Enabling TCP MD5 authentication for secure BGP and PCEP connectivity
By default, TCP MD5 authentication is disabled for BGP and PCEP implementation in OpenDaylight. This configuration is very useful to secure a BGP connection. It can be enabled manually or by using RESTCONF. In the following recipe we will describe the manual way of configuring these attributes.
Getting ready
As a prerequisite, make sure that BGP and PCEP are configured as described in the first recipe. Additionally, to allow TCP MD5 authentication between BGP peers, the router also needs to be configured accordingly. This is however beyond the scope of this recipe.
How to do it...
In the following section, we will look at how to manually configure the BGP-PCEP to enable TCP MD5 authentication. Each section will describe the files of interest and will also address the details of the parameters that need to be updated.
OpenDaylight BGP configuration for TCP MD5 authentication:
- Make sure you have started the OpenDaylight distribution...