I know that when setting up VTP across switches in a network you should set a secret/password to prevent unauthorized requests. My question is I know that this uses an MD5 hash to ensure that attackers don't falsify any requests, but I haven't been able to find a decent explanation of how this hash is calculated. Is it salted with the domain of the network? Is it a request salted with the password sent to the VTP server? Is it even salted at all? All i have seen when digging through Cisco documentation is stuff along the lines of "Requests are secured using a MD5 hash," but I have yet to see a decent explanation of how this hash is actually calculated.
Edit: I am attempting to crack a VTP password given a captured VTP packet. Hence why I want to know how the md5 hash is salted.