authentication mode

Use this command to configure IS-IS authentication mode for this device.

Syntax

authentication mode {md5 | text} [level-1 | level-1-2 | level-2]
no authentication mode {md5 | text} [level-1 | level-1-2 | level-2]

Parameters

md5 Specifies MD5 as the IS-IS authentication mode.
text Specifies text as the IS-IS authentication mode.
level-1 (Optional) Specifies that the authentication mode configuration should be restricted to level 1.
level-1-2 (Optional) Specifies that the authentication mode configuration should be applied to both level 1 and level 2.
level-2 (Optional) Specifies that the authentication mode configuration should be restricted to level 2.

Defaults

If no option is specified, the mode configuration is applied to both level 1 and level 2.

Mode

IS-IS router configuration.

Usage

The IS-IS MD5 mode authentication provides a cryptographic hash MD5 digest to each IS-IS PDU, preventing unauthorized routing messages to enter the IS-IS domain.

IS-IS has five packet types: link state packet (LSP), LAN Hello, Serial Hello, CSNP, and PSNP. The MD5 authentication or the clear text password authentication is applied to each IS-IS PDU type. The IS-IS level that the authentication is applied to can be specified for each level type.

The “no” form of this command removes the IS-IS authentication mode configuration.

Example

This example shows how to configure the IS-IS authentication to MD5 for level 1:

System(rw)->configure
System(rw-config)->router isis
System(rw-config-isis)->authentication mode md5 level-1
System(rw-config-isis)->