Authentication
RIP Configuration Example
1. Add VLANs for routing interfaces.
2. Add IP interfaces with IPv4 addresses to VLANs.
388
CN4093 Application Guide for N/OS 8.2
RIPv2 authentication uses plain text password for authentication. If configured
using Authentication password, then it is necessary to enter an authentication key
value.
The following method is used to authenticate a RIP message:
If the router is not configured to authenticate RIPv2 messages, then RIPv1 and
unauthenticated RIPv2 messages are accepted; authenticated RIPv2 messages
are discarded.
If the router is configured to authenticate RIPv2 messages, then RIPv1 and
RIPv2 messages which pass authentication testing are accepted;
unauthenticated and failed authentication RIPv2 messages are discarded.
For maximum security, RIPv1 messages are ignored when authentication is
enabled (interface ip <x>/ ip rip auth type/password); otherwise, the
routing information from authenticated messages is propagated by RIPv1 routers
in an unauthenticated manner.
Note: An interface RIP disabled uses all the default values of the RIP, no matter
how the RIP parameters are configured for that interface. RIP sends out RIP
regular updates to include an UP interface, but not a DOWN interface.
CN4093(config)# vlan 2
CN4093(configvlan)# exit
CN4093(config)# interface port 2
CN4093(configif)# switchport mode trunk
CN4093(configif)# switchport trunk allowed vlan add 2
CN4093(configif)# exit
Port 2 is an UNTAGGED port and its current PVID is 1.
Confirm changing PVID from 1 to 2 [y/n]: y
CN4093(config)# vlan 3
CN4093(configvlan)# exit
CN4093(config)# interface port 3
CN4093(configif)# switchport mode trunk
CN4093(configif)# switchport trunk allowed vlan add 3
CN4093(configif)# exit
Port 3 is an UNTAGGED port and its current PVID is 1.
Confirm changing PVID from 1 to 3 [y/n]: y
CN4093(config)# interface ip 2
CN4093(configipif)# enable
CN4093(configipif)# ip address 102.1.1.1
CN4093(configipif)# vlan 2
CN4093(configipif)# exit
CN4093(config)# interface ip 3
CN4093(configipif)# enable
CN4093(configipif)# ip address 103.1.1.1
CN4093(configipif)# vlan 3
CN4093(configipif)# exit