161
To configure routing domain authentication:
1. Enter system view.
N/A
2. Enter IS-IS view.
isis
[ process-id ] [
vpn-instance
vpn-instance-name ]
N/A
3. Specify the routing domain
authentication mode and
key.
domain-authentication-mode
{ {
gca
key-id {
hmac-sha-1
|
hmac-sha-224
|
hmac-sha-256
|
hmac-sha-384
|
hmac-sha-512
}
[
nonstandard
] |
md5
|
simple
}
{
cipher
|
plain
} string |
keychain
keychain-name } [
ip
|
osi
]
By default, no routing domain
authentication is configured.
4. (Optional.) Configure the
interface not to check the
authentication information in
the received Level-2
packets, including LSPs,
CSNPs, and PSNPs.
domain-authentication
send-only
When the authentication mode
and key are configured, the
interface checks the
authentication information in the
received packets by default.
Configuring IS-IS GR
GR ensures forwarding continuity when a routing protocol restarts or an active/standby switchover
occurs.
Two routers are required to complete a GR process. The following are router roles in a GR process.
• GR restarter—Graceful restarting router. It must have GR capability.
• GR helper—A neighbor of the GR restarter. It assists the GR restarter to complete the GR
process. By default, the device acts as the GR helper.
Configure IS-IS GR on the GR restarter.
GR restarter uses the following timers:
• T1 timer—Specifies the times that GR restarter can send a Restart TLV with the RR bit set.
When rebooted, the GR restarter sends a Restart TLV with the RR bit set to its neighbor. If the
GR restarter receives a Restart TLV with the RA set from its neighbor before the T1 timer
expires, the GR process starts. Otherwise, the GR process fails.
• T2 timer—Specifies the LSDB synchronization interval. Each LSDB has a T2 timer. The
Level-1-2 router has a Level-1 timer and a Level-2 timer. If the LSDBs have not synchronized
before the two timers expire, the GR process fails.
• T3 timer—Specifies the GR interval. The GR interval is set as the holdtime in hello PDUs.
Within the interval, the neighbors maintain their adjacency with the GR restarter. If the GR
process has not completed within the holdtime, the neighbors tear down the neighbor
relationship and the GR process fails.
IS-IS GR and IS-IS NSR are mutually exclusive. Do not configure them at the same time.
To configure GR on the GR restarter:
1. Enter system view.
N/A
To Next Page
Loading...
Need help?
General