting with either of these configurations in place, the error message you would see would be as follows:
%TCP-6-BADAUTH: Invalid MD5 digest from 192.168.5.3 (12293) to 192.168.5.2 (179)
In the error message, the numbers in parentheses are the port numbers used for the attempted communication.
The single commands would be incorrect because the key has only been configured on one end:
neighbor 192.168.5.2 password routera executed on RouterA
and
neighbor 192.168.5.2 password routerb executed on RouterB
If you executed the debug ip bgp command to troubleshoot with either of these configurations in place, you would see the following message:
%TCP-6-BADAUTH: No MD5 digest from 192.168.5.3 (12293) to 192.168.5.2 (179)
Objective:
Layer 3 Technologies
Sub-Objective:
Describe, configure, and verify BGP peer relationships and authentication