area-authentication-mode
Use area-authentication-mode to configure area authentication.
Use undo area-authentication-mode to restore the default.
Syntax
area-authentication-mode { md5 | simple } { cipher cipher-string | plain plain-string }
undo area-authentication-mode
Default
Area authentication is disabled. No area authentication method or password is configured.
Views
SPBM view
Predefined user roles
network-admin
Parameters
md5: Specifies MD5 authentication.
simple: Specifies simple authentication.
cipher: Sets a password in ciphertext.
cipher-string: Specifies the ciphertext form of the password, a case-sensitive string of 33 to 53 characters.
plain: Sets a password in plain text.
plain-string: Specifies the plaintext form of the password, a case-sensitive string of 1 to 16 characters. For security purposes, all passwords, including passwords configured in plain text, are saved in ciphertext.
Usage guidelines
ISIS-SPB area authentication guarantees that SPBM nodes learn topology data only from trustworthy neighbors.
For correct authentication, make sure the authentication method and password are the same across the SPBM network. ISIS-SPB sends these authentication settings in topology advertisement packets, including LSPs, CSNPs, and PSNPs. The recipients accept a topology advertisement packet only if the authentication settings in the packet match their local authentication settings.
To disable area authentication for incoming topology advertisement packets, use the area-authentication send-only command.
Example
# Set the area authentication method to simple and the password to 123456 in plain text.
<Sysname> system-view [Sysname] spbm [Sysname-spbm] area-authentication-mode simple plain 123456
Related commands
area-authentication send-only