BigIron RX Series Configuration Guide 875
53-1002253-01
Globally configuring IS-IS on a device
28
The on-startup <secs> parameter specifies the number of seconds following a reload to set the
overload bit on. You can specify 0 or a number from 5 – 86400 (24 hours). The default is 0, which
means the device starts performing IS-IS routing immediately following a successful software
reload.
Configuring authentication
By default, the BigIron RX does not authenticate packets sent to or received from ESs or other ISs.
You can configure the following types of passwords for IS-IS globally.
If you configure a password, the device checks for the password in IS-IS packets received by the
device and includes the password in packets sent by the device. For example, the device checks all
Level-2 LSPDUs received by the device for the domain password you configure, and includes the
password in all Level-2 PDUs sent by the device.
Configuring a domain password
To configure an IS-IS domain password, enter a command such as the following.
BigIron RX(config-isis-router)# domain-password domain-1
This command configures the device to use the password “domain-1” to authenticate Level-2
LSPDUs.
Syntax: [no] domain-password <string>
The <string> parameter specifies the password. You can enter an alphanumeric string up to 80
characters long. The password can contain blank spaces. If you use a blank space in the password,
you must use quotation marks (“ “) around the entire password; for example, domain-password
“domain 1”.
Configuring an area password
To configure an IS-IS area password, enter a command such as the following.
BigIron RX(config-isis-router)# area-password area-51
This command configures the device to use the password “area-51” to authenticate Level-1
LSPDUs.
Syntax: [no] area-password <string>
The <string> parameter specifies the password. You can enter an alphanumeric string up to 80
characters long. The password can contain blank spaces. If you use a blank space in the password,
you must use quotation marks (“ “) around the entire password; for example, area-password “area
51”.
TABLE 134 IS-IS passwords
Password type Scope Where used Default
Domain Level-2 Level-2 LSPDU None configured
Area Level-1 Level-1 LSPDU None configured
Interface Level-1 and Level-2 Hello PDU None configured
To Next Page
Loading...
