Huawei Quidway S6500 Series - Domain-Authentication-Mode

Command Manual - Routing Protocol
Quidway S6500 Series Ethernet Switches Chapter 4 Integrated IS-IS Configuration Commands
Huawei Technologies Proprietary
4-11
IS_SPFTRIG_PERIODIC 3 21 0:48:25
IS_SPFTRIG_LSPEXPIRED 3 19 0:34:10
IS_SPFTRIG_PERIODIC 3 19 0:33:25
IS_SPFTRIG_PERIODIC 3 18 0:18:25
IS_SPFTRIG_LSPCHANGE 3 19 0:13:26
IS_SPFTRIG_PERIODIC 3 19 0:3:25
IS_SPFTRIG_LSPCHANGE 2 19 1:12:7
4.1.12 domain-authentication-mode
Syntax
domain-authentication-mode { simple | md5 } password [ ip | osi ]
undo domain-authentication-mode { simple | md5 } [ ip | osi ]
View
IS-IS view
Parameter
simple: Configure to transmit the password in plain text.
md5: Configure to transmit the password encrypted with MD5 algorithm.
password: If the authentication is in the simple mode, the password must be in plain
text. If the authentication is in the md5 mode, the password can be either in cipher text
or in plain text, and it will be displayed in a cipher text form in a length of 24 characters
when display current-configuration command is executed. A plain text password is a
sequential character string of no more than 16 characters, for example, h3c. The length
of an cipher text must be 24 characters, for example, _(TT8F]Y\5SQ=^Q`MAF4<1!!.
ip: If this item is configured, the system checks the configuration of the corresponded
field of the IP in LSP.
osi: If this item is configured, the system checks the configuration of the corresponded
field of the OSI in LSP.
The configuration of ip or osi is independent of the real network environment.
Description
Using domain-authentication-mode command, you can configure IS-IS to
authenticate the received level-2 routing packets (LSP, CSNP, PSNP), according to the
pre-defined mode and password. Using undo domain-authentication-mode
command, you can configure IS-IS not to authenticate the said packets.
In default configuration, the system will not authenticate the received level-2 routing
packets, and there is no password. By using this command, you can clear all the level-2
routing packets, whose domain authentication passwords do not consist with the one
set via this command. At the same time, this command will let IS-IS insert the domain