Purpose
Command or Action
RP/0/RP0/CPU0:router# show running-config router
isis isp
• Verify that “nsf” appears in the IS-IS configuration of
the NSF-aware device.
• This example shows the contents of the configuration
file for the “isp” instance only.
Configuring Authentication for IS-IS
This task explains how to configure authentication for IS-IS. This task is optional.
SUMMARY STEPS
1.
configure
2.
router isis instance-id
3.
lsp-password
{
hmac-md5
|
text
} {
clear
|
encrypted
}
password
[
level
{
1
|
2
}] [
send-only
] [
snp send-only
]]
4.
interface type interface-path-id
5.
hello-password
{
hmac-md5
|
text
} {
clear
|
encrypted
}
password
[
level
{
1
|
2
}] [
send-only
]
6.
commit
DETAILED STEPS
Purpose
Command or Action
configure
Step 1
Enables IS-IS routing for the specified routing instance,
and places the router in router configuration mode.
router isis instance-id
Example:
Step 2
• You can change the level of routing to be performed
by a particular routing instance by using the
is-type
command.
RP/0/RP0/CPU0:router(config)# router isis isp
Configures the LSP authentication password.
lsp-password
{
hmac-md5
|
text
} {
clear
|
encrypted
}
password
[
level
{
1
|
2
}] [
send-only
] [
snp
send-only
]]
Step 3
• The
hmac-md5
keyword specifies that the password
is used in HMAC-MD5 authentication.
Example:
• The
text
keyword specifies that the password uses
cleartext password authentication.
RP/0/RP0/CPU0:router(config-isis)# lsp-password
hmac-md5 clear password1 level 1
• The
clear
keyword specifies that the password is
unencrypted when entered.
• The
encrypted
keyword specifies that the password
is encrypted using a two-way algorithm when entered.
• The
level 1
keyword sets a password for
authentication in the area (in Level 1 LSPs and Level
SNPs).
Routing Configuration Guide for Cisco NCS 6000 Series Routers, IOS XR Release 6.4.x
223
Implementing IS-IS
Configuring Authentication for IS-IS