Description

This article explains different knobs available to suppress the authentication for different PDU types in IS-IS.

Authentication of hello packets, partial sequence number PDU (PSNP), and complete sequence number PDU (CSNP) can be suppressed to enable interoperability with the routing software of different vendors. Different vendors handle authentication in various ways, and suppressing authentication for different PDU types might be the simplest way to allow compatibility within the same network.

Solution

To configure IS-IS to generate authenticated packets, but not to check the authentication on received packets, include the below knob:

no-authentication-check;

To suppress authentication of IS-IS hello packets, include:

no-hello-authentication;

To suppress authentication of PSNPs, include:

no-psnp-authentication;

To suppress authentication of CSNPs, include:

no-csnp-authentication;



Please refer to the below link to know the hierarchy at which the knob can be applied:
no-authentication-check (Protocols IS-IS) - TechLibrary - Juniper Networks

Modification History

2024-07-05: Article validated
2024-07-03: Article created

Related Information

Configuring IS-IS Authentication | Junos OS | Juniper Networks