HP VPN Firewall Appliances Network Management Command Reference

414
Views
Interface view
Default command level
2: System level
Parameters
md5: Specifies the MD5 authentication mode.
simple: Specifies the simple authentication mode.
cipher: Sets a ciphertext password. If this keyword is not specified, you set a plaintext password.
password: Set the password. This argument is case sensitive. It must be a plaintext string of 1 to 16
characters, or a ciphertext string of 33 to 53 characters.
level-1: Configures the password for Level-1.
level-2: Configures the password for Level-2.
ip: Checks IP related fields in LSPs and SNPs.
osi: Checks OSI related fields in LSPs and SNPs.
Usage guidelines
Whether a password should use ip or osi is not affected by the actual network environment.
The password in the specified mode is inserted into all outgoing hello packets and is used for
authenticating the incoming hello packets. Only the authentication succeeds can the neighbor
relationship be formed.
For two routers to become neighbors, the same authentication mode and password must be specified at
both ends.
For security purposes, all passwords, including passwords configured in plain text, are saved in cipher
text.
If you configure a password without specifying a level, the password applies to both Level-1 and Level-2.
If neither ip nor osi is specified, the OSI related fields in LSPs are checked.
The level-1 and level-2 keywords are configurable on an interface that has had IS-IS enabled with the isis
enable command.
Examples
# On GigabitEthernet 1/1, configure the Level-1 adjacency authentication mode as simple, and set the
plaintext password to 123456 .
<Sysname> system-view
[Sysname] interface gigabitethernet 1/1
[Sysname-GigabitEthernet1/1] isis authentication-mode simple 123456 level-1
Related commands
• area-authentication-mode
• domain authentication-mode
isis circuit-level
Use isis circuit-level to set the circuit level for the interface.