Enabling and Disabling Authentication of CSNPs and PSNPs

When the E-series router interoperates with other vendors’ routers in the same network, you might want to enable or disable (suppress) authentication for some PDU types but not for others. For example, some vendors’ routing software might not authenticate any PDUs, whereas other vendors’ routing software might authenticate CSNPs and PSNPs separately from LSPs.

To facilitate interoperability with other vendors’ routers, the E-series router allows you to enable and disable authentication of CSNPs and PSNPs separately from authentication of LSPs by using the following commands:

• The area-authentication { csnp | psnp } command enables or disables simple authentication or HMAC MD5 authentication of IS-IS level 1 CSNP packets or PSNP packets. By default, authentication of CSNPs and PSNPs is disabled.
• The domain-authentication { csnp | psnp } command enables or disables simple authentication or HMAC MD5 authentication of IS-IS level 2 CSNP packets or PSNP packets. By default, authentication of CSNPs and PSNPs is disabled.

When you suppress authentication of CSNPs, the router does not authenticate CSNP packets that it receives from neighboring routers, nor does it include authentication information in CSNP packets that it sends to other routers. Similarly, when you suppress authentication of PSNPs, the router neither authenticates PSNP packets that it receives nor sends authentication information in PSNP packets that it transmits.

Copyright © 2008, Juniper Networks, Inc. All rights reserved. Trademark Notice.