H3C S7500 Series Ethernet Switches Operation Manual

Operation Manual – Routing Protocol
H3C S7500 Series Ethernet Switches Chapter 5 IS-IS Configuration
5-17
 Note:
If you do not provide the level-1 keyword or the level-2 keyword, this command
applies to Level-1 and Level-2.
5.3.16 Configuring Authentication
I. Configuring authentication on an interface
The authentication configured on the interface applies to the Hello packet in order to
authenticate neighbors. All interfaces must share the same authentication password
in the same level within a network.
Follow these steps to configure authentication:
To do... Use the command... Remarks
Enter system view
system-view
—
Enter interface view
interface interface-type
interface-number
—
Configure the IS-IS
authentication mode and
password
isis authentication-mode
{ simple | md5 } password
[ { level-1 | level-2 } [ ip | osi ] ]
Required
By default, no
authentication is
configured.
II. Configuring authentication for an IS-IS area or routing domain
You can configure an authentication password for an IS-IS area or routing domain.
If area authentication is required, the area authentication password is encapsulated in
the LSP, CSNP, and PSNP packets at Level-1 as predefined. If area authentication is
also enabled on other routers in the same area, area authentication works normally
only if the authentication mode and password of these routers are the same as those
of the neighboring routers.
Likewise, if domain authentication is required, the domain authentication password is
also encapsulated in the LSP, CSNP, and PSNP packets at Level-2 as predefined. If
domain authentication is also required on other routers at the backbone layer
(Level-2), the authentication works normally only if the authentication mode and
password of these routers are the same as those of the neighboring routers.
Follow these steps to configure authentication:
To do... Use the command... Remarks
Enter system view
system-view
—
Enter IS-IS view isis [ tag ] —