Enabling Zero Field Check On Incoming Ripv1 Messages; Enabling Source Ip Address Check On Incoming Rip Updates; Configuring Ripv2 Message Authentication - HPE FlexNetwork 5510 HI Series Layer 3 - Ip Routing Configuration Manual

Hide thumbs Also See for FlexNetwork 5510 HI Series:
Table of Contents

Advertisement

Enabling zero field check on incoming RIPv1 messages

Some fields in the RIPv1 message must be set to zero. These fields are called "zero fields." You can
enable zero field check on incoming RIPv1 messages. If a zero field of a message contains a
non-zero value, RIP does not process the message. If you are certain that all messages are
trustworthy, disable zero field check to save CPU resources.
This feature does not apply to RIPv2 packets, because they have no zero fields.
To enable zero field check on incoming RIPv1 messages:
Step
Enter system view.
1.
Enter RIP view.
2.
Enable zero field check on
3.
incoming RIPv1 messages.

Enabling source IP address check on incoming RIP updates

Perform this task to enable source IP address check on incoming RIP updates.
Upon receiving a message on an Ethernet interface, RIP compares the source IP address of the
message with the IP address of the interface. If they are not in the same network segment, RIP
discards the message.
Upon receiving a message on a PPP interface, RIP checks whether the source address of the
message is the IP address of the peer interface. If not, RIP discards the message.
To enable source IP address check on incoming RIP updates:
Step
Enter system view.
1.
Enter RIP view.
2.
Enable source IP address
3.
check on incoming RIP
messages.

Configuring RIPv2 message authentication

Perform this task to enable authentication on RIPv2 messages. This feature does not apply to RIPv1
because RIPv1 does not support authentication. Although you can specify an authentication mode
for RIPv1 in interface view, the configuration does not take effect.
RIPv2 supports two authentication modes: simple authentication and MD5 authentication.
To configure RIPv2 message authentication:
Step
Enter system view.
1.
Enter interface view.
2.
Command
system-view
rip [ process-id ] [ vpn-instance
vpn-instance-name ]
checkzero
Command
system-view
rip [ process-id ] [ vpn-instance
vpn-instance-name ]
validate-source-address
Command
system-view
interface interface-type interface-number
34
Remarks
N/A
N/A
The default setting is enabled.
Remarks
N/A
N/A
By default, this function is
enabled.
Remarks
N/A
N/A

Hide quick links:

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the FlexNetwork 5510 HI Series and is the answer not in the manual?

Table of Contents