Authentication (Bfd) - Cisco Catalyst 3650 series Command Reference Manual

authentication (BFD)

authentication (BFD)
To configure authentication in a Bidirectional Forwarding Detection (BFD) template for single hop sessions,
use the authentication command in BFD configuration mode. To disable authentication in BFD template for
single-hop sessions, use the no form of this command
authentication authentication-type keychain keychain-name
no authentication authentication-type keychain keychain-name
Syntax Description
authentication-type
keychain keychain-name
Command Default
Authentication in BFD template for single hop sessions is not enabled.
Command Modes
BFD configuration (config-bfd)
Command History
Release
Cisco IOS XE Denali 16.3.1
Usage Guidelines
You can configure authentication in single hop templates. We recommend that you configure authentication
to enhance security. Authentication must be configured on each BFD source-destination pair, and authentication
parameters must match on both devices.
Examples
The following example shows how to configure authentication for the template1 BFD single-hop template:
Device> enable
Device# configuration terminal
Device(config)# bfd-template single-hop template1
Device(config-bfd)# authentication sha-1 keychain bfd-singlehop
Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
684
Authentication type. Valid values are md5, meticulous-md5,
meticulous-sha1, and sha-1.
Configures an authentication key chain with the specified name. The
maximum number of characters allowed in the name is 32.
Modification
This command was introduced.