Configuring Authentication - H3C S7500 Series Operation Manual

Operation Manual – Routing Protocol
H3C S7500 Series Ethernet Switches
Note:
If you do not provide the level-1 keyword or the level-2 keyword, this command
applies to Level-1 and Level-2.

5.3.16 Configuring Authentication

I. Configuring authentication on an interface
The authentication configured on the interface applies to the Hello packet in order to
authenticate neighbors. All interfaces must share the same authentication password
in the same level within a network.
Follow these steps to configure authentication:
Enter system view
Enter interface view
Configure the IS-IS
authentication mode and
password
II. Configuring authentication for an IS-IS area or routing domain
You can configure an authentication password for an IS-IS area or routing domain.
If area authentication is required, the area authentication password is encapsulated in
the LSP, CSNP, and PSNP packets at Level-1 as predefined. If area authentication is
also enabled on other routers in the same area, area authentication works normally
only if the authentication mode and password of these routers are the same as those
of the neighboring routers.
Likewise, if domain authentication is required, the domain authentication password is
also encapsulated in the LSP, CSNP, and PSNP packets at Level-2 as predefined. If
domain authentication is also required on other routers at the backbone layer
(Level-2), the authentication works normally only if the authentication mode and
password of these routers are the same as those of the neighboring routers.
Follow these steps to configure authentication:
Enter system view
Enter IS-IS view
To do...
system-view
interface interface-type
interface-number
isis authentication-mode
{ simple | md5 } password
[ { level-1 | level-2 } [ ip | osi ] ]
To do...
system-view
isis [ tag ]
Use the command...
Use the command...
5-17
Chapter 5 IS-IS Configuration
Remarks
—
—
Required
By default, no
authentication is
configured.
Remarks
—
—