Excellent info. Thanks.

On Mon, May 11, 2009 at 5:37 PM, Antonio Soares <[email protected]> wrote:

>  Before the "authenticate snp" option was added in 12.0(21)ST, the
> "area-password" and "domain-password" commands were doing authentication of
> the LSPs, CSNPs and PSNPs:
>
> "This password is inserted in Level 1 (station router level) link state
> PDUs (LSPs), complete sequence number PDUs (CSNPs), and partial sequence
> number PDUs (PSNP)."
>
>
> http://www.cisco.com/en/US/docs/ios/12_0/np1/command/reference/1risis.html#wp1017389
>
> "This password is inserted in Level 2 (area router level) link state PDUs
> (LSPs), complete sequence number PDUs (CSNPs), and partial sequence number
> PDUs (PSNPs)."
>
>
> http://www.cisco.com/en/US/docs/ios/12_0/np1/command/reference/1risis.html#wp1017509
>
>
>
> Regards,
>
> Antonio Soares, CCIE #18473 (R&S)
> [email protected]
>
>
>  ------------------------------
> *From:* Bryan Bartik [mailto:[email protected]]
> *Sent:* segunda-feira, 11 de Maio de 2009 16:05
> *To:* Antonio Soares
> *Cc:* [email protected]
> *Subject:* Re: [OSL | CCIE_SP] Vol 1 - Section 6 - Task 6.4
>
> Sounds like you got it Antonio. I just did this lab recently as well. I
> always heard that ISIS has limited authentication capabilities, but there
> are more configuration options than I expected.
>
> Bryan Bartik
> CCIE #23707 (R&S), CCNP
> Sr. Support Engineer - IPexpert, Inc.
> URL: http://www.IPexpert.com
>
> On Mon, May 11, 2009 at 5:07 AM, Antonio Soares <[email protected]>wrote:
>
>> After reviewing this again, i agree with the solution. SNPs are of two
>> types: CSNP and PSNP. To authenticate these SNPs, we need the
>> "authenticate snp" option. I was convinced that with the command
>> "area-password xxx", the LSPs, CSNPs and PSNPs were authenticated
>> which is not true.
>>
>>
>> Comments are welcome.
>>
>> Regards,
>>
>> Antonio Soares, CCIE #18473 (R&S)
>> [email protected]
>>
>>  -----Original Message-----
>> From: [email protected] [mailto:
>> [email protected]] On Behalf Of Antonio Soares
>> Sent: segunda-feira, 11 de Maio de 2009 1:15
>> To: [email protected]
>> Subject: [OSL | CCIE_SP] Vol 1 - Section 6 - Task 6.4
>>
>> We are asked to authenticate LSPs, CSNPs and PSNPs. We are not asked to
>> authenticate SNPs so i don't think we need the "authenticate
>> snp" option.
>>
>>
>> Regards,
>>
>> Antonio Soares, CCIE #18473 (R&S)
>> [email protected]
>>
>>
>
>
> --
>
>


-- 
Bryan Bartik
CCIE #23707 (R&S), CCNP
Sr. Support Engineer - IPexpert, Inc.
URL: http://www.IPexpert.com

Reply via email to