HRSP MD5 Authentication

christianpho · ‎10-31-2018

Hi,

I'm actually configuring HSRP MD5 authentication on my Nexus 5500 series and soon on 5600 and 9300 series.

On the 5500 & 5600 plate-form I'm using NX-OS 7.1(4)N1(1) & 7.3(3)N1(1).

here current configuration :

interface VlanXYZ
no shutdown
vrf member SOMETHING
no ip redirects
ip address A.B.C.E/XX
hsrp version 2
hsrp XYZ
    authentication md5 key-string KEY_VALUE
    preempt delay minimum 600
    priority 150
    ip A.B.C.D

I was expected to not see the key value in the configuration after it has been applied. But the key value is still accessible. Since it was possible to copie an already crypted key value, I was expect that it would be possible to configured the switch with the none crypted key version and having crypted in the switch configuration after.

What should I add to my configuration to make it hidden in the configuration ?

Thank you

Reza Sharifi · ‎10-31-2018

H,

Did you create a key chain?

Ensure that you have created the key chain if you are using MD5 authentication.

see link:

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/4_2/nx-os/unicast/configuration/guide/l3_cli_nxos/l3_hsrp.html#wp1073125

HTH