Is-is authentication configuration example, Network requirements – H3C Technologies H3C S12500 Series Switches User Manual

Page 201

Advertising
background image

185

Protocol: ISIS Process ID: 1

Preference: 10 Cost: 10

IpPrecedence: QosLcId:

NextHop: 13.13.13.2 Interface: Vlan-interface200

BkNextHop: 12.12.12.2 BkInterface: Vlan-interface100

RelyNextHop: 0.0.0.0 Neighbor : 0.0.0.0

Tunnel ID: 0x0 Label: NULL

BKTunnel ID: 0x0 BKLabel: NULL

State: Active Adv Age: 00h01m27s

Tag: 0

# Display route 1.1.1.1/32 on Switch D to view the backup next hop information.

[SwitchD] display ip routing-table 1.1.1.1 verbose

Routing Table : Public

Summary Count : 1

Destination: 1.1.1.1/32

Protocol: ISIS Process ID: 1

Preference: 10 Cost: 10

IpPrecedence: QosLcId:

NextHop: 13.13.13.1 Interface: Vlan-interface200

BkNextHop: 24.24.24.2 BkInterface: Vlan-interface101

RelyNextHop: 0.0.0.0 Neighbor : 0.0.0.0

Tunnel ID: 0x0 Label: NULL

BKTunnel ID: 0x0 BKLabel: NULL

State: Active Adv Age: 00h01m27s

Tag: 0

IS-IS authentication configuration example

Network requirements

As shown in

Figure 71

, Switch A, Switch B, Switch C, and Switch D reside in the same IS-IS routing

domain.
Switch A, Switch B, and Switch C belong to Area 10, and Switch D belongs to Area 20.
Configure neighbor relationship authentication between neighbors. Configure area authentication in
Area 10 to prevent untrusted routes from entering into the area. Configure routing domain authentication

on Switch C and Switch D to prevent untrusted routes from entering the routing domain.

Advertising