160To do… Use the command… RemarksEnter system view system-view —Enter interface view interface interface-type interface-number —Specify the authentication modeand passwordisis authentication-mode { md5 | simple }password [ level-1 | level-2 ] [ ip | osi ]RequiredNot authentication isconfigured by default.NOTE:• The level-1 and level-2 keywords are configurable on an interface that has IS-IS enabled.• If you configure an authentication mode and a password without specifying a level, the authenticationmode and password apply to both Level-1 and Level-2.• If neither ip nor osi is specified, the OSI related fields in LSPs are checked.Configuring area authenticationArea authentication enables a router not to install routing information from untrusted routers into theLevel-1 LSDB. The router encapsulates the authentication password in the specified mode into Level-1packets (LSP, CSNP, and PSNP) and checks the password in received Level-1 packets.Routers in a common area must have the same authentication mode and password.Follow these steps to configure area authentication:To do… Use the command… RemarksEnter system view system-view —Enter IS-IS view isis [ process-id ] [ vpn-instancevpn-instance-name ] —Specify the area authenticationmode and passwordarea-authentication-mode { md5 |simple } password [ ip | osi ]RequiredNo area authentication isconfigured by default.Configuring routing domain authenticationRouting domain authentication prevents untrusted routing information from entering into a routingdomain. A router with the authentication configured encapsulates the password in the specified modeinto Level-2 packets (LSP, CSNP, PSNP) and check the password in received Level-2 packets.All the routers in the backbone must have the same authentication mode and password.Follow these steps to configure routing domain authentication:To do… Use the command… RemarksEnter system view system-view —Enter IS-IS view isis [ process-id ] [ vpn-instancevpn-instance-name ] —Specify the routing domainauthentication mode andpassworddomain-authentication-mode{ md5 | simple } password [ ip |osi ]RequiredNo routing domain authenticationis configured by default.
