Setting Authentication Passwords

You can configure simple authentication or HMAC MD5 authentication for either an area or a domain.

area-authentication-key

Use to specify a password used by neighboring routers for authentication of IS-IS level 1 LSPs, CSNPs, and PSNPs.
Issuing this command enables simple authentication of level 1 LSPs only. To enable simple authentication of level 1 CSNPs or PSNPs, use the area-authentication command.
You can specify whether the key is entered in unencrypted or encrypted format. If you do not specify which, the string is assumed to be unencrypted.
Examplehost1(config-router)#area-authentication-key 0 bigtree
Use the no version to delete the password.
See area-authentication-key

area-message-digest-key

Use to configure HMAC MD5 authentication for an area.
Generates a secure, encrypted message digest of level 1 packets (LSPs, CSNPs, and PSNPs) and inserts the digest into the packet from which it is created.
Issuing this command enables MD5 authentication of level 1 LSPs only. To enable MD5 authentication of level 1 CSNPs or PSNPs, use the area-authentication command.
You can specify whether the key is entered in unencrypted or encrypted format. If you do not specify which, the string is assumed to be unencrypted.
Example host1(config-router)#area-message-digest-key 1 hmac-md5 kd4s8hnEK
Use the no version to delete the MD5 key specified by the key ID.
See area-message-digest-key

domain-authentication-key

Use to specify a password used by neighboring routers for authentication of IS-IS level 2 LSPs, CSNPs, and PSNPs.
Issuing this command enables simple authentication of level 2 LSPs only. To enable simple authentication of level 2 CSNPs or PSNPs, use the domain-authentication command.
You can specify whether the key is entered in unencrypted or encrypted format. If you do not specify which, the string is assumed to be unencrypted.
Examplehost1(config-router)#domain-authentication-key 8 4kl6n39us
Use the no version to delete the password.
See domain-authentication-key

domain-message-digest-key

Use to configure HMAC MD5 authentication for a domain.
Generates a secure, encrypted message digest of level 2 packets (LSPs, CSNPs, and PSNPs) and inserts the digest into the packet from which it is created.
Issuing this command enables MD5 authentication of level 2 LSPs only. To enable MD5 authentication of level 2 CSNPs or PSNPs, use the domain-authentication command.
You can specify whether the key is entered in unencrypted or encrypted format. If you do not specify which, the string is assumed to be unencrypted.
Example host1(config-router)#domain-message-digest-key 4 hmac-md5 4bFjt7es
Use the no version to delete the MD5 key specified by the key ID.
See domain-message-digest-key