The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
This chapter describes the Cisco NX-OS FabricPath commands that begin with A.
To enable an authentication check on received protocol data units (PDUs), use the authentication-check command. To return to the default setting, use the no form of this command.
authentication-check
no authentication-check
This command has no arguments or keywords.
Enabled
FabricPath IS-IS configuration mode
|
|
---|---|
5.2(1)N1(1) |
This command was introduced. |
This command requires an Enhanced Layer 2 license.
This example shows how to enable an authentication check on received PDUs:
switch# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
switch(config)# fabricpath domain default
switch(config-fabricpath-isis)# authentication-check
switch(config-fabricpath-isis)#
|
|
---|---|
show fabricpath isis |
Displays FabricPath IS-IS information. |
To configure an authentication keychain between FabricPath devices, use the authentication key-chain command. To return to the default setting, use the no form of this command.
authentication key-chain auth-key-chain-name
no authentication key-chain auth-key-chain-name
keychain-name |
Authentication keychain. The maximum size is 63 alphanumeric characters. |
None
FabricPath IS-IS configuration mode
|
|
---|---|
5.2(1)N1(1) |
This command was introduced. |
Use the authentication key-chain command to assign a password in the authentication of a hello protocol data unit. Only one authentication key-chain is applied to an IS-IS interface at one time. If you configure a second authentication command, the first is overridden. You can specify authentication for an entire instance of IS-IS instead of at the interface level by using the authentication command.
See the Cisco Nexus NX-OS Security Configuration Guide for your platform for information about keychains.
This command requires an Enhanced Layer 2 license.
This example shows how to configure an authentication keychain string for edge device authentication:
switch# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
switch(config)# fabricpath domain default
switch(config-fabricpath-isis)# authentication key-chain fabrickeys
switch(config-fabricpath-isis)#
|
|
---|---|
show fabricpath isis |
Displays FabricPath IS-IS information. |
To configure an authentication type, use the authentication-type command. To return to the default setting, use the no form of this command.
authentication-type {cleartext | md5}
no authentication-type {cleartext | md5}
cleartext |
Specifies the cleartext authentication method. |
md5 |
Specifies the Message Digest (MD5) authentication. |
Enabled
FabricPath IS-IS configuration mode
|
|
---|---|
5.2(1)N1(1) |
This command was introduced. |
Use the authentication-type command to configure the authentication type for hello protocol data units (PDUs) on an interface.
This command requires an Enhanced Layer 2 license.
This example shows how to specify cleartext authentication:
switch# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
switch(config)# fabricpath domain default
switch(config-fabricpath-isis)# authentication-type cleartext
switch(config-fabricpath-isis)#
This example shows how to specify Message Digest (MD5) authentication:
switch# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
switch(config)# fabricpath domain default
switch(config-fabricpath-isis)# authentication-type md5
switch(config-fabricpath-isis)#
|
|
---|---|
show fabricpath isis |
Displays FabricPath IS-IS information. |