https://community.extremenetworks.com/t5/extremeswitching-vsp-fabric/isis-auth-key-changes/m-p/97078#M2178 <P>Looking at deploying Fabric with ISIS authentication enabled. If we wanted to change the key at a later date, how would we approach that task without breaking all the ISIS adjacencies?</P> Fri, 01 Sep 2023 19:44:55 GMT JamieClarke 2023-09-01T19:44:55Z https://community.extremenetworks.com/t5/extremeswitching-vsp-fabric/isis-auth-key-changes/m-p/97078#M2178 <P>Looking at deploying Fabric with ISIS authentication enabled. If we wanted to change the key at a later date, how would we approach that task without breaking all the ISIS adjacencies?</P> Fri, 01 Sep 2023 19:44:55 GMT https://community.extremenetworks.com/t5/extremeswitching-vsp-fabric/isis-auth-key-changes/m-p/97078#M2178 JamieClarke 2023-09-01T19:44:55Z https://community.extremenetworks.com/t5/extremeswitching-vsp-fabric/isis-auth-key-changes/m-p/97097#M2179 <P>Unfortunately the VOSS Fabric ISIS Hello Auth key implementation allows you to set a key-id, but there is no key rotation capability behind it, nor is there any key chain implementation. So if you change the key, the ISIS adjacency will go down. But, with default timers (Hello sent every 9 secs, and adjacency going down after 3 missed hellos) you have about 27 secs, to change the key at both ends of the same link, without the adjacency going down.</P> Wed, 06 Sep 2023 09:45:09 GMT https://community.extremenetworks.com/t5/extremeswitching-vsp-fabric/isis-auth-key-changes/m-p/97097#M2179 Ludovico_Steven 2023-09-06T09:45:09Z