888 BigIron RX Series Configuration Guide53-1001810-01Globally configuring IS-IS on a device29Configuring authenticationBy default, the device does not authenticate packets sent to or received from ESs or other ISs. Youcan configure the following types of passwords for IS-IS globally.If you configure a password, the device checks for the password in IS-IS packets received by thedevice and includes the password in packets sent by the device. For example, the device checks allLevel-2 LSPDUs received by the device for the domain password you configure, and includes thepassword in all Level-2 PDUs sent by the device.Configuring a domain passwordTo configure an IS-IS domain password, enter a command such as the following.BigIron RX(config-isis-router)# domain-password domain-1This command configures the device to use the password “domain-1” to authenticate Level-2LSPDUs.Syntax: [no] domain-password The parameter specifies the password. You can enter an alphanumeric string up to 80characters long. The password can contain blank spaces. If you use a blank space in the password,you must use quotation marks (“ “) around the entire password; for example, domain-password“domain 1”.Configuring an area passwordTo configure an IS-IS area password, enter a command such as the following.BigIron RX(config-isis-router)# area-password area-51This command configures the device to use the password “area-51” to authenticate Level-1LSPDUs.Syntax: [no] area-password The parameter specifies the password. You can enter an alphanumeric string up to 80characters long. The password can contain blank spaces. If you use a blank space in the password,you must use quotation marks (“ “) around the entire password; for example, area-password “area51”.Changing the IS-IS Level globallyBy default, a BigIron RX can operate as both a Level-1 and IS-IS Level-2 router. To globally changethe level supported from Level-1 and Level-2 to Level-1 only, enter the following command.BigIron RX(config-isis-router)# is-type level-1TABLE 130 IS-IS passwordsPassword type Scope Where used DefaultDomain Level-2 Level-2 LSPDU None configuredArea Level-1 Level-1 LSPDU None configuredInterface Level-1 and Level-2 Hello PDU None configured
