H3C Technologies H3C SR8800 - Manual (Page 184)

168
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter IS-IS view.
isis [ process-id ] [ vpn-instance
vpn-instance-name ]
N/A
3. Specify the area
authentication mode and
password.
area-authentication-mode { md5 |
simple } password [ ip | osi ] By default, no area authentication
is configured.
Configuring routing domain authentication
Routing domain authentication prevents untrusted routing information from entering into a routing
domain. A router with the authentication configured encapsulates the password in the specified mode
into Level-2 packets (LSP, CSNP, PSNP) and check the password in received Level-2 packets.
All the routers in the backbone must have the same authentication mode and password.
To configure routing domain authentication:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter IS-IS view.
isis [ process-id ] [ vpn-instance
vpn-instance-name ]
N/A
3. Specify the routing domain
authentication mode and
password.
domain-authentication-mode
{ simple | md5 } password [ ip |
osi ]
By default, no routing domain
authentication is configured.
Configuring IS-IS GR
Restarting IS-IS on a router will cause network disconnections and route re-convergence.
With the Graceful Restart (GR) feature, the restarting router (known as the “GR restarter”) can notify the
event to its GR capable neighbors. GR capable neighbors (known as the “GR helpers”) will keep their
adjacencies with the router within a configurable GR interval. After the restart, the router contacts its
neighbors to retrieve its routing table.
During the whole process, the network keeps stable.
To configure GR on the GR Restarter and GR Helper respectively:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enable IS-IS, and
enter IS-IS view. isis [ process-id ] [ vpn-instance
vpn-instance-name ]
Disabled by default.
3. Enable the GR
capability for IS-IS.
graceful-restart Disabled by default.