Feature Explorer AI AI

×

Subscribe now to get the Latest Updates

Watch a 2-minute overview video

PCC/PCE MD5 Key Chain

More Information:

PCC/PCE MD5 Key Chain

A stateful PCE server automates the creation of traffic-engineering paths across the network, increasing network utilization and enabling a customized programmable networking experience with the use of PCEP communication with a PCC. A PCC sends LSP reports to a PCE server, and the PCE updates or provisions LSPs back to the PCC. The data sent over a PCEP session is crucial for a PCE server to perform external path computing. As a result, an attack on the PCEP communication can disrupt network services. If altered PCEP messages are sent to a PCC, inappropriate LSPs can be set up. Similarly, if altered PCEP messages are sent to a PCE, an incorrect view of the network is learned by the PCE. Considering the significance of The PCEP session communication between a PCE and PCC in executing the PCE functionalities effectively, the PCEP session should be secured using TCP-MD5 authentication in accordance with RFC 5440. MD5 protects the communication between a PCE and PCC over a PCEP session, which might be subject to an attack, and can disrupt network services. This feature introduces PCEP session protection through the MD5 authentication keychain.
Product / Application Software Introduced Release
PTX10001-36MR Junos OS Evolved 20.3R1
PTX10008 Junos OS Evolved 20.1R1
PTX10016 Junos OS Evolved 21.2R2
PTX10002-36QDD Junos OS Evolved 24.2R2