Configuring Authentication Of Csnps And Psnps - Juniper IGP - CONFIGURATION GUIDE V11.1.X Configuration Manual

JUNOSe 11.0.x IP, IPv6, and IGP Configuration Guide
domain-authentication-key
domain-message-digest-key

Configuring Authentication of CSNPs and PSNPs

You must enable and disable authentication of CSNP packets and PSNP packets
separately from authentication of LSP packets.
area-authentication
358
Configuring Global IS-IS Parameters
You can specify whether the key is entered in unencrypted or encrypted format.
If you do not specify which, the string is assumed to be unencrypted.
Example
host1(config-router)#area-message-digest-key 1 hmac-md5 kd4s8hnEK
Use the no version to delete the MD5 key specified by the key ID.
See area-message-digest-key
Use to specify a password used by neighboring routers for authentication of IS-IS
level 2 LSPs, CSNPs, and PSNPs.
Issuing this command enables simple authentication of level 2 LSPs only. To
enable simple authentication of level 2 CSNPs or PSNPs, use the
domain-authentication command.
You can specify whether the key is entered in unencrypted or encrypted format.
If you do not specify which, the string is assumed to be unencrypted.
Example
host1(config-router)#domain-authentication-key 8 4kl6n39us
Use the no version to delete the password.
See domain-authentication-key
Use to configure HMAC MD5 authentication for a domain.
Generates a secure, encrypted message digest of level 2 packets (LSPs, CSNPs,
and PSNPs) and inserts the digest into the packet from which it is created.
Issuing this command enables MD5 authentication of level 2 LSPs only. To enable
MD5 authentication of level 2 CSNPs or PSNPs, use the domain-authentication
command.
You can specify whether the key is entered in unencrypted or encrypted format.
If you do not specify which, the string is assumed to be unencrypted.
Example
host1(config-router)#domain-message-digest-key 4 hmac-md5 4bFjt7es
Use the no version to delete the MD5 key specified by the key ID.
See domain-message-digest-key