R3721-F3210-F3171-HP High-End Firewalls Network Management Configuration Guide-6PW101

Table Of Contents
514
ISIS(1) IPv4 Level-1 Forwarding Table
-------------------------------------
IPV4 Destination IntCost ExtCost ExitInterface NextHop Flags
--------------------------------------------------------------------------
10.1.1.0/24 10 NULL GE0/2 Direct D/L/-
10.1.2.0/24 10 NULL GE0/1 Direct D/L/-
192.168.0.0/24 10 NULL GE0/3 Direct D/L/-
Flags: D-Direct, R-Added to RM, L-Advertised in LSPs, U-Up/Down Bit Set
ISIS(1) IPv4 Level-2 Forwarding Table
-------------------------------------
IPV4 Destination IntCost ExtCost ExitInterface NextHop Flags
--------------------------------------------------------------------------
10.1.1.0/24 10 NULL GE0/2 Direct D/L/-
10.1.2.0/24 10 NULL GE0/1 Direct D/L/-
192.168.0.0/24 10 NULL GE0/3 Direct D/L/-
10.1.4.0/24 10 NULL GE0/3 192.168.0.2 R/L/-
10.1.5.0/24 20 NULL GE0/3 192.168.0.2 R/L/-
10.1.6.0/24 20 NULL GE0/3 192.168.0.2 R/L/-
Flags: D-Direct, R-Added to RM, L-Advertised in LSPs, U-Up/Down Bit Set
IS-IS authentication configuration example
Network requirements
As shown in Figure 296, Firewall A, Firewall B, Firewall C and Firewall D reside in the same IS-IS routing
domain.
Firewall A, Firewall B, and Firewall C belong to Area 10, and Firewall D belongs to Area 20.
Configure neighbor relationship authentication between neighbors. Configure area authentication in
Area 10 to prevent untrusted routes from entering into the area. Configure routing domain authentication
on Firewall C and Firewall D to prevent untrusted routes from entering the routing domain.