156
Parameters
md5
: Specifies the MD5 authentication mode.
simple
:
Specifies the simple authentication mode.
gca
: Specifies the generic cryptographic authentication mode.
key-id
: Specifies an SA by its key ID in the range of 1 to 65535. The sender puts a key ID in the
authentication TLV, and the receiver uses the SA associated with the key ID to authenticate the incoming
packet.
hmac-sha-1
: Specifies the HMAC-SHA-1 algorithm.
hmac-sha-224
: Specifies the HMAC-SHA-224 algorithm.
hmac-sha-256
: Specifies the HMAC-SHA-256 algorithm.
hmac-sha-384
: Specifies the HMAC-SHA-384 algorithm.
hmac-sha-512
: Specifies the HMAC-SHA-512 algorithm.
cipher
: Sets a ciphertext password.
cipher-string
: Specifies a ciphertext password of 33 to 53 characters.
plain
: Sets a plaintext password.
plain-string
: Specifies a plaintext password of 1 to 16 characters.
ip
: Checks IP-related fields in LSPs.
osi
: Checks OSI-related fields in LSPs.
Usage guidelines
The configured password in the specified mode is inserted into all outgoing Level-2 packets (LSP, CSNP,
and PSNP) and is used for authenticating the incoming Level-2 packets.
All the backbone routers must have the same authentication mode and password.
If neither
ip
nor
osi
is specified, the OSI-related fields in LSPs are checked.
For secrecy, all passwords, including passwords configured in plain text, are saved in cipher text.
Examples
# Configure the routing domain authentication mode as
simple
, and set the plaintext password to
123456
.
<Sysname> system-view
[Sysname] isis 1
[Sysname-isis-1] domain-authentication-mode plain 123456
Related commands
•
area-authentication-mode
•
isis authentication-mode
fast-reroute
Use
fast-reroute
to configure IS-IS FRR.
Use
undo fast-reroute
to restore the default.