268 CHAPTER 27: RIP CONFIGURATION
that all messages are trusty, you can disable zero field check to save CPU
resources.
Follow these steps to enable zero field check on incoming RIPv1 messages:
Enabling Source IP
Address Check on
Incoming RIP Updates
You can enable source IP address check on incoming RIP updates.
For a message received on an Ethernet interface, RIP compares the source IP
address of the message with the IP address of the interface. If they are not in the
same network segment, RIP discards the message.
For a message received on a serial interface, RIP checks whether the source
address of the message is the IP address of the peer interface. If not, RIP discards
the message.
Follow these steps to enable source IP address check on incoming RIP updates:
n
The source IP address check feature should be disabled if a RIP neighbor is not
directly connected.
Configuring RIPv2
Message Authentication
RIPv2 supports two authentication modes: plain text and MD5.
In plain text authentication, the authentication information is sent with the RIP
message, which however cannot meet high security needs.
Follow these steps to configure RIPv2 message authentication:
Specifying a RIP
Neighbor
Usually, RIP sends messages to broadcast or multicast addresses. On non broadcast
or multicast links, you need to manually specify RIP neighbors. If a specified
To do… Use the command… Remarks
Enter system view system-view --
Enter RIP view rip [ process-id ] --
Enable zero field check on
received RIPv1 messages
checkzero Optional
Enabled by default
To do… Use the command… Remarks
Enter system view system-view --
Enter RIP view rip [ process-id ] --
Enable source IP address check on
incoming RIP messages
validate-source-address Optional
Enabled by default
To do… Use the command… Remarks
Enter system view system-view --
Enter interface view interface interface-type interface-number --
Configure RIPv2
authentication
rip authentication-mode { md5 { rfc2082
key-string key-id | rfc2453 key-string } |
simple password }
Required
To Next Page
Loading...
