3Com Switch 7700 Configuration Manual page 146

138 C 5: IP R
HAPTER OUTING
P O
ROTOCOL PERATION
Setting Interface Authentication The authentication password set on the
interface is mainly used in the Hello packet to confirm the validity and correctness
of its peers. The authentication passwords at the same level for all the connected
interfaces of a network should be identical.
Perform the following configurations in VLAN interface view..
Table 66 Setting the Interface Authentication Password
Operation
Set the authentication password
Delete the authentication-mode password
By default, the interface is not configured with any authentication password and
does not perform authentication. If the level is not specified when you set
authentication, it defaults to set the authentication password of Level-1.
IP or OSI authentication mode is not related to whether IP or OSI CLNP packet
forwarding is used. OSI authentication mode is most common.
Setting the IS-IS Area or IS-IS Routing Domain Authentication Password
Users can configure the IS-IS area or the IS-IS routing domain with an
authentication password.
If area authentication is needed, the area authentication password will be
encapsulated into the level-1 LSP, CSNP and PSNP packets, using the specified
mode (md5 or simple text). All routers in the same area must have identical
passwords and authentication modes to work together correctly. Similarly, for
domain authentication, the password will be encapsulated into the level-2 LSP,
CSNP and PSNP packets using the specified mode. If the routers in the backbone
layer (level-2) need domain authentication, the authentication mode and
password must be identical on all.
The passwords for authentication of the routers on the same network segment
must be identical.
Perform the following configurations in IS-IS view.
Table 67 Setting IS-IS Authentication Password
Operation
Set authentication-mode password
Delete authentication-mode password
Set routing domain authentication password
Delete routing domain authentication
password
By default, the system does not require passwords or perform authentication.
Command
isis authentication-mode { simple | md5 }
password [ { level-1 | level-2 } [ ip | osi ] ]
undo isis authentication-mode { simple |
md5 } password [ { level-1 | level-2 } [ ip | osi
] ]
Command
area-authentication-mode { simple | md5 }
password [ ip | osi ]
undo area-authentication-mode { simple |
md5 } [ ip | osi ]
domain-authentication-mode { simple |
md5 } password [ ip | osi ]
undo domain-authentication-mode {
simple | md5 } [ ip | osi ]