[BSCI]配置ISIS Domain域间认证

 

R1 R2 R3配置底层
r1(config)#int s2/1
r1(config-if)#ip ad 192.168.1.1 255.255.255.0
r1(config-if)#no sh

r2(config)#int s2/1
r2(config-if)#ip ad 192.168.1.2 255.255.255.0
r2(config-if)#no sh
r2(config-if)#int s2/2
r2(config-if)#ip ad 10.0.0.2 255.255.255.0
r2(config-if)#no sh

r3(config)#int s2/1
r3(config-if)#ip ad 10.0.0.3 255.255.255.0
r3(config-if)#no sh

R1 R2 R3开启isis路由
r1(config)#int s2/1
r1(config-if)#ip router isis
r1(config-if)#exi
r1(config)#router isis
r1(config-router)#net 49.1234.1111.1111.1111.00
r1(config-router)#end

r2(config-if)#int s2/1
r2(config-if)#ip router isis
r2(config-if)#int s2/2
r2(config-if)#ip router isis
r2(config-if)#exi
r2(config)#router isis
r2(config-router)#net 49.1234.2222.2222.2222.00

r3(config)#int s2/1
r3(config-if)#ip router isis
r3(config-if)#exi
r3(config)#router isis
r3(config-router)#net 49.1234.3333.3333.3333.00
r3(config-router)#exi

在R1上开启demain认证 并查看更新包信息
r3(config)#router isis
r3(config-router)#domain-password 123
r1(config-router)#end
r1#deb isis update-packets

提示消息
*Sep 14 13:35:00.423: ISIS-Upd: Purging LSP 1111.1111.1111.00-00, seq 3
*Sep 14 13:35:00.423: ISIS-Upd: Purging LSP 2222.2222.2222.00-00, seq 3
*Sep 14 13:35:00.427: ISIS-Upd: Purging LSP 3333.3333.3333.00-00, seq 3
*Sep 14 13:35:00.479: ISIS-Upd: Building L2 LSP
*Sep 14 13:35:00.487: ISIS-Upd: TLV contents different, code 10
*Sep 14 13:35:00.487: ISIS-Upd:  full SPF required
*Sep 14 13:35:00.495: ISIS-Upd: Sending L2 LSP 1111.1111.1111.00-00, seq 4, ht 1199 on Serial2/1
*Sep 14 13:35:00.531: ISIS-Upd: Sending L2 LSP 2222.2222.2222.00-00, seq 3, ht 0 on Serial2/1
*Sep 14 13:35:00.567: ISIS-Upd: Sending L2 LSP 3333.3333.3333.00-00, seq 3, ht 0 on Serial2/1
*Sep 14 13:35:00.591: ISIS-Upd: Rec L2 LSP 2222.2222.2222.00-00, seq 4, ht 1199,
*Sep 14 13:35:00.591: ISIS-Upd: from SNPA *HDLC* (Serial2/1)
*Sep 14 13:35:00.591: %CLNS-4-AUTH_FAIL: ISIS: LSP authentication failed       认证失败   因为r2 r3并没有开启认证

R2和R3上也开启认证 并且使用相同的密码
r2(config)#router isis
r2(config-router)#net 49.1234.2222.2222.2222.00
r2(config-router)#domain-password 123

r3(config)#router isis
r3(config-router)#domain-password 123

此时切换到R1上看现象

*Sep 14 13:35:54.483: ISIS-Upd: Rec L2 LSP 3333.3333.3333.00-00, seq 6, ht 1197,
*Sep 14 13:35:54.483: ISIS-Upd: from SNPA *HDLC* (Serial2/1)
*Sep 14 13:35:54.483: ISIS-Upd: LSP newer than database copy
*Sep 14 13:35:54.483: ISIS-Upd: TLV contents different, code 10
*Sep 14 13:35:54.487: ISIS-Upd:  full SPF required               成功