Hi,
I am trying to configure the BGP TCP AO between ASR 1001-X to ASR 9006 and i am getting the authentication error.
Can anyone help pls
ASR 9006:-
==========================================
tcp ao
keychain kc1
key 10 SendID 10 ReceiveID 10
!
key chain kc1
key 10
accept-lifetime 11:09:10 january 10 2022 infinite
key-string password klmno
send-lifetime 11:09:10 january 10 2022 infinite
cryptographic-algorithm SHA-1
!
router bgp 100
address-family ipv4 unicast
!
address-family vpnv4 unicast
!
vrf TEST
rd 100:100
address-family ipv4 unicast
redistribute connected
!
neighbor 192.168.1.226
remote-as 65002
ao kc1 include-tcp-options disable accept-ao-mismatch-connection
address-family ipv4 unicast
route-policy DEFAULT_PASS3 in
maximum-prefix 1000 75
route-policy DEFAULT_PASS3 out
ASR 1001-X:-
--------------------------------------
key chain kc1 tcp
key 10
send-id 10
recv-id 10
accept-ao-mismatch
cryptographic-algorithm hmac-sha-1
key-string klmno
accept-lifetime local 04:15:50 Jan 10 2022 infinite
send-lifetime local 04:15:50 Jan 10 2022 infinite
!
!
router bgp 65002
bgp log-neighbor-changes
neighbor 192.168.1.225 remote-as 100
neighbor 192.168.1.225 ao kc1 include-tcp-options accept-ao-mismatch-connections
neighbor 192.168.1.225 update-source TenGigabitEthernet0/0/1
!
address-family ipv4
neighbor 192.168.1.225 activate
neighbor 192.168.1.225 maximum-prefix 1000
exit-address-family
!
