area-authentication-mode

Use area-authentication-mode to configure area authentication.

Use undo area-authentication-mode to restore the default.

Syntax

area-authentication-mode { md5 | simple } { cipher cipher-string | plain plain-string }

undo area-authentication-mode

Default

Area authentication is disabled. No area authentication method or password is configured.

Views

SPBM view

Predefined user roles

network-admin

Parameters

md5: Specifies MD5 authentication.

simple: Specifies simple authentication.

cipher: Sets a password in ciphertext.

cipher-string: Specifies the ciphertext form of the password, a case-sensitive string of 33 to 53 characters.

plain: Sets a password in plain text.

plain-string: Specifies the plaintext form of the password, a case-sensitive string of 1 to 16 characters. For security purposes, all passwords, including passwords configured in plain text, are saved in ciphertext.

Usage guidelines

ISIS-SPB area authentication guarantees that SPBM nodes learn topology data only from trustworthy neighbors.

For correct authentication, make sure the authentication method and password are the same across the SPBM network. ISIS-SPB sends these authentication settings in topology advertisement packets, including LSPs, CSNPs, and PSNPs. The recipients accept a topology advertisement packet only if the authentication settings in the packet match their local authentication settings.

To disable area authentication for incoming topology advertisement packets, use the area-authentication send-only command.

Example

# Set the area authentication method to simple and the password to 123456 in plain text.

<Sysname> system-view
[Sysname] spbm
[Sysname-spbm] area-authentication-mode simple plain 123456

Related commands

area-authentication send-only