User guide

Configuring IS-IS Configuring IS-IS
OmniSwitch AOS Release 7 Advanced Routing Configuration Guide March 2015 page 3-19
Note. IS-IS routes are not summarized by default. If you do not specify the level while configuring the
summarization, level-1/2 routes are summarized by default.
IS-IS IPv6 route summarization allows users to create aggregate IPv6 addresses that include multiple
groups of IPv6 addresses for a given IS-IS level. IPv6 Routes redistributed from other routing protocols
also can be summarized. It is similar to the OSPF area-range command. IS-IS route summarization helps
to reduce the size of the LSDB and the routing table, and it also helps to reduce the chance of route
flapping. IPv6 route summarization supports:
• Level 1, Level 1-2, and Level 2
• Route summarization for the IPv6 routes redistributed from other protocols
• Metric used to advertise the summary address would be the smallest metric of all the more specific
IPv6 routes.
For example, to summarize the routes between 4001:1::/64 to 4001:10::/64 into one, enter the following
command:
-> ip isis summary-address6 4001::/16 level-1
To remove the summary address, enter the following:
-> no ip isis summary-address6 4001::/16
Displaying Summary Address
You can view the details of the IS-IS summary address using the show ip isis summary-address and
show ip isis summary-address6 commands:
-> show ip isis summary-address
-> show ip isis summary-address6
Enabling IS-IS Authentication
IS-IS allows for the use of authentication on a device. When authentication is enabled, only neighbors
using the same type of authentication and the matching keys can communicate.
There are two types of authentication: simple and MD5. Simple authentication requires only a text string
as a password, while MD5 is a form of encrypted authentication that requires a key and a password.
You can use the key parameter to configure the password for Simple or MD5 authentication.
Alternatively, you can use the encrypt-key parameter to configure the password by supplying the
encrypted form of the password as the encrypt-key. Configuration snapshot always displays the password
in an encrypted form. You should use only the key parameter during the CLI configuration.
If the encrypt-key parameter is used to configure the password through the CLI, then its value should be
the same as the one that appears in the configuration snapshot.
Note.
• By default, the authentication is disabled and no authentication type is configured.
• To enable IS-IS authentication, routers participating in ISIS must be configured with either global level
authentication or interface level authentication at both ends of the link.