Huawei Quidway NetEngine80E Configuration Manual page 664

HUAWEI NetEngine80E/40E Router
Configuration Guide - IP Routing
Procedure
l
Issue 02 (2014-09-30)
Configure IS-IS area authentication.
1. Run:
system-view
The system view is displayed.
2. Run:
isis [ process-id ]
The IS-IS view is displayed.
3. Run:
area-authentication-mode { simple { [ plain ] plain-text | cipher plain-
cipher-text } | md5 { [ cipher ] plain-cipher-text | plain plain-text } }
[ ip | osi ] [ snp-packet { authentication-avoid | send-only } | all-send-
only ]
or
area-authentication-mode keychain keychain-name [ snp-packet
{ authentication-avoid | send-only } | all-send-only ]
or
area-authentication-mode hmac-sha256 key-id key-id { plain plain-text |
[ cipher ] plain-cipher-text } [ snp-packet { authentication-avoid | send-
only } | all-send-only ]
The area authentication mode is configured.
NOTICE
After the area-authentication-mode command is run, IS-IS does not process the
Level-1 LSPs in the local LSDB that fail to be authenticated or new Level-1 LSPs and
SNPs that fail to be authenticated but discards them after they age.
Characters @%@% are used as the prefix and suffix of existing passwords with
variable lengths. Therefore, characters @%@% cannot be configured together at the
beginning or end of a simple text password.
IS-IS authentication involves the following situations:
– Authentication information is encapsulated in the sent LSPs and SNPs. The
received LSPs and SNPs should pass the authentication, and the ones that do not
pass the authentication are discarded. In this case, snp-packet or all-send-only is
inapplicable.
– Authentication information is encapsulated in the sent LSPs and received LSPs are
checked; however, authentication information is not encapsulated in the sent SNPs
and the received SNPs are not checked. In this case, snp-packet authentication-
avoid needs to be configured.
– Authentication information is encapsulated in the sent LSPs and SNPs. The
received LSPs are checked and the received SNPs are not checked. In this case,
snp-packet send-only needs to be configured.
– Authentication information is encapsulated in the sent LSPs and SNPs and the
received LSPs and SNPs are not checked. In this case, all-send-only needs to be
configured.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
7 IS-IS Configuration
639