From: Peter van Oene (pvo@usermail.com)
Date: Tue Feb 04 2003 - 15:22:25 GMT-3
At 02:36 AM 2/4/2003 -0800, Yinka Daramola wrote:
>Only interface authentication considers the is-type / level . Domain and
>Area authentication compares the NETs
>The link below should help you understand IS-IS authentication better.
The below link is a little vague in that it doesn't indicate in the domain
section that it is dealing purely with L2 LSP's which it must be. There is
only one authentication tlv and two mechanisms can't be programmed to
populate it since such a system would preclude the use of both, and
therefore cause interoperability issues.
Please see my other post to Sage on the intended use of domain & area pw's.
>http://www.cisco.com/warp/public/97/isis_authent.html
>
>Yinka Daramola, MCSE,CCNP, RHCE
>Red Hat Inc.
>
>----- Original Message -----
>From: "Sage Vadi" <sagevadi@yahoo.co.uk>
>To: "Peter van Oene" <pvo@usermail.com>; <ccielab@groupstudy.com>
>Sent: Tuesday, February 04, 2003 1:53 AM
>Subject: Re: ISIS: How to enable AREA authentication for L1/L2 router?
>
>
> > Peter,
> >
> > As I have said - this is a L1 AND L2 router.
> >
> > Consequently does that mean that we can't use AREA
> > authentication?
> >
> > PS - Domain Pass goes through all LSPs.
> >
> > Cheers,
> > Sage
> >
> >
> > --- Peter van Oene <pvo@usermail.com> wrote: > At
> > 08:19 AM 2/4/2003 +0000, Sage Vadi wrote:
> > > >All,
> > > >
> > > >router isis
> > > >net 56.7891.1ade.0001.7777.7777.7777.00
> > > >net 56.7891.1ade.0003.7777.7777.7777.00
> > > >redistribute isis ip level-1 into level-2 dist-list
> > > x
> > > >domain-password lol
> > > >metric-style wide
> > >
> > > domain-password should populate L2 LSP's while
> > > area-password populates L1
> > > if I recall correctly. Any reason why the two
> > > nets?
> > >
> > >
> > >
> > >
> > > >Q) How would I enable AREA authentication for a
> > > router
> > > >that is both a Level1 and Level2 router. From
> > > >documentation it seems that a AREA authentication
> > > has
> > > >to be configured for routers in the SAME area. Does
> > > >that mean then - that a Level1/2 router cannot be
> > > >configured with AREA authentication?
> > > >
> > > >Cheers,
> > > >Sage
> > > >
> > > >__________________________________________________
> > > >Do You Yahoo!?
> > > >Everything you'll ever need on one web page
> > > >from News and Sport to Email and Music Charts
> > > >http://uk.my.yahoo.com
> > > >.
> > >
> > >__________________________________________________________________
> > > >To unsubscribe from the CCIELAB list, send a
> > > message to
> > > >majordomo@groupstudy.com with the body containing:
> > > >unsubscribe ccielab
> > >
> > >
> >
> > __________________________________________________
> > Do You Yahoo!?
> > Everything you'll ever need on one web page
> > from News and Sport to Email and Music Charts
> > http://uk.my.yahoo.com
> > .
>.
.
This archive was generated by hypermail 2.1.4 : Sat Mar 01 2003 - 11:06:07 GMT-3