Is-is authentication configuration example, Network requirements – H3C Technologies H3C S10500 Series Switches User Manual

Page 198

Advertising
background image

183

[SwitchS] display ip routing-table 4.4.4.4 verbose

Routing Table : Public

Summary Count : 1

Destination: 4.4.4.4/32

Protocol: ISIS Process ID: 1

Preference: 10 Cost: 10

IpPrecedence: QosLcId:

NextHop: 13.13.13.2 Interface: Vlan-interface200

BkNextHop: 12.12.12.2 BkInterface: Vlan-interface100

RelyNextHop: 0.0.0.0 Neighbor : 0.0.0.0

Tunnel ID: 0x0 Label: NULL

BKTunnel ID: 0x0 BKLabel: NULL

State: Active Adv Age: 00h01m27s

Tag: 0

# Display route 1.1.1.1/32 on Switch D. You can find the backup next hop information.

[SwitchD] display ip routing-table 1.1.1.1 verbose

Routing Table : Public

Summary Count : 1

Destination: 1.1.1.1/32

Protocol: ISIS Process ID: 1

Preference: 10 Cost: 10

IpPrecedence: QosLcId:

NextHop: 13.13.13.1 Interface: Vlan-interface200

BkNextHop: 24.24.24.2 BkInterface: Vlan-interface101

RelyNextHop: 0.0.0.0 Neighbor : 0.0.0.0

Tunnel ID: 0x0 Label: NULL

BKTunnel ID: 0x0 BKLabel: NULL

State: Active Adv Age: 00h01m27s

Tag: 0

IS-IS authentication configuration example

Network requirements

As shown in

Figure 69

, Switch A, Switch B, Switch C and Switch D reside in the same IS-IS routing

domain.
Switch A, Switch B, and Switch C belong to Area 10, and Switch D belongs to Area 20.
Configure relationship authentication between neighbors. Configure area authentication in Area 10 to

prevent untrusted routes from entering into the area. Configure routing domain authentication on Switch

C and Switch D to prevent untrusted routes from entering the routing domain.

Advertising