Brocade Multi-Service IronWare Routing Configuration Guide (Supporting R05.6.00) User Manual

Page 287

Advertising
background image

Multi-Service IronWare Routing Configuration Guide

259

53-1003033-02

Globally configuring IS-IS on a device

Configuring IS-IS MD5 authentication on a specified interface

To configure IS-IS MD5 authentication on a specified interface on a Brocade device, you must
perform the following tasks:

Configure IS-IS Interface Authentication Mode for a Specified Interface

Configure IS-IS Authentication Key on the Interface

Disable IS-IS Authentication Check on an Interface (optional)

Configuring IS-IS authentication mode for a specified interface
The following commands configure the IS-IS for the authentication mode on a specified interface.

Brocade(config)# interface ethernet 3/1

Brocade(config-if-e10000-3/1)# isis auth-mode md5 level-1

Syntax: [no] isis auth-mode [ cleartext | md5 ] [ level-1 | level-2 ]

The cleartext parameter specifies that the IS-IS PDUs will be authenticated using a cleartext
password.

The md5 parameter specifies that the IS-IS PDUs authenticated using the Hashed Message
Authentication codes - Message Digest 5 (HMAC-MD5) algorithm.

The level-1 parameter specifies that the authentication TLV tuple be added to the L1 Hello packets.

The level-2 parameter specifies that the authentication TLV tuple be added to the L2 Hello packets.

NOTE

If either level-1 or level-2 are not specified, the configuration is applied to both level-1 and level-2.

Configuring an IS-IS authentication key for a specified interface
The following commands configure an authentication key to be used with the mode specified in

“Configuring IS-IS authentication mode for a specified interface”

.

Brocade(config)# interface ethernet 3/1

Brocade(config-if-e10000-3/1)# isis auth-key supervisor level-1

Syntax: [no] isis auth-key key [ level-1 | level-2 ]

The key value specifies a text string that is used as an authentication password. The authentication
mode must be configured before this value can be configured.

The level-1 parameter specifies that the authentication key specified here is used to authenticate
the L1 Hello packets.

The level-2 parameter specifies that the authentication key specified here is used to authenticate
the L2 Hello packets.

NOTE

If either level-1 or level-2 are not specified, the configuration is applied to both level-1 and level-2.

NOTE

If the authentication mode is reset for the level specified, the authentication key must also be reset.

Advertising