Cisco Nexus 7000 Series - Configuring IS-IS Authentication on an Interface

Send document comments to nexus7k-docfeedback@cisco.com.
9-14
Cisco Nexus 7000 Series NX-OS Unicast Routing Configuration Guide, Release 4.x
OL-20002-02
Chapter 9 Configuring IS-IS
Configuring IS-IS
DETAILED STEPS
The following example shows how to configure cleartext authentication on an IS-IS instance:
switch# config t
switch(config)# router isis Enterprise
switch(config-router)# authentication-type cleartext level-2
switch(config-router)# authentication key-chain ISISKey level-2
switch(config-router)# copy running-config startup-config
Configuring IS-IS Authentication on an Interface
You can configure IS-IS to authenticate Hello packets on an interface.
BEFORE YOU BEGIN
Ensure that you have enabled the IS-IS feature (see the “Enabling the IS-IS Feature” section on
page 9-7).
Ensure that you are in the correct VDC (or use the switchto vdc command).
Command Purpose
Step 1
config t
Example:
switch# config t
switch(config)#
Enters configuration mode.
Step 2
router isis instance-tag
Example:
switch(config)# router isis Enterprise
switch(config-router)#
Creates a new IS-IS instance with the configured
instance tag.
Step 3
authentication-type {cleartext | md5}
{level-1 | level-2}
Example:
switch(config-router)#
authentication-type cleartext level-2
Sets the authentication method used for a Level 1 or
Level 2 area as cleartext or as an MD5 authentication
digest.
Step 4
authentication key-chain key {level-1 |
level-2}
Example:
switch(config-router)# authentication
key-chain ISISKey level-2
Configures the authentication key used for an IS-IS
area-level authentication.
Step 5
authentication-check {level-1 | level-2}
Example:
switch(config-router)#
authentication-check level-2
(Optional) Enables checking the authentication
parameters in a received packet.
Step 6
copy running-config startup-config
Example:
switch(config-router)# copy
running-config startup-config
(Optional) Saves this configuration change.