Network+CCNAAdvanced13 min read

What Does IS-IS Mean?

Also known as: IS-IS, Intermediate System-to-Intermediate System, ISO 10589

Reviewed byJohnson Ajibi· Senior Network & Security Engineer · MSc IT Security

This page mentions older exam versions. See the Current Exam Context and Legacy Exam Context sections below for the updated mapping.

On This Page

Quick Definition

IS-IS (Intermediate System to Intermediate System) is a link-state interior gateway protocol (IGP) originally developed by the International Organization for Standardization (ISO) for routing in OSI networks. It has been adapted to route IP traffic and is widely used in large service provider and enterprise networks due to its scalability, fast convergence, and support for hierarchical routing. IS-IS operates by having each router (called an Intermediate System) flood link-state information to all other routers in the same area, building a complete topology database. This allows each router to independently calculate the shortest path to every destination using the Dijkstra algorithm. IS-IS is similar to OSPF but uses a different packet structure and is often preferred in environments requiring high stability and multi-protocol support. It is defined in ISO 10589 and RFC 1142.

Must Know for Exams

On the CompTIA Network+ exam (N10-008), IS-IS appears in Domain 2.0 (Networking Fundamentals) and Domain 3.0 (Network Operations). Key exam focus areas include: (1) Comparing IS-IS to OSPF—candidates must know that both are link-state protocols but IS-IS uses CLNS addressing and operates at Layer 2.

(2) Understanding the two-level hierarchy—Level 1 (intra-area) and Level 2 (inter-area) routers, and how they interact. (3) Recognizing IS-IS as an IGP (Interior Gateway Protocol) used within an autonomous system, not for inter-domain routing (which uses BGP). (4) Identifying the correct packet types: Hello, LSP, and SNP.

(5) Knowing that IS-IS supports both IPv4 and IPv6 (via extensions). (6) Understanding that IS-IS uses a metric (default 10) and the SPF algorithm. (7) Differentiating IS-IS from distance-vector protocols like RIP and EIGRP.

The exam may present scenarios where you must choose the best routing protocol for a large, hierarchical network—IS-IS is often the correct answer when stability and scalability are priorities. Also, be aware that IS-IS is sometimes called 'Integrated IS-IS' when routing both CLNS and IP.

Simple Meaning

Think of IS-IS as a postal system for a huge city. Each post office (router) knows the layout of its own neighborhood (area) and shares a map of that neighborhood with every other post office in the city. When a letter (data packet) needs to be delivered, the post office uses its complete map to find the shortest route.

If a road is closed (link failure), the post office updates its map and recalculates the best path. Unlike a simpler system where each post office only knows its neighbors, IS-IS gives every post office a full picture of the entire city, making deliveries faster and more reliable. This is why IS-IS is used by large internet service providers—they need a routing protocol that can handle massive, complex networks without getting lost.

Full Technical Definition

IS-IS is a link-state routing protocol that operates at Layer 2 (Data Link Layer) of the OSI model, unlike most IP routing protocols that run at Layer 3. It was originally defined in ISO 10589 and later extended for IP routing in RFC 1195 (Integrated IS-IS). IS-IS uses a two-level hierarchical structure: Level 1 (intra-area) and Level 2 (inter-area).

Level 1 routers know the topology of their own area and use a default route to reach Level 2 routers for destinations outside the area. Level 2 routers form the backbone and know the topology of all areas. IS-IS routers exchange three main packet types: Hello PDUs (to discover neighbors), Link State PDUs (LSPs, to advertise topology information), and Sequence Number PDUs (SNPs, to ensure reliable flooding).

Each router builds a Link State Database (LSDB) and runs the Dijkstra SPF algorithm to compute the shortest path tree. IS-IS supports variable-length subnet masking (VLSM) and classless inter-domain routing (CIDR). It uses a metric called 'metric' (default 10) on each interface, and the path cost is the sum of all outgoing interface metrics.

