![图片[1]-8.3 ISIS认证-大赛人网](https://www.dsrw.com/wp-content/uploads/2023/03/图片22-12-1024x533.png)
1.接口认证
1)配置R1与R2的level-1接口认证
[R1]interface GigabitEthernet 0/0/1
[R1-GigabitEthernet0/0/1]isis authentication-mode simple dsrw.com level-1
[R2]interface GigabitEthernet 0/0/1
[R2-GigabitEthernet0/0/1]isis authentication-mode simple dsrw.com level-1
2)配置R2与R3的level-2接口认证
[R2]interface GigabitEthernet 0/0/0
[R2-GigabitEthernet0/0/0]isis authentication-mode simple dsrw.com level-2
[R3]interface GigabitEthernet 0/0/0
[R3-GigabitEthernet0/0/0]isis authentication-mode simple dsrw.com level-2
3)配置R2与R3的level-2钥匙链方式的接口认证
[R3]keychain dsrw.com mode absolute
[R3-keychain]key-id 1
[R3-keychain-keyid-1]key-string dsrw.com
//R3使用钥匙链方式
[R3]interface GigabitEthernet 0/0/1
[R3-GigabitEthernet0/0/1]isis authentication-mode keychain dsrw.com level-2
[R4]keychain dsrw.com mode absolute
[R4-keychain]key-id 1
[R4-keychain-keyid-1]key-string dsrw.com
//R4用钥匙链方式
[R4]interface GigabitEthernet 0/0/1
[R4-GigabitEthernet0/0/1]isis authentication-mode keychain dsrw.com level-2
2.区域认证(区域认证只对level-1区域生效,对于同属于一个区域但只有level-2的邻居是不生效的)
1)配置49.0001区域认证
[R1]isis 1
[R1-isis-1]area-authentication-mode md5 dsrw.com
[R2]isis 1
[R2-isis-1]area-authentication-mode md5 dsrw.com
2)配置49.0003区域认证
[R5]keychain dsrw.com mode absolute
[R5-keychain]key-id 1
[R5-keychain-keyid-1]key-string dsrw.com
[R5]isis 1
[R5-isis-1]area-authentication-mode keychain dsrw.com
[R6]keychain dsrw.com mode absolute
[R6-keychain]key-id 1
[R6-keychain-keyid-1]key-string dsrw.com
[R6]isis 1
[R6-isis-1]area-authentication-mode keychain dsrw.com
3.路由域认证(需要在level-2与level-1-2路由做认证),只对level-2区域生效。
[R2]isis 1
[R2-isis-1]domain-authentication-mode md5 dsrw.com
[R3]isis 1
[R3-isis-1]domain-authentication-mode md5 dsrw.com
[R4]isis 1
[R4-isis-1]domain-authentication-mode md5 dsrw.com
[R5]isis 1
[R5-isis-1]domain-authentication-mode md5 dsrw.com
© 版权声明
文章版权归作者所有,未经允许请勿转载。
THE END
请登录后查看评论内容