Operation Manual – IPv4 Routing
H3C S3610&S5510 Series Ethernet Switches
Chapter 4 IS-IS Configuration
4-32
Note:
The local host name on the local IS overwrites the remote host name on the remote IS.
4.5.8 Configuring IS-IS Authentication
For area authentication, the area authentication password is encapsulated into the
Level-1 LSP, CSNP, and PSNP packets. On area authentication enabled routers in the
same area, the authentication mode and password must be same.
For routing domain authentication, the domain authentication password is
encapsulated into the Level-2 LSP, CSNP, and PSNP packets. The domain
authentication enabled Level-2 routers in the backbone must adopt the same
authentication mode and share the same password.
The authentication configured on an interface applies to the hello packet in order to
authenticate neighbors. All interfaces within a network must share the same
authentication password at the same level.
Follow these steps to configure the authentication function:
To do…
Use the command…
Remarks
Enter system view
system-view
––
Enter IS-IS view
isis
[
process-id
]
[
vpn-instance
vpn-instance-name
]
––
Specify the area
authentication mode
area-authentication-m
ode
{
simple
|
md5
}
password
[
ip
|
osi
]
Required
No authentication is enabled
for Level-1 routing information,
and no password is specified
by default.
Specify the routing
domain authentication
mode
domain-authentication
-mode
{
simple
|
md5
}
password
[
ip
|
osi
]
Required
No authentication is enabled
for Level-2 routing information,
and no password is specified
by default.
Return to system view
quit
––
Enter interface view
interface
interface-type
interface-number
––
Specify the
authentication mode
and password
isis
authentication-mode
{
simple
|
md5
}
password
[
level-1
|
level-2
] [
ip
|
osi
]
Optional
No authentication and
password are available by
default.