User guide

Configuring IS-IS Configuring IS-IS
page 3-22 OmniSwitch AOS Release 7 Advanced Routing Configuration Guide March 2015
IS-IS Circuit Level Authentication
IS-IS authentication can be enabled for Hello packets at a circuit level using ip isis vlan hello-auth-type
command.
For example, to enable MD5 authentication of Hello PDUs on the IS-IS circuit, enter the following:
-> ip isis vlan 10 hello-auth-type md5 key 12345
IS-IS authentication can also be enabled for Hello packets at different levels of an IS-IS circuit using ip
isis vlan level hello-auth-type.
For example, to enable simple authentication of Hello PDUs at Level-2 of an IS-IS circuit, enter the
following:
-> ip isis vlan 100 level 2 hello-auth-type simple encrypt-key 7a1e441a014b4030
Modifying IS-IS Circuit Parameters
To configure the interval between the successive Hello PDUs at the given IS-IS level on a circuit, enter the
ip isis vlan level hello-interval command, as shown:
-> ip isis vlan 10 level 1 hello-interval 50
To configure the number of Hello PDUs before the router declares the adjacency as down, use the ip isis
vlan level hello-multiplier command, as shown:
-> ip isis vlan 10 level 1 hello-multiplier 10
To configure the metric value of the IS-IS level of the circuit, enter the ip isis vlan level metric command,
as shown:
-> ip isis vlan 10 level 1 metric 25
Configuring IS-IS circuit as passive at the specified IS-IS level suppresses IS-IS packets from being sent
or received on the interface. For example, to configure the interface from receiving Level-1 IS-IS packets,
enter the ip isis vlan passive command, as shown:
-> ip isis vlan 10 level 1 passive
Configuring the priority value helps to determine a DIS in a multi-access network. To configure the
priority of the IS-IS circuit for the election of a DIS in a multi-access network, enter the ip isis vlan level
priority command, as shown:
-> ip isis vlan 10 level 1 priority 4
There are several other parameters that can be modified on the IS-IS circuit. Most of these deal with timer
settings.
Note. Both the ip isis vlan hello-auth-type and ip isis vlan level hello-auth-type can be configured for the
authentication of either simple or MD5 type with the password specified either in plain text or in encrypted
form. For the explanations about the authentication types and the key types refer Simple authentication
and MD5 authentication.