Before the "authenticate snp" option was added in 12.0(21)ST, the 
"area-password" and "domain-password" commands were doing
authentication of the LSPs, CSNPs and PSNPs:
 
"This password is inserted in Level 1 (station router level) link state PDUs 
(LSPs), complete sequence number PDUs (CSNPs), and
partial sequence number PDUs (PSNP)."
 
http://www.cisco.com/en/US/docs/ios/12_0/np1/command/reference/1risis.html#wp1017389
 
"This password is inserted in Level 2 (area router level) link state PDUs 
(LSPs), complete sequence number PDUs (CSNPs), and partial
sequence number PDUs (PSNPs)."
 
http://www.cisco.com/en/US/docs/ios/12_0/np1/command/reference/1risis.html#wp1017509
 
 

Regards,

Antonio Soares, CCIE #18473 (R&S)
[email protected]


 

  _____  

From: Bryan Bartik [mailto:[email protected]] 
Sent: segunda-feira, 11 de Maio de 2009 16:05
To: Antonio Soares
Cc: [email protected]
Subject: Re: [OSL | CCIE_SP] Vol 1 - Section 6 - Task 6.4


Sounds like you got it Antonio. I just did this lab recently as well. I always 
heard that ISIS has limited authentication
capabilities, but there are more configuration options than I expected.

Bryan Bartik
CCIE #23707 (R&S), CCNP
Sr. Support Engineer - IPexpert, Inc.
URL: http://www.IPexpert.com


On Mon, May 11, 2009 at 5:07 AM, Antonio Soares <[email protected]> wrote:


After reviewing this again, i agree with the solution. SNPs are of two types: 
CSNP and PSNP. To authenticate these SNPs, we need the
"authenticate snp" option. I was convinced that with the command "area-password 
xxx", the LSPs, CSNPs and PSNPs were authenticated
which is not true.


Comments are welcome.


Regards,

Antonio Soares, CCIE #18473 (R&S)
[email protected]


-----Original Message-----
From: [email protected] 
[mailto:[email protected]] On Behalf Of Antonio Soares
Sent: segunda-feira, 11 de Maio de 2009 1:15
To: [email protected]
Subject: [OSL | CCIE_SP] Vol 1 - Section 6 - Task 6.4

We are asked to authenticate LSPs, CSNPs and PSNPs. We are not asked to 
authenticate SNPs so i don't think we need the "authenticate
snp" option.


Regards,

Antonio Soares, CCIE #18473 (R&S)
[email protected]






-- 


Reply via email to