spbm authentication-mode

Use spbm authentication-mode to configure adjacency authentication on an interface.

Use undo spbm authentication-mode to restore the default.

Syntax

spbm authentication-mode { md5 | simple } { cipher cipher-string | plain plain-string }

undo spbm authentication-mode

Default

Adjacency authentication is disabled on an interface. No adjacency authentication method or password is configured.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

Parameters

md5: Specifies MD5 authentication.

simple: Specifies simple authentication.

cipher: Sets a password in cipher text.

cipher-string: Specifies the ciphertext form of the password, a case-sensitive string of 33 to 53 characters.

plain: Sets a password in plain text

plain-string: Specifies the plaintext form of the password, a case-sensitive string of 1 to 16 characters. For security purposes, all passwords, including passwords configured in plain text, are saved in cipher text.

Usage guidelines

ISIS-SPB adjacency authentication guarantees that SPBM nodes establish adjacencies only with trustworthy neighbors.

For correct authentication, make sure the authentication method and password are the same between SPBM neighbors. ISIS-SPB sends these authentication settings in hello packets. The recipients accept a hello packet only if the authentication settings in the packet match their local authentication settings.

To disable adjacency authentication for incoming ISIS-SPB hello packets, use the spbm authentication send-only command.

Examples

# Set the adjacency authentication method to simple and the password to 123456 in plain text on interface FortyGigE 1/0/1.

<Sysname> system-view
[Sysname] interface fortygige1/0/1
[Sysname-FortyGigE1/0/1] spbm authentication-mode simple plain 123456

Related commands

spbm authentication send-only