CLI Guide

Layer 3 Routing Commands 1323
neighbor password
Use the neighbor password command to enable MD5 authentication of TCP
segments sent to and received from a neighbor, and to configure an
authentication key.
Syntax
neighbor { ip-address | ipv6-address [ interface interface-id ] | autodetect
interface interface-id } password string
no neighbor { ip-address | ipv6-address [ interface interface-id ]| autodetect
interface interface-id} password
• ip-address—The neighbor’s IPv4 address.
• ipv6-address [ interface interface-id ] – The neighbor’s IPv6 address. If the
neighbor’s IPv6 address is a link local address, the local interface must also
be specified. The interface-id must specify a routing interface identifier
(VLAN ID).
• autodetect interface interface-id —(Optional) The routing interface on
which the neighbor’s link local IPv6 address is auto detected. The
interface-id must be a VLAN routing interface.
• string—Case-sensitive password from 1 to 25 characters in length.
Default Configuration
MD5 authentication is disabled by default.
Command Mode
BGP Router Configuration mode
IPv4 Address Family Configuration mode
User Guidelines
MD5 must either be enabled or disabled on both peers. The same password
must be configured on both peers. After a TCP connection is established, if
the password on one end is changed, then the password on the other end
must be changed to match before the hold time expires. Using the default