[j-nsp] ISIS authentication issue

[Bikram Singh]

have you configured authentication on interface(in ISIS) as well on mx960?

- B

> From: jneiberger at gmail.com
> Date: Wed, 12 Jun 2013 09:08:54 -0600
> To: juniper-nsp at puck.nether.net
> Subject: [j-nsp] ISIS authentication issue
> 
> We've got an MX960 connected to a Cisco CRS, both of which are configured
> for ISIS authentication. However, the CRS is currently configured for only
> hello authentication. It appears that Junos enables both hello
> authentication and CSNP/PSNP authentication by default. This is allowing
> the adjacency to come up but the MX960 drops subsequent CSNP/PSNP packets
> because they are not authenticated. I wanted to disable this, so at the
> same level we configured ISIS authentication I added the following:
> 
> no-psnp-authentication
> no-csnp-authentication
> 
> However, that didn't work and I can't figure out why. The MX960 continued
> to drop CSNP and PSNP packets because of authentication. I suspect that I
> might have needed to clear the adjacency with that neighbor but I really
> don't know. I expected it to start working immediately.
> 
> Any ideas?
> 
> Thanks,
> John
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp