This chapter describes the Cisco NX-OS FabricPath commands that begin with A.
To enable an authentication check on received protocol data units (PDUs), use the authentication-check command. To return to the default setting, use the no form of this command.
authentication-check
no authentication-check
This command has no arguments or keywords.
Enabled
FabricPath IS-IS configuration mode
|
|
---|---|
5.1(3)N1(1) |
This command was introduced. |
This command requires an Enhanced Layer 2 license.
This example shows how to enable an authentication check on received PDUs:
switch# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
switch(config)# fabricpath domain default
switch(config-fabricpath-isis)# authentication-check
switch(config-fabricpath-isis)#
|
|
---|---|
show fabricpath isis |
Displays FabricPath IS-IS information. |
To configure an authentication keychain between FabricPath devices, use the authentication key-chain command. To return to the default setting, use the no form of this command.
authentication key-chain auth-key-chain-name
no authentication key-chain auth-key-chain-name
keychain-name |
Authentication keychain. The maximum size is 63 alphanumeric characters. |
None
FabricPath IS-IS configuration mode
|
|
---|---|
5.1(3)N1(1) |
This command was introduced. |
Use the authentication key-chain command to assign a password in the authentication of a hello protocol data unit. Only one authentication key-chain is applied to an IS-IS interface at one time. If you configure a second authentication command, the first is overridden. You can specify authentication for an entire instance of IS-IS instead of at the interface level by using the authentication command.
See the Cisco Nexus 5000 Series NX-OS Security Configuration Guide for information about keychains.
This command requires an Enhanced Layer 2 license.
This example shows how to configure an authentication keychain string for edge device authentication:
switch# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
switch(config)# fabricpath domain default
switch(config-fabricpath-isis)# authentication key-chain fabrickeys
switch(config-fabricpath-isis)#
|
|
---|---|
show fabricpath isis |
Displays FabricPath IS-IS information. |
To configure an authentication type, use the authentication-type command. To return to the default setting, use the no form of this command.
authentication-type {cleartext | md5}
no authentication-type {cleartext | md5}
cleartext |
Specifies the cleartext authentication method. |
md5 |
Specifies the Message Digest (MD5) authentication. |
Enabled
FabricPath IS-IS configuration mode
|
|
---|---|
5.1(3)N1(1) |
This command was introduced. |
Use the authentication-type command to configure the authentication type for hello protocol data units (PDUs) on an interface.
This command requires an Enhanced Layer 2 license.
This example shows how to specify cleartext authentication:
switch# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
switch(config)# fabricpath domain default
switch(config-fabricpath-isis)# authentication-type cleartext
switch(config-fabricpath-isis)#
This example shows how to specify Message Digest (MD5) authentication:
switch# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
switch(config)# fabricpath domain default
switch(config-fabricpath-isis)# authentication-type md5
switch(config-fabricpath-isis)#
|
|
---|---|
show fabricpath isis |
Displays FabricPath IS-IS information. |