RIP Authentication Configuration | RIP认证配置

拓朴

实验说明

　　R1,R2,R3实现RIP版本2,之间互相认证

配置(方法一)

R1的配置

! hostname R1 ! interface FastEthernet0/0 ip address 172.16.0.1 255.255.255.0 ip rip authentication key-chain R1 ip rip authentication mode text //默认是明文认证，如果要使用MD5加密认证,将text换成md5 duplex half ! interface Serial2/1 ip address 192.168.0.1 255.255.255.0 ip rip authentication key-chain R1 serial restart-delay 0 ! key chain R1 key 3 key-string cisco ! router rip version 2 network 172.16.0.0 network 192.168.0.0 !

您现在所查看的文档出自西安深度3G网络工程师培训[url]www.norvel.com.cn[/url]

R2的配置

! hostname R2 ! interface Serial2/1 ip address 192.168.0.2 255.255.255.0 ip rip authentication key-chain R2 serial restart-delay 0 ! key chain R2 key 10 key-string cisco ! router rip version 2 network 192.168.0.0

您现在所查看的文档出自西安深度3G网络工程师培训[url]www.norvel.com.cn[/url]

R3的配置

! hostname R3 ! interface FastEthernet0/0 ip address 172.16.0.3 255.255.255.0 ip rip authentication key-chain R3 duplex half ! key chain R3 key 11 key-string cisco ! router rip version 2 network 172.16.0.0 !

调试

R2上进行调试

R2# debug ip rip *Feb 22 04:46:36.347: RIP: sending request on Serial2/1 to 224.0.0.9 *Feb 22 04:46:36.347: RIP: sending request on Serial2/1 to 224.0.0.9 *Feb 22 04:46:36.347: RIP: sending request on Serial2/1 to 224.0.0.9 *Feb 22 04:46:38.347: RIP: sending v2 flash update to 224.0.0.9 via Serial2/1 (192.168.0.2) *Feb 22 04:46:38.347: RIP: build flash update entries - suppressing null update * Feb 22 04:46:54.147: RIP: received packet with text authentication cisco *Feb 22 04:46:54.151: RIP: received v2 update from 192.168.0.1 on Serial2/1 *Feb 22 04:46:54.151: 172.16.0.0/24 via 0.0.0.0 in 1 hops *Feb 22 04:46:56.155: RIP: sending v2 flash update to 224.0.0.9 via Serial2/1 (192.168.0.2) *Feb 22 04:46:56.155: RIP: build flash update entries - suppressing null update *Feb 22 04:47:02.291: RIP: sending v2 update to 224.0.0.9 via Serial2/1 (192.168.0.2) *Feb 22 04:47:02.291: RIP: build update entries - suppressing null update *Feb 22 04:47:21.375: RIP: received packet with text authentication cisco *Feb 22 04:47:21.379: RIP: received v2 update from 192.168.0.1 on Serial2/1 *Feb 22 04:47:21.379: 172.16.0.0/24 via 0.0.0.0 in 1 hops *Feb 22 04:47:29.527: RIP: sending v2 update to 224.0.0.9 via Serial2/1 (192.168.0.2) *Feb 22 04:47:29.527: RIP: build update entries - suppressing null update *Feb 22 04:47:49.571: RIP: received packet with text authentication cisco *Feb 22 04:47:49.571: RIP: received v2 update from 192.168.0.1 on Serial2/1 *Feb 22 04:47:49.571: 172.16.0.0/24 via 0.0.0.0 in 1 hops *Feb 22 04:47:57.807: RIP: sending v2 update to 224.0.0.9 via Serial2/1 (192.168.0.2) *Feb 22 04:47:57.807: RIP: build update entries - suppressing null update R2# show ip protocols Routing Protocol is "rip" 　Sending updates every 30 seconds, next due in 4 seconds 　Invalid after 180 seconds, hold down 180, flushed after 240 　Outgoing update filter list for all interfaces is not set 　Incoming update filter list for all interfaces is not set 　Redistributing: rip 　Default version control: send version 1, receive any version 　　 Interface Send Recv Triggered RIP Key-chain 　　Serial2/1 2 　　2 　　　　　　　　　R2 //可以看到key-chain使用R2 　Automatic network summarization is not in effect 　Maximum path: 4 　Routing for Networks: 　　192.168.0.0 　Routing Information Sources: 　Gateway Distance Last Update 　　192.168.0.1 120 00:00:04 　Distance: (default is 120) 检查路由表，观察能否学习到路由条目 R2# show ip route Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP 　　D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area 　　N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 　　E1 - OSPF external type 1, E2 - OSPF external type 2 　　i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 　　ia - IS-IS inter area, * - candidate default, U - per-user static route 　　o - ODR, P - periodic downloaded static route Gateway of last resort is not set 172.16.0.0/24 is subnetted, 1 subnets R 172.16.0.0 [120/1] via 192.168.0.1, 00:00:17, Serial2/1 C 192.168.0.0/24 is directly connected, Serial2/1