156
Parameters
md5: Specifies the MD5 authentication mode.
simple: Specifies the simple authentication mode.
gca: Specifies the generic cryptographic authentication mode.
key-id: Specifies an SA by its key ID in the range of 1 to 65535. The sender puts a key ID in the
authentication TLV, and the receiver uses the SA associated with the key ID to authenticate the incoming
packet.
hmac-sha-1: Specifies the HMAC-SHA-1 algorithm.
hmac-sha-224: Specifies the HMAC-SHA-224 algorithm.
hmac-sha-256: Specifies the HMAC-SHA-256 algorithm.
hmac-sha-384: Specifies the HMAC-SHA-384 algorithm.
hmac-sha-512: Specifies the HMAC-SHA-512 algorithm.
cipher: Sets a ciphertext password.
cipher-string: Specifies a ciphertext password of 33 to 53 characters.
plain: Sets a plaintext password.
plain-string: Specifies a plaintext password of 1 to 16 characters.
ip: Checks IP-related fields in LSPs.
osi: Checks OSI-related fields in LSPs.
Usage guidelines
The configured password in the specified mode is inserted into all outgoing Level-2 packets (LSP, CSNP,
and PSNP) and is used for authenticating the incoming Level-2 packets.
All the backbone routers must have the same authentication mode and password.
If neither ip nor osi is specified, the OSI-related fields in LSPs are checked.
For secrecy, all passwords, including passwords configured in plain text, are saved in cipher text.
Examples
# Configure the routing domain authentication mode as simple, and set the plaintext password to
123456 .
<Sysname> system-view
[Sysname] isis 1
[Sysname-isis-1] domain-authentication-mode plain 123456
Related commands
• area-authentication-mode
• isis authentication-mode
fast-reroute
Use fast-reroute to configure IS-IS FRR.
Use undo fast-reroute to restore the default.
To Next Page
Loading...
