(Optional.) Enhancing IS-IS network security:
• Configuring neighbor relationship authentication
• Configuring area authentication
• Configuring routing domain authentication
(Optional.) Configuring IS-IS GR
(Optional.) Configuring BFD for IS-IS
(Optional.) Configuring IS-IS FRR
Configuring basic IS-IS
Configuration prerequisites
Before the configuration, complete the following tasks:
• Configure the link layer protocol.
• Configure IP addresses for interfaces to ensure IP connectivity between neighboring nodes.
Enabling IS-IS
Ste
Remarks
1. Enter system view.
system-view N/A
2. Create an IS-IS process and enter
its view.
isis [ process-id ] [ vpn-instance
vpn-instance-name ]
By default, the IS-IS process is
disabled.
3. Assign a NET.
network-entity net By default, NET is not assigned.
4. Return to system view.
quit N/A
5. Enter interface view.
interface interface-type
interface-number
N/A
6. Enable an IS-IS process on the
interface.
isis enable [ process-id ]
By default, no IS-IS process is
enabled.
Configuring the IS level and circuit level
Follow these guidelines when you configure the IS level for routers in only one area:
• Configure the IS level of all routers as Level-1 or Level-2 rather than different levels because the
routers do not need to maintain two identical LSDBs.
• Configure the IS level as Level-2 on all routers in an IP network for good scalability.
For an interface of a Level-1 (or Level-2) router, the circuit level can only be Level-1 (or Level-2). For an
interface of a Level-1-2 router, the default circuit level is Level-1-2; if the router only needs to form Level-1 (or
Level-2) neighbor relationships, configure the circuit level for its interfaces as Level-1 (or Level-2) to limit
neighbor relationship establishment.
To Next Page
Loading...
