PurposeCommand or Action
RP/0/RP0/CPU0:router# show running-config router
isis isp
• Verify that “nsf” appears in the IS-IS configuration of
the NSF-aware device.
• This example shows the contents of the configuration
file for the “isp” instance only.
Configuring Authentication for IS-IS
This task explains how to configure authentication for IS-IS. This task is optional.
SUMMARY STEPS
1. configure
2. router isis instance-id
3. lsp-password { hmac-md5 | text } { clear | encrypted } password [ level { 1 | 2 }] [ send-only
] [ snp send-only ]]
4. interface type interface-path-id
5. hello-password { hmac-md5 | text } { clear | encrypted } password [ level { 1 | 2 }] [ send-only
]
6. commit
DETAILED STEPS
PurposeCommand or Action
configure
Step 1
Enables IS-IS routing for the specified routing instance,
and places the router in router configuration mode.
router isis instance-id
Example:
Step 2
• You can change the level of routing to be performed
by a particular routing instance by using the is-type
command.
RP/0/RP0/CPU0:router(config)# router isis isp
Configures the LSP authentication password.lsp-password { hmac-md5 | text } { clear | encrypted
} password [ level { 1 | 2 }] [ send-only ] [ snp
send-only ]]
Step 3
• The hmac-md5 keyword specifies that the password
is used in HMAC-MD5 authentication.
Example:
• The text keyword specifies that the password uses
cleartext password authentication.
RP/0/RP0/CPU0:router(config-isis)# lsp-password
hmac-md5 clear password1 level 1
• The clear keyword specifies that the password is
unencrypted when entered.
• The encrypted keyword specifies that the password
is encrypted using a two-way algorithm when entered.
• The level 1 keyword sets a password for
authentication in the area (in Level 1 LSPs and Level
SNPs).
Routing Configuration Guide for Cisco NCS 6000 Series Routers, IOS XR Release 6.4.x
223
Implementing IS-IS
Configuring Authentication for IS-IS