DETAILED STEPS
Step 1 configure
Step 2 router isis instance-id
Example:
RP/0/RP0/CPU0:router(config)# router isis isp
Enables IS-IS routing for the specified routing instance, and places the router in router configuration mode.
• You can change the level of routing to be performed by a particular routing instance by using the is-type command.
Step 3 lsp-password { hmac-md5 | text } { clear | encrypted } password [ level { 1 | 2 }] [ send-only ] [ snp send-only
]
Example:
RP/0/RP0/CPU0:router(config-isis)# lsp-password hmac-md5 clear password1 level 1
Configures the LSP authentication password.
• The hmac-md5 keyword specifies that the password is used in HMAC-MD5 authentication.
• The text keyword specifies that the password uses cleartext password authentication.
• The clear keyword specifies that the password is unencrypted when entered.
• The encrypted keyword specifies that the password is encrypted using a two-way algorithm when entered.
• The level 1 keyword sets a password for authentication in the area (in Level 1 LSPs and Level SNPs).
• The level 2 keywords set a password for authentication in the backbone (the Level 2 area).
• The send-only keyword adds authentication to LSP and sequence number protocol data units (SNPs) when they
are sent. It does not authenticate received LSPs or SNPs.
• The snp send-only keyword adds authentication to SNPs when they are sent. It does not authenticate received
SNPs.
To disable SNP password checking, the snp send-only keywords must be specified in the lsp-password
command.
Note
Step 4 interface type interface-path-id
Example:
RP/0/RP0/CPU0:router(config-isis)# interface GigabitEthernet 0/1/0/3
Enters interface configuration mode.
Step 5 hello-password { hmac-md5 | text } { clear | encrypted } password [ level { 1 | 2 }] [ send-only ]
Example:
RP/0/RP0/CPU0:router(config-isis-if)#hello-password text clear mypassword
Configures the authentication password for an IS-IS interface.
Routing Configuration Guide for Cisco NCS 5500 Series Routers, IOS XR Release 6.3.x
24
Implementing IS-IS
Configure Authentication for IS-IS