Enabling Source Ip Address Check On Incoming Rip Updates; Configuring Ripv2 Message Authentication - HP 3600 v2 series Configuration Manual

Hide thumbs Also See for 3600 v2 series:
Table of Contents

Advertisement

To do...
Enter system view
Enter RIP view
Enable zero field check on
received RIPv1 messages

Enabling source IP address check on incoming RIP updates

You can enable source IP address check on incoming RIP updates.
For a message received on an Ethernet interface, RIP compares the source IP address of the message with
the IP address of the interface. If they are not in the same network segment, RIP discards the message.
Follow these steps to enable source IP address check on incoming RIP updates:
To do...
Enter system view
Enter RIP view
Enable source IP address check on
incoming RIP messages
NOTE:
The source IP address check feature should be disabled if the RIP neighbor is not directly connected.

Configuring RIPv2 message authentication

In a network requiring high security, configure this task to implement RIPv2 message validity check and
authentication.
RIPv2 supports two authentication modes: plain text and MD5.
In plain text authentication, the authentication information is sent with the RIP message; however, this
cannot meet high security needs.
Follow these steps to configure RIPv2 message authentication:
To do...
Enter system view
Enter interface view
Configure RIPv2 authentication
Use the command...
system-view
rip [ process-id ] [ vpn-instance
vpn-instance-name ]
checkzero
Use the command...
system-view
rip [ process-id ] [ vpn-instance
vpn-instance-name ]
validate-source-address
Use the command...
system-view
interface interface-type
interface-number
rip authentication-mode { md5
{ rfc2082 key-string key-id |
rfc2453 key-string } | simple
password }
33
Remarks
––
––
Optional
Enabled by default
Remarks
––
––
Optional
Enabled by default
Remarks
––
––
Required

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents