Configuring Authentication For Is-Is - Cisco NCS 6000 Series Configuration Manual

Implementing IS-IS
Command or Action
RP/0/RP0/CPU0:router# show running-config router
isis isp

Configuring Authentication for IS-IS

This task explains how to configure authentication for IS-IS. This task is optional.
SUMMARY STEPS
1. configure
2. router isis instance-id
3. lsp-password { hmac-md5 | text } { clear | encrypted } password [ level { 1 | 2 }] [ send-only
] [ snp send-only ]]
4. interface type interface-path-id
5. hello-password { hmac-md5 | text } { clear | encrypted } password [ level { 1 | 2 }] [ send-only
]
6. commit
DETAILED STEPS
Command or Action
Step 1
configure
Step 2
router isis instance-id
Example:
RP/0/RP0/CPU0:router(config)# router isis isp
Step 3
lsp-password { hmac-md5 | text } { clear | encrypted
} password [ level { 1 | 2 }] [ send-only ] [ snp
send-only ]]
Example:
RP/0/RP0/CPU0:router(config-isis)# lsp-password
hmac-md5 clear password1 level 1
Purpose
Purpose
Enables IS-IS routing for the specified routing instance,
and places the router in router configuration mode.
Configures the LSP authentication password.
Routing Configuration Guide for Cisco NCS 6000 Series Routers, IOS XR Release 6.4.x
Configuring Authentication for IS-IS
• Verify that "nsf" appears in the IS-IS configuration of
the NSF-aware device.
• This example shows the contents of the configuration
file for the "isp" instance only.
• You can change the level of routing to be performed
by a particular routing instance by using the is-type
command.
• The hmac-md5 keyword specifies that the password
is used in HMAC-MD5 authentication.
• The text keyword specifies that the password uses
cleartext password authentication.
• The clear keyword specifies that the password is
unencrypted when entered.
• The encrypted keyword specifies that the password
is encrypted using a two-way algorithm when entered.
• The level 1 keyword sets a password for
authentication in the area (in Level 1 LSPs and Level
SNPs).
223