Configuring Is-Is Authentication On An Interface - Cisco Nexus 7000 Series Configuration Manual

Configuring IS-IS
S e n d d o c u m e n t c o m m e n t s t o n e x u s 7 k - d o c f e e d b a c k @ c i s c o . c o m .
DETAILED STEPS
Command
Step 1
config t
Example:
switch# config t
switch(config)#
Step 2
router isis instance-tag
Example:
switch(config)# router isis Enterprise
switch(config-router)#
Step 3
authentication-type {cleartext | md5}
{level-1 | level-2}
Example:
switch(config-router)#
authentication-type cleartext level-2
Step 4
authentication key-chain key {level-1 |
level-2}
Example:
switch(config-router)# authentication
key-chain ISISKey level-2
Step 5
authentication-check {level-1 | level-2}
Example:
switch(config-router)#
authentication-check level-2
Step 6
copy running-config startup-config
Example:
switch(config-router)# copy
running-config startup-config
The following example shows how to configure cleartext authentication on an IS-IS instance:
switch# config t
switch(config)# router isis Enterprise
switch(config-router)# authentication-type cleartext level-2
switch(config-router)# authentication key-chain ISISKey level-2
switch(config-router)# copy running-config startup-config

Configuring IS-IS Authentication on an Interface

You can configure IS-IS to authenticate Hello packets on an interface.
BEFORE YOU BEGIN
Ensure that you have enabled the IS-IS feature (see the
page
Ensure that you are in the correct VDC (or use the switchto vdc command).
Cisco Nexus 7000 Series NX-OS Unicast Routing Configuration Guide, Release 4.x
9-14
9-7).
Purpose
Enters configuration mode.
Creates a new IS-IS instance with the configured
instance tag.
Sets the authentication method used for a Level 1 or
Level 2 area as cleartext or as an MD5 authentication
digest.
Configures the authentication key used for an IS-IS
area-level authentication.
(Optional) Enables checking the authentication
parameters in a received packet.
(Optional) Saves this configuration change.
"Enabling the IS-IS Feature" section on
Chapter 9 Configuring IS-IS
OL-20002-02