Re: ISIS authentication

From: srinivas pv <vsrinivas.paturi_at_gmail.com>
Date: Mon, 13 Sep 2010 19:42:56 +0530

Hi,

I think there is a difference.

When you configure authentication at link level (level 1 or 2), if
authentication fails, adjacency will not be established.

When you configure at area level, even if authentication fails adjacency
will be established. But routes will not be accepted.

So you may need to choose based on requirements.

Thanks,
Srinivas

On Sun, Sep 12, 2010 at 9:31 PM, ccie aspirant <ccienccie_at_gmail.com> wrote:

> Hi All,
>
> I am a bit confused about ISIS authentication. My understanding is that
> when
> we configure "authentication mode" under ISIS routing process for level-1
> and configuring "area <>" under ISIS routing process will have the same
> functionality. In both cases, only LSPs will be authenticated and not the
> hellos.
>
> So ideally when the question is to configure authentication with minimal
> config for level-1, I assume the answer as "area <>" while I dont see that
> in any work book so far. In almost all scenarios, I can see only
> authentication mode under routing process.
>
> Can someone please comment on if this is recommended to configure area
> password or is there any hidden point that I am missing?.
>
> Regards,
> Nagendra
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Mon Sep 13 2010 - 19:42:56 ART

This archive was generated by hypermail 2.2.0 : Fri Oct 01 2010 - 05:58:05 ART