[Xorp-hackers] xorp interoperate with IOS - RFC4813 LLS and auth

[Ben Greear]

On 02/21/2010 12:54 PM, Eric S. Johnson wrote:
>
> Recent versions of IOS seem to like to do RFC4813 - OSPF Link-Local
> Signaling *by default*. This was not working with xorp ospf v2
> speakers with MD5 auth. You can turn off ospf LLS on cisco routers with
>
> conf t
> int blahblah
>      ip ospf lls disable
>
> but this patch allows xorp to correctly inter-operate with these 4813 speakers.
>
> xorp was assuming that an OSPF packet ended with the 16 octet
> md5 checksum. With RFC4813 there can be more things beyond the md5
> checksum. This patch ignores anything past the md5 checksum, and computes
> the md5 checksum over the correct data.
>
> IT DOES NOT implement RFC 4813, other than to ignore it correctly.
>
> NOTE: this patch applies clean to xorp 1.6 also.

Bruce:  Do you plan to add this to your upstream tree?  If so, I'll wait
for you and pull it into my tree.  Otherwise, I'll put it in my tree
directly.

Thanks,
Ben


-- 
Ben Greear <greearb at candelatech.com>
Candela Technologies Inc  http://www.candelatech.com