IS-IS is often compared to OSPF; key differences include IS-IS's use of CLNS addressing (NET addresses) instead of IP-based router IDs, its simpler area design (routers belong to areas, not interfaces), and its native support for multiple network layer protocols. IS-IS is widely deployed in large ISP backbones due to its stability, fast convergence, and ability to handle hundreds of routers in a single area.

Real-Life Example

A large ISP, GlobalNet, operates a backbone spanning three cities: New York, Chicago, and Los Angeles. Each city is an IS-IS area (Level 1), and the routers connecting the cities form the Level 2 backbone. When a customer in New York sends traffic to a server in Los Angeles, the New York Level 1 router forwards the packet to the nearest Level 2 router (in New York).

The Level 2 routers exchange LSPs to learn the topology of all areas. The New York Level 2 router calculates the shortest path to Los Angeles—say, via Chicago—and forwards the packet. When a fiber cut occurs between Chicago and Los Angeles, the Chicago router detects the failure, updates its LSP, and floods it to all Level 2 routers.

GlobalNet's routers quickly recalculate paths, and traffic is rerouted through a backup link via Dallas. This convergence happens in milliseconds, ensuring minimal disruption. IS-IS's hierarchical design keeps the New York area's topology changes isolated from other areas, reducing CPU load and improving stability.

Why This Term Matters

IS-IS is a critical protocol for IT professionals working in service provider or large enterprise networks. Understanding IS-IS is essential for designing scalable, resilient networks that can handle thousands of routers. Its fast convergence and hierarchical structure make it ideal for mission-critical environments where downtime is unacceptable.

Troubleshooting IS-IS requires knowledge of its packet types, neighbor relationships, and LSDB synchronization—skills that differentiate senior network engineers. For career growth, IS-IS expertise is highly valued in telecom, cloud, and data center roles. On exams like Network+ and CCNA, IS-IS questions test your ability to compare routing protocols, understand link-state operation, and recognize its unique OSI heritage.

Mastering IS-IS demonstrates a deep understanding of routing fundamentals that applies to all link-state protocols.

How It Appears in Exam Questions

IS-IS questions on Network+ and CCNA exams typically follow these patterns: (1) 'Which routing protocol uses CLNS addressing and operates at Layer 2?'—wrong answers include OSPF (uses IP), EIGRP (uses IP), and RIP (uses IP). The correct answer is IS-IS.

(2) 'A network engineer needs a link-state protocol that supports a two-level hierarchy. Which protocol should they choose?'—wrong answers: RIP (distance-vector, no hierarchy), EIGRP (hybrid, no strict hierarchy), BGP (path-vector, EGP).

Correct: IS-IS or OSPF, but if the question mentions 'CLNS' or 'ISO', IS-IS is the answer. (3) 'Which IS-IS packet type is used to discover neighbors?'—wrong answers: LSP (used for topology), SNP (used for sequence numbers), DBD (OSPF term).

Correct: Hello PDU. (4) Scenario: 'A company with multiple sites wants a routing protocol that converges quickly and isolates topology changes within each site.'—wrong answers: RIP (slow convergence, no hierarchy), static routing (no dynamic convergence).

Correct: IS-IS (with Level 1/Level 2 hierarchy). The key is to associate IS-IS with OSI, Layer 2 operation, and hierarchical design.

Practise IS-IS Questions

Test your understanding with exam-style practice questions.

Practise

Example Scenario

Step 1: Router R1 in Area 1 boots up and sends a Hello PDU out its interfaces to discover neighbors. Step 2: Router R2 in the same area receives the Hello and replies with its own Hello, establishing a Level 1 adjacency. Step 3: R1 and R2 exchange Link State PDUs (LSPs) containing their directly connected links and metrics.

Step 4: Each router builds a Link State Database (LSDB) from received LSPs and runs the Dijkstra SPF algorithm to compute the shortest path to every destination in the area. Step 5: When R1 needs to send a packet to a host in Area 2, it forwards the packet to the nearest Level 2 router (R3), which has a full topology of all areas. R3 then forwards the packet to the destination area's Level 2 router, which delivers it to the target host.

