You can configure authentication configure authentication for a given IS-IS level on an interface. On a point-to-point link, if you enable hello authentication for both IS-IS levels, the password configured for Level 1 is used for both levels.
![]() |
Caution: If no authentication is configured for Level 1on a point-to-point link with both levels enabled, the hello packets are sent without any password, regardless of the Level 2 authentication configurations. |
By default, hello authentication is not configured on an interface. However, if IS-IS authentication is configured, the hello packets are authenticated using the IS-IS authentication type and password.
To enable hello authentication for an IS-IS level on an interface and define the password, include the hello-authentication-type and hello-authentication-key statements:
-
hello-authentication-type (md5 | simple);
-
hello-authentication-key password;
For a list of hierarchy levels at which you can include these statements, see the statement summary sections for these statements.