R3303-HP HSR6800 Routers Layer 3 - IP Routing Command Reference

135
IS-IS configuration commands
area-authentication-mode
Use area-authentication-mode to specify the area authentication mode and a password.
Use undo area-authentication-mode to restore the default.
Syntax
area-authentication-mode { md5 | simple } [ cipher ] password [ ip | osi ]
undo area-authentication-mode
Default
No area authentication is configured.
Views
IS-IS view
Default command level
2: System level
Parameters
md5: Specifies the MD5 authentication mode.
simple: Specifies the simple authentication mode.
cipher: Sets a ciphertext password. If this keyword is not specified, you set a plaintext password.
password: Sets the password. This argument is case sensitive. It must be a plaintext string of 1 to 16
characters, or a ciphertext string of 33 to 53 characters.
ip: Checks IP related fields in LSPs.
osi: Checks OSI related fields in LSPs.
Usage guidelines
The password in the specified mode is inserted into all outgoing Level-1 packets (LSP, CSNP, and PSNP)
and is used for authenticating the incoming Level-1 packets.
With area authentication configured, IS-IS discards incoming routes from untrusted routers.
Routers in a common area must have the same authentication mode and password.
If neither ip nor osi is specified, OSI related fields are checked. Whether a password should use ip or osi
is not affected by the actual network environment.
For security purposes, all passwords, including passwords configured in plain text, are saved in cipher
text to the configuration file.
Examples
# Configure the area authentication mode as simple, and set the plaintext password to ivg.
<Sysname> system-view
[Sysname] isis 1