HP 5920 series Configuration Manual page 34

Step
1. Enter system view.
2. Enter Layer 2 Ethernet
interface view or Layer 2
aggregate interface view.
3. Configure the authentication
method and password.
4. (Optional.) Disable
adjacency authentication for
incoming IS-IS hello packets.
Configuring ISIS-SPB area authentication
ISIS-SPB area authentication guarantees that SPBM nodes learn topology data only from trustworthy
neighbors.
ISIS-SPB sends area authentication information (including the authentication method and password) in
topology advertisement packets (LSP, CSNP, and PSNP). The recipients accept a topology advertisement
packet only if the authentication settings in the packet match their local authentication settings.
For correct authentication, make sure the authentication method and password is the same across the
SPBM network.
To prevent temporary drops of topology advertisement packets, use the following procedure when you
modify authentication settings:
1. Disable area authentication for incoming ISIS-SPB topology advertisement packets on the neighbor
devices.
2. Modify the authentication settings on the local end.
3. Modify the authentication settings on the remote end.
4. Enable area authentication for incoming ISIS-SPB topology advertisement packets on the neighbor
devices.
To configure ISIS-SPB area authentication:
Step
1. Enter system view.
2. Enter SPBM view.
3. Set an authentication
method and password.
4. (Optional.) Disable
authenticating incoming
ISIS-SPB packets.
Command
system-view
interface interface-type
interface-number
spbm authentication-mode { md5 |
simple } { cipher cipher-string | plain
plain-string }
spbm authentication send-only
Command
system-view
spbm
area-authentication-mode
{ md5 | simple } { cipher
cipher-string | plain
plain-string }
area-authentication send-only
30
Remarks
N/A
N/A
By default, adjacency
authentication is disabled. No
authentication method or
password is configured.
By default, the device
authenticates incoming IS-IS hello
packets if adjacency
authentication is enabled.
Remarks
N/A
N/A
By default, area authentication is
disabled. No authentication method or
password is configured.
By default, the device authenticates
incoming ISIS-SPB packets if area
authentication is enabled.