configure isis area domain-password

configure isis area area_name domain-password [none | [encrypted simple encrypted_password | simple {password} ] {authenticate-snp {tx-only}}]

Description

This command sets or clears the password for Level 2 LSPs.

Syntax Description

area_name Specifies the router process for which the password is set or cleared.
none Disables level 2 password authentication.
encrypted Specifies that the supplied password is encrypted and must be decrypted prior to using it in a TLV.
password Specifies a password. Passwords may be up to 254 alphanumeric characters in length.
authenticate-snp tx-only If the optional authenticate-snp keyword is included, level 2 SNPs are also authenticated on receive and the password is included on transmission. If tx-only is specified, the password is included in SNPs on transmission, but received SNPs are not authenticated.

Default

None.

Usage Guidelines

Packets received are authenticated against the configured password and are discarded if the password does not match. Authentication TLVs are included in transmitted level 2 LSPs with the configured password. Only plain text passwords are supported. Although LSPs contain plain text passwords, passwords are displayed and saved in an encrypted form.

Example

The following command sets the domain password to Extreme:

configure isis area areax domain-password simple Extreme

History

This command was first available in ExtremeXOS 12.1.

Platform Availability

This command is available on platforms with a Premier license as described in the Switch Engine 32.3 Feature License Requirements document.