isis authentication key-chain

Use this command to configure IS-IS authentication key chain on an interface.

Syntax

isis authentication key-chain keychain [level-1 | level-2]
no isis authentication key-chain keychain [level-1 | level-2]

Parameters

keychain Specifies the name of the key chain. Valid values are up to 16 alpha-numeric characters.
level-1 (Optional) Specifies that the key chain configuration should be restricted to level 1.
level-2 (Optional) Specifies that the key chain configuration should be restricted to level 2.

Defaults

If no level option is specified, the key chain is applied to both level 1 and level 2.

Mode

Interface configuration.

Usage

Key chain authentication is only performed if a key chain is configured.

Entering a key chain on an interface overrides any device level key chain or password configuration. Both a key chain and password can not coexist on an interface. If a password configuration already exists on the interface, it must be removed before configuring an interface level key chain.

You can specify authentication for an entire instance of IS-IS instead of at the interface level using authentication key-chain.

The “no” form of this command removes the authentication key-chain interface configuration.

Example

This example shows how to configure the VLAN 100 IS-IS authentication key chain to keychainlv1 and restricts the key chain configuration to level 1:

System(rw)->configure
System(rw-config)->interface vlan 100
System(rw-config-intf-vlan.0.100)->isis authentication key-chain keychainlv1 level-1
System(rw-config-intf-vlan.0.100)->