Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feat(eos_designs): support type 8a bgp passwords #4930

Open
1 task done
pvinci-arista opened this issue Jan 24, 2025 · 2 comments
Open
1 task done

Feat(eos_designs): support type 8a bgp passwords #4930

pvinci-arista opened this issue Jan 24, 2025 · 2 comments
Labels
type: enhancement New feature or request

Comments

@pvinci-arista
Copy link
Contributor

Enhancement summary

When

management security
   password encryption reversible aes-256-gcm

is configured, type 8a passwords are shown in the configuration. AVD always specifies the type 7 password

bgp_peer_groups:
  ipv4_underlay_peers:

    # Name of peer group.
    name: <str; default="IPv4-UNDERLAY-PEERS">

    # Type 7 encrypted password.
    password: <str>

Which component of AVD is impacted

eos_designs

Use case example

please detail your use case

Describe the solution you would like

The feature requested is to change the password type to 8a when password encryption reversible aes-256-gcm is set. In the alternative, set an additional key specifying the password_type under the peer_group.

Describe alternatives you have considered

We used a python script to update the setting, basically doing a:

eos_cli = eos_cli.replace("password 7", "password 8a")

Additional context

No response

Contributing Guide

  • I agree to follow this project's Code of Conduct
@pvinci-arista pvinci-arista added the type: enhancement New feature or request label Jan 24, 2025
@ClausHolbechArista
Copy link
Contributor

We have investigated this, and we cannot implement this support in AVD. Unicast me for details.

@ClausHolbechArista
Copy link
Contributor

Hmm maybe I reacted to quickly. If this is only asking for the password type to be 8a we could do it, but it would require you to encrypt the password on a box and put the encrypted string into the AVD inputs. What we would not support is allowing the arista.avd.password filter to encrypt passwords with 8a.

Implementing this support would also mean we need to enforce

management security
   password encryption reversible aes-256-gcm

somehow.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
type: enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants