Extreme Networks ExtremeWare 7.7, Command Reference Manual

Page: 1795 / 2620

configure isis vlan authentication
ExtremeWare 7.7 Command Reference Guide 1795
configure isis vlan authentication
configure isis vlan <vlan name> [level-1 | level-2 | level-1-2]
authentication [simple-password <isis simple password> {no-check} |
hmac-md5 <hmac-md5> {no-check} | none]
Description
Configures authentication on a VLAN for the IS-IS levels on a routing interface:
Syntax Description
Default
An interface does not have any authentication configured on it by default.
Usage Guidelines
Two types of authentication are supported: simple password and HMAC-MD5. Simple password
authentication inserts a text password in the transmitted packet. HMAC-MD5 authentication inserts an
authentication key that is generated using the cryptographic hash function, HMAC, on the data present
in the packet. The
no-check
option prevents the system from dropping received packets that cannot be
authenticated.
The
level-1
,
level-2
, and
level-1-2
options specify the levels on which the authentication is to be
configured.
Example
The following command configures authentication for level 1 and level 2 to use the simple password
“extreme” for vlan
v1 , and to drop non-authenticated packets:
configure isis vlan v1 level-1-2 authentication simple-password extreme
History
This command was first available in ExtremeWare v6.1.8 IS-IS tech release and subsequently
incorporated into ExtremeWare 7.0.0.
Platform Availability
This command is available on the “i” series platforms.
vlan name Specifies the name of a VLAN.
level-1 Specifies IS-IS level 1.
level-2 Specifies IS-IS level 2.
level-1-2 Specifies IS-IS level 1 and level 2.
isis simple password Specifies simple password authentication.
no-check Specifies not to drop packets that cannot be authenticated.
md5 key Specifies HMAC-MD5 authentication.