Riverstone Networks WICT1-12 - Manual (Page 238)

15-4 Riverstone Networks RS Switch Router User Guide Release 8.0
Setting IS-IS Global Parameters IS-IS Configuration Guide
15.4.6 Setting IS-IS Authentication
The RS supports four levels of authentication for IS-IS: authentication between neighbors, within an area, within a
domain, and authentication of SNPs. The first three levels of authentication can use either MD5 or simple
authentication. (For additional information about these authentication methods, refer to
Chapter 18.1.5,
"Authentication." ) The following sections describe each level of authentication.
Authentication Between Neighbors
This level of authentication controls the exchange of hello packets between neighbors. All Level 1 interfaces should
use the same method of authentication, and all Level 2 interfaces should use the same authentication method. If
connecting interfaces have different types of authentication, they will not be able to exchange hello packets or form
adjacencies.
To specify the authentication method between neighbors, enter the following command in Configure mode:
Authentication Within an Area
This level of authentication controls the exchange of Level 1 LSPs. Routers which do not have the same authentication
at this level will be able to form adjacencies, but will not be able to exchange Level 1 LSPs. To configure authentication
within an area, enter the following command in Configure mode:
Authentication Within a Routing Domain
This type of authentication controls the exchange of LSPs between areas. Routers which do not have the same
authentication at this level will not be able to exchange Level 2 LSPs. To configure authentication within a routing
domain, enter the following command in Configure mode:
Sets the authentication method for the
interface.
isis set interface
<string>
authentication-method md5|simple key-chain
<string>
Sets the authentication method for an
area.
isis set area-key-chain
<string>
authentication-method none|md5|simple
Sets the authentication method for a
routing domain.
isis set domain-key-chain
<string>
authentication-method none|md5|simple