Resending: On Wed, Aug 12, 2020 at 9:33 AM hongal <hongal@gmail.com> wrote:
Hi Folks,
Starting FRR 7.2 we are seeing one issue with bgp neighbor command.
e.g R1 ---------------------------------------R2. (md5 password) (no password configured)
R1 router bgp 64707 bgp router-id 199.1.1.2 neighbor 100.17.6.1 remote-as 64708 neighbor 100.17.6.1 password ******
R2 router bgp 64708 bgp router-id 199.1.1.3 neighbor 100.17.6.2 remote-as 64707
I do see BGP NBR come up with this configuration, even though password is not configured on the other side(R2).
R1 starts sending TCP syn packet with Tcp options(md5). R2 acks without md5 option.(as password is not configured) R1 drops md5 option and continue with TCP handshake , TCP is established without md5. This will continue towards BGP NBR UP.
Would like to know if this is new behavior added or a bug.
Note that, 1 if I configure password both side, it works ok, I see md5 option is exchanged. 2 If I mis-configure password value either side, it fails, which is expected.
Thanks Thippanna