Configuring Authentication

You can set a password to authenticate IS-IS hello packets, and you can configure HMAC MD5 authentication for IS-IS interfaces.

isis authentication-key

• Use to specify a password associated with an interface for authentication of IS-IS hello packets, and to enable simple authentication of level 1 or level 2 hello packets.
• You can specify whether the password is for level 1 or level 2 hellos.
• Example

  host1(config-if)#isis authentication-key 0 red5flower6

• Use the no version to delete the password.
• See isis authentication-key

isis message-digest-key

• Use to configure HMAC MD5 authentication for an interface, and to enable MD5 authentication of level 1 or level 2 hello packets.
• Generates a secure, encrypted message digest of level 1 or level 2 hello packets and inserts the digest into the packet from which it is created. Level 1 is the default.
• You can specify whether the key is entered in unencrypted or encrypted format. If you do not specify which, the string is assumed to be unencrypted.
• Example

  host1(config-if)#isis message-digest-key 3 hmac-md5 wdi6c3s39n level-2

• For point-to-point interfaces, configure keys only for level 1, because only one hello packet is sent (at level 1), not one at level 1 and one at level 2. Keys configured at level 2 are ignored for point-to-point interfaces.
• Use the no version to delete the MD5 key, specified by the key ID, from the interface.
• See isis message-digest-key

Copyright © 2008, Juniper Networks, Inc. All rights reserved. Trademark Notice.