This hierarchical design reduces LSDB size and CPU load within each area.

Common Mistakes

IS-IS is a distance-vector protocol like RIP.

IS-IS is a link-state protocol. It floods complete topology information (LSPs) and uses the SPF algorithm, unlike distance-vector protocols that only share routing tables with neighbors.

If it uses SPF and LSPs, it's link-state. IS-IS is link-state, not distance-vector.

IS-IS operates at Layer 3 (Network Layer) like OSPF.

IS-IS was designed for OSI and operates at Layer 2 (Data Link Layer). It encapsulates its PDUs directly into Layer 2 frames, not IP packets.

IS-IS = Layer 2. OSPF = Layer 3. If it uses IP to communicate, it's not IS-IS.

IS-IS uses IP addresses for router IDs.

IS-IS uses CLNS addresses called NETs (Network Entity Titles), not IP addresses. Even when routing IP, the router ID is derived from the NET.

IS-IS router IDs are NETs (e.g., 49.0001.0000.0000.0001.00), not IP addresses.

Exam Trap — Don't Get Fooled

{"trap":"Candidates often choose OSPF over IS-IS when a question asks for a link-state protocol that supports a two-level hierarchy and uses CLNS addressing. They forget that IS-IS is the only IGP that uses CLNS and operates at Layer 2.","why_learners_choose_it":"OSPF is more commonly taught and used in enterprise networks.

Students associate 'link-state' and 'hierarchy' with OSPF, and they overlook the specific mention of 'CLNS' or 'Layer 2' in the question stem.","how_to_avoid_it":"When you see 'CLNS', 'ISO', 'Layer 2', or 'NET address' in a question, immediately think IS-IS. If the question says 'link-state' and 'hierarchy' but does not mention IP-based router IDs, check for OSI clues.

IS-IS is the only IGP that fits those descriptors."

Commonly Confused With

IS-ISvsOSPF

Both are link-state IGPs, but OSPF operates at Layer 3 using IP (protocol 89), uses IP-based router IDs, and requires an IP network for neighbor discovery. IS-IS operates at Layer 2, uses CLNS addressing (NETs), and can route multiple protocols natively.

Use OSPF in a typical enterprise network with IP-only routing; use IS-IS in an ISP backbone that needs to route both IPv4 and IPv6 with maximum stability.

IS-ISvsEIGRP

EIGRP is a hybrid protocol (distance-vector with some link-state features) that uses IP for communication and supports only IP. IS-IS is a pure link-state protocol that operates at Layer 2 and supports multiple network layer protocols (CLNS, IP).

EIGRP is Cisco-proprietary and easy to configure in a small-to-medium IP network; IS-IS is standards-based and preferred in large multi-vendor ISP backbones.

Step-by-Step Breakdown

1

Step 1: Router boots and sends Hello PDUs

The router sends Hello PDUs on all IS-IS enabled interfaces to discover neighboring IS-IS routers. These Hellos contain the router's system ID and area address.

2

Step 2: Neighbor adjacency is formed

When a router receives a Hello from a neighbor with matching area address (for Level 1) or any area (for Level 2), it establishes a two-way adjacency. This is confirmed by seeing its own system ID in the neighbor's Hello.

3

Step 3: Link State PDUs (LSPs) are exchanged

Each router generates an LSP describing its directly connected links and their metrics. LSPs are flooded to all routers in the same area (Level 1) or the backbone (Level 2).

4

Step 4: Link State Database (LSDB) is built

Every router collects all LSPs from the area and stores them in its LSDB. The LSDB contains a complete map of the area's topology.

5

Step 5: SPF algorithm calculates shortest paths

Each router runs the Dijkstra SPF algorithm on its LSDB to compute the shortest path tree to every destination. The resulting routes are installed in the routing table.

