Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


Example: Configuring BFD Authentication for IS-IS

This example shows how to configure BFD authentication for IS-IS.


Before you begin, configure IS-IS on both routers. See Example: Configuring IS-IS for information about the required IS-IS configuration.


In this example, a BFD authentication keychain is configured with meticulous keyed MD5 authentication.

Figure 1 shows the topology used in this example.

Figure 1: IS-IS BFD Authentication TopologyIS-IS BFD Authentication Topology

CLI Quick Configuration shows the configuration for both of the devices in Figure 1. The section #configuration228__isis-bfd-auth-step-by-step describes the steps on Device R1.



CLI Quick Configuration

To quickly configure this example, copy the following commands, paste them into a text file, remove any line breaks, change any details necessary to match your network configuration, and then copy and paste the commands into the CLI at the [edit] hierarchy level.

Device R1

Device R2

Step-by-Step Procedure

The following example requires you to navigate various levels in the configuration hierarchy. For information about navigating the CLI, see Using the CLI Editor in Configuration Mode in the CLI User Guide.

To configure IS-IS BFD authentication:

  1. Configure the authentication keychain.

  2. Enable BFD.

  3. Apply the authentication keychain.

  4. Set the authentication type.


From configuration mode, confirm your configuration by entering the show protocols and show security commands. If the output does not display the intended configuration, repeat the instructions in this example to correct the configuration.

If you are done configuring the device, enter commit from configuration mode.


Confirm that the configuration is working properly.

Verifying IS-IS BFD Authentication


Verify the status of IS-IS BFD authentication.


From operational mode, enter the show bfd session extensive command.


The output shows that BFD authentication is enabled on IS-IS Level 1 and Level 2.