R0106-HP MSR Router Series Layer 3 - IP Routing Command Reference(V7)

246
level-2: Configures IS-IS not to check the authentication information in the received Level-2 hello packets.
Usage guidelines
When peer authentication mode and password are configured, an IS-IS interface adds the password in
the specified mode into transmitted hello packets. It also checks the password in the received hello
packets.
To prevent packet exchange failure in case of an authentication password change, configure the IS-IS
interface not to check the authentication information in the received packets.
Examples
# Configure the IS-IS interface not to check the authentication information in the received Level-1 hello
packets.
<Sysname> system-view
[Sysname] interface gigabitethernet 2/1/1
[Sysname-GigabitEthernet2/1/1] isis authentication send-only level-1
Related commands
• area-authentication send-only
• domain-authentication send-only
• isis authentication-mode
isis authentication-mode
Use isis authentication-mode to set the IS-IS authentication mode and password for an interface.
Use undo isis authentication-mode to remove the configuration.
Syntax
isis authentication-mode { md5 | simple | gca key-id { hmac-sha-1 | hmac-sha-224 | hmac-sha-256 |
hmac-sha-384 | hmac-sha-512 } } { cipher cipher-string | plain plain-string } [ level-1 | level-2 ] [ ip |
osi ]
undo isis authentication-mode [ level-1 | level-2 ]
Default
No neighbor relationship authentication is configured.
Views
Interface view
Predefined user roles
network-admin
Parameters
md5: Specifies the MD5 authentication mode.
simple: Specifies the simple authentication mode.
gca: Specifies the GCA mode.
key-id: Uniquely identifies an SA in the range of 1 to 65535. The sender inserts the Key ID into the
authentication TLV, and the receiver authenticates the packet by using the SA that is selected based on the
Key ID.
hmac-sha-1: Specifies the HMAC-SHA-1 algorithm.