| Parameter |
Description |
Value |
| process-id-value |
Specifies the IS-IS multi-instance process ID when multi-instance is enabled under the relevant process.
|
The value is an integer ranging from 1 to 4294967295.
|
| simple |
Indicates simple authentication.
For security purposes, you are advised to configure a password in ciphertext mode. To further improve device security, periodically change the password.
|
-
|
| cipher |
Indicates the ciphertext mode. The simple text or ciphertext can be entered. The password in the configuration file is displayed as a ciphertext. MD5 authentication uses the ciphertext mode by default.
|
-
|
| cipher |
Specifies a ciphertext password.
A ciphertext password is a character string that is encrypted using a special algorithm. A ciphertext is used for configuration restoration. The parameter value must be the same as the ciphertext in the configuration file.
|
The value is a string of case-sensitive characters that can be letters or digits. When quotation marks are used around the string, spaces are allowed in the string.
- In simple authentication, the value is a string of 1 to 16 characters in a simple text, or a string of 24 to 128 characters in a ciphertext.
- In md5 or hmac-sha256 authentication, the value is a string of 1 to 255 characters in a simple text, or a string of 20 to 432 characters in a ciphertext.
- A 24-character ciphertext password configured in an earlier version is also supported in this version.
- A password cannot contain a question mark (?), but can contain spaces if surrounded by double quotation marks (""). In this case, the double quotation marks are part of the password.
|
| simple-cipher |
Specifies a simple text or ciphertext.
A ciphertext password is a character string that is encrypted using a special algorithm. A ciphertext is used for configuration restoration. The parameter value must be the same as the ciphertext in the configuration file.
|
The value is a string of case-sensitive characters that can be letters or digits.
- In simple authentication, the value is a string of 1 to 16 characters in a simple text, or a string of 24 to 128 characters in a ciphertext.
- In md5 or hmac-sha256 authentication, the value is a string of 1 to 255 characters in a simple text, or a string of 20 to 432 characters in a ciphertext.
- A 24-character ciphertext password configured in an earlier version is also supported in this version.
- A password cannot contain a question mark (?), but can contain spaces if surrounded by double quotation marks (""). In this case, the double quotation marks are part of the password.
|
| plain |
Specifies a cleartext password.
|
The value is a string of case-sensitive characters that can be letters or digits.
In simple authentication, the value is a string of 1 to 16 characters. In MD5 authentication, the value is a string of 1 to 255 characters.
A password cannot contain a question mark (?), but can contain spaces if surrounded by double quotation marks (""). In this case, the double quotation marks are part of the password.
|
| plain |
Indicates the simple text mode. Only the simple text can be entered. The password in the configuration file is displayed as a simple text. Simple authentication uses the simple text mode by default.
When configuring an authentication password, select the ciphertext mode because the password is saved in the configuration file as a simple text if you select the simple text mode, which has a high risk. To ensure device security, change the password periodically.
|
-
|
| simple-plain |
Specifies a simple-text password.
|
The value is a string of case-sensitive characters that can be letters or digits. When quotation marks are used around the string, spaces are allowed in the string.
In simple authentication, the value is a string of 1 to 16 characters. In MD5 authentication, the value is a string of 1 to 255 characters.
A password cannot contain a question mark (?), but can contain spaces if surrounded by double quotation marks (""). In this case, the double quotation marks are part of the password.
|
| md5 |
Indicates that the password is transmitted after being encrypted using HMAC-MD5.
For the sake of security, using the HMAC-SHA256 algorithm rather than the MD5 algorithm is recommended.
|
-
|
| level-1 |
Indicates the Level-1 authentication.
|
-
|
| level-2 |
Indicates the Level-2 authentication.
The level-1 and level-2 parameters are valid only on IS-IS-capable Ethernet interfaces.
|
-
|
| ip |
Indicates the IP authentication password. This parameter cannot be configured when keychain authentication is used.
|
-
|
| osi |
Indicates the OSI authentication password. This parameter cannot be configured when keychain authentication is used.
|
-
|
| send-only |
Encapsulates the Hello packets to be sent with authentication information and ignores checking authentication information carried in received Hello packets.
|
-
|
| keychain keychain-name |
Specifies the keychain that changes with time.
Before configuring this parameter, run the keychain command to create a keychain. Then, run the key-id, key-string, and algorithm commands to configure a key ID, a password, and an authentication algorithm for this keychain. Otherwise, the authentication will fail.
Keychain authentication supports only HMAC-MD5 and HMAC-SHA256 algorithms. Using any other algorithm may lead to an authentication failure.
If the dependent keychain is deleted, the neighbor relationship may be interrupted. Therefore, exercise caution when deleting the keychain.
|
The value is a string of 1 to 47 case-insensitive characters.
A password cannot contain a question mark (?), but can contain spaces if surrounded by double quotation marks (""). In this case, the double quotation marks are part of the password.
|
| hmac-sha256 |
Encapsulates generated packets with the HMAC-SHA256 authentication and a password encrypted using the HMAC-SHA256 algorithm and authenticates received packets.
|
-
|
| key-id key-id |
Specifies a key ID for authentication, which must be the same as the one configured at the other end.
|
The value is an integer ranging from 0 to 65535.
|