aristanetworks / avd

Arista Validated Designs
https://avd.arista.com
Apache License 2.0
296 stars 213 forks source link

Check BGP passwords are correctly encrypted #1770

Open gmuloc opened 2 years ago

gmuloc commented 2 years ago

Enhancement summary

The idea is to be able to detect when generating the intended config if the BGP passwords look correctly encrypted or not.

https://medium.com/@what_if/encrypting-decrypting-arista-bgp-bmp-ospf-passwords-ff2072460942

the code inside EOS is available but it relies on some C class as described here:

https://blog.koehntopp.info/2021/11/22/arista-type-7-passwords.html

this same article points to a POC in python.

Which component of AVD is impacted

eos_cli_config_gen

Use case example

Waiting to push data on the switch to realize that the password is wrongly encrypted can be long. This would help pre-check the configuration before pushing it

Describe the solution you would like

Some helper code running that would be able to verify if the passwords given are correct

Describe alternatives you have considered

No response

Additional context

No response

Contributing Guide

github-actions[bot] commented 2 years ago

This issue is stale because it has been open 90 days with no activity. Remove stale label or comment or this will be closed in 15 days

github-actions[bot] commented 1 year ago

This issue is stale because it has been open 90 days with no activity. Remove stale label or comment or this will be closed in 15 days

github-actions[bot] commented 1 year ago

This issue is stale because it has been open 90 days with no activity. The issue will be reviewed by a maintainer and may be closed

github-actions[bot] commented 6 months ago

This issue is stale because it has been open 90 days with no activity. The issue will be reviewed by a maintainer and may be closed