Routing
Highlighted
Routing

Can we get Hash Key from its configuration in EX?

[ Edited ]
‎11-14-2016 09:18 AM

Hi One of commands is missed in one of two peer routers. Please see the command below:

 

set snmp v3 usm local-engine user ehccuser authentication-md5 authentication-key <<Hash  Key>>

 

When we "show configuration | display set" in its peer, the Hash Key is encrypted one. My question is how to type the Hash Key for this router when i want to add the missed command? Thank you

 

 

 

 

4 REPLIES 4
Highlighted
Routing
Solution
Accepted by topic author eesunj
‎11-14-2016 01:57 PM

Re: Can we get Hash Key from its configuration in EX?

‎11-14-2016 10:51 AM

Hi,

 

There are scripts to decode $9$ hash from Junos or you could use:

http://password-decrypt.com/

 

Cheers,

Ashvin

Highlighted
Routing

Re: Can we get Hash Key from its configuration in EX?

‎11-14-2016 11:44 AM

Great! Thank you

Now I got it from its peer's command. Than means we would use the same password for the two peer. My additional question is what would happen if I use different password than peer's password?

Highlighted
Routing

Re: Can we get Hash Key from its configuration in EX?

‎11-14-2016 01:21 PM

Hi,

 

Btw, you can configure authentication using the authentication-key hash [no need to know the original unencrypted key]:

set snmp v3 usm local-engine user ehsnmpuser authentication-md5 authentication-key <<Hash  Key>>

When the authentication is supplied, a hash is computed and compared to the configured hash. If they do not match, authentication fails.

Am not sure what you meant by peer in this snmp config.

 

Cheers,

Ashvin

Highlighted
Routing

Re: Can we get Hash Key from its configuration in EX?

‎11-14-2016 01:56 PM

Thank you! I already understand it