Practical Mini-Lesson

IS-IS is a link-state routing protocol that excels in large, hierarchical networks. Core concept: Every router (Intermediate System) maintains a complete map of the network's topology within its area (Level 1) and optionally the entire network (Level 2). How it works: Routers discover neighbors via Hello PDUs, exchange LSPs to share link-state information, and use the SPF algorithm to calculate shortest paths.

IS-IS uses a two-level hierarchy: Level 1 routers know only their area; Level 2 routers form the backbone and know all areas. This design isolates topology changes within an area, improving stability. Comparison to OSPF: Both are link-state IGPs, but IS-IS operates at Layer 2 (OSI) and uses CLNS addressing (NET addresses) instead of IP-based router IDs.

IS-IS is also more flexible—it can route multiple protocols (CLNS, IPv4, IPv6) natively. Configuration notes: On Cisco IOS, IS-IS is configured with 'router isis' and a NET address (e.g.

, 49.0001.0000.0000.0001.00). The area is encoded in the NET (e.g., 49.0001 = Area 1). Interfaces are enabled with 'ip router isis'. Key takeaway: IS-IS is the protocol of choice for large ISPs because of its scalability, fast convergence, and multi-protocol support.

For exams, remember that IS-IS is link-state, uses Hello/LSP/SNP packets, and has a two-level hierarchy. It is not a distance-vector protocol (like RIP) nor a hybrid (like EIGRP).

Memory Tip

IS-IS = 'I See Islands' — Imagine two islands (Level 1 areas) connected by a bridge (Level 2 backbone). Each island has its own map (LSDB). The bridge knows both islands. Remember: IS-IS uses CLNS, not IP, for its router IDs. 'CLNS' sounds like 'cleanse' — IS-IS cleanses routing tables with SPF.

Covered in These Exams

Current Exam Context

Current exam versions that test this topic — use these objectives when studying.

Legacy Exam Context

Older materials may mention these exam versions, but learners should use the current objectives for their target exam.

N10-008N10-009(current version)

Related Glossary Terms

Frequently Asked Questions

What is the difference between Level 1 and Level 2 routers in IS-IS?

Level 1 routers know the topology of their own area only and use a default route to reach Level 2 routers for inter-area traffic. Level 2 routers form the backbone and know the topology of all areas. A router can be both Level 1 and Level 2 (L1/L2).

How does IS-IS compare to OSPF in terms of convergence?

Both converge quickly using SPF, but IS-IS is often faster in very large networks because its hierarchical design limits the scope of LSP flooding. Also, IS-IS does not require a designated router (DR) on broadcast networks, reducing complexity.

Can IS-IS route IPv6?

Yes, IS-IS supports IPv6 through extensions defined in RFC 5308. It uses TLVs (Type-Length-Values) to carry IPv6 reachability information. This makes IS-IS a true multi-protocol routing protocol.

Is IS-IS still used in modern networks?

Absolutely. IS-IS is widely deployed in large ISP backbones, data center fabrics (e.g., Cisco ACI uses IS-IS), and some enterprise networks. Its stability and scalability make it a top choice for mission-critical environments.

Why is IS-IS considered more secure than OSPF?

IS-IS supports authentication (plaintext or MD5) on its PDUs, similar to OSPF. However, because IS-IS operates at Layer 2, it is not directly reachable from IP networks, providing a degree of isolation from IP-based attacks.

Summary

1. IS-IS is a link-state IGP that uses a two-level hierarchy (Level 1 intra-area, Level 2 inter-area) to scale to large networks. 2. It operates at Layer 2 of the OSI model, uses CLNS addressing (NET addresses), and exchanges Hello, LSP, and SNP packets to build a complete topology database.

3. For exams, remember that IS-IS is often compared to OSPF but is distinguished by its OSI heritage, Layer 2 operation, and hierarchical design. It is the correct answer when a question mentions 'CLNS', 'ISO', or a need for a highly scalable, stable link-state protocol for a large ISP backbone.