Is-Is Authentication Configuration Example - H3C S5800 Series Configuration Manual

[SwitchD] bfd echo-source-ip 4.4.4.4
[SwitchD] ip ip-prefix abc index 10 permit 1.1.1.1 32
[SwitchD] route-policy frr permit node 10
[SwitchD-route-policy] if-match ip-prefix abc
[SwitchD-route-policy]
backup-nexthop 24.24.24.2
[SwitchD-route-policy] quit
[SwitchD] isis 1
[SwitchD-isis-1] fast-reroute route-policy frr
[SwitchD-isis-1] quit
3) Verify the configuration
# Display route 4.4.4.4/32 on Switch S and you can view the backup next hop information.
[SwitchS] display ip routing-table 4.4.4.4 verbose
Routing Table : Public
Summary Count : 1
Destination: 4.4.4.4/32
Protocol: ISIS
Preference: 10
NextHop: 13.13.13.2
BkNextHop: 12.12.12.2
RelyNextHop: 0.0.0.0
Tunnel ID: 0x0
State: Active Adv
Tag: 0
# Display route 1.1.1.1/32 on Switch D. You can find the backup next hop information.
[SwitchD] display ip routing-table 1.1.1.1 verbose
Routing Table : Public
Summary Count : 1
Destination: 1.1.1.1/32
Protocol: ISIS
Preference: 10
NextHop: 13.13.13.1
BkNextHop: 24.24.24.2
RelyNextHop: 0.0.0.0
Tunnel ID: 0x0
State: Active Adv
Tag: 0

IS-IS Authentication Configuration Example

Network requirements
As shown in Figure
domain.
Switch A, Switch B, and Switch C belong to Area 10, and Switch D belongs to Area 20.
Configure neighbor relationship authentication between neighbors. Configure area authentication in
Area 10 to prevent untrusted routes from entering into the area. Configure routing domain
authentication on Switch C and Switch D to prevent untrusted routes from entering the routing domain.
apply fast-reroute
Process ID: 1
Cost: 10
Interface: Vlan-interface200
BkInterface: Vlan-interface100
Neighbor : 0.0.0.0
Label: NULL
Age: 00h01m27s
Process ID: 1
Cost: 10
Interface: Vlan-interface200
BkInterface: Vlan-interface101
Neighbor : 0.0.0.0
Label: NULL
Age: 00h01m27s
5-21, Switch A, Switch B, Switch C and Switch D reside in the same IS-IS routing
backup-interface
5-56
vlan-interface 101