Thursday, September 24, 2009

ISIS Authentication types

ISIS Authentication

- "key" keyword is mandatory for inserting a MD5 password.

- must use interface level commands to insert password into Hello – either "isis authentication-key" or "isis-password".


Method

Clear Text

MD5

Password inserted into

Password inserted into

Password inserted into

Password inserted into

LSP

CSNP

PSNP

Hello

router isis

(config-router)#area-password [authenticate snp {validate send-only}]

Between same area; only insert a password in level-1 LSPs, CSNPs and PSNPs; Not Hello

authenticate snp
à mandatory to insert password in CSNP and PSNP, else only LSP will have password insterted.

Validate
à mandatory if received packets has to be checked for password. If not used, received packets are not checked,

send-only
à will only be sent

yes

no

yes

yes

yes

no

router isis

(config-router)#domain-password [authenticate snp {validate send-only}]

Between different areas; only insert a password in level-2 LSPs, CSNPs and PSNPs; Not Hello

Same logic for "authenticate snp"

yes

no

yes

yes

yes

no

(config-router)#authentication-key

Inserts password into all LSPs, CSNPs and PSNPs;
Not Hello

yes

yes

yes

yes

yes

no

(config-if)isis authentication-key

only applies a password into hello packets. Can be either clear or MD5

yes

yes

no

no

no

yes

Interface level

(config-if)#isis password

can enable the password for Level 1, Level 2, or both Level 1/Level 2-(default), only for Hello.

yes

no

no

no

no

yes

Authentication mode command overrides area and domain pwds.

Over point-to-point interfaces, only one hello packet is sent for Level 1/Level 2 adjacencies। On those interfaces, the same password must be configured as a Level 1 and Level 2 password।

"area-password" and "domain-password" can be used to control the insertion of passwords into CSNP+PSNP specifically and LSPs। By playing with the "authenticate-snp" keyword.


"authentication-key" will insert password in CSNP, PSNP and LSP at the same time. No specific selection. We can't select the SNP specifically.

1 comment:

  1. *****
    Keeper Of The Sun
    We Remit The Law Of One
    Shanti Thomas
    Daughter Of Ra

    ReplyDelete