Configuring Rip To Check The Validity Of Update Packets - Huawei Quidway NetEngine80E Configuration Manual

HUAWEI NetEngine80E/40E Router
Configuration Guide - IP Routing
l
l Run:
Step 4 Run:
rip replay-protect
The replay-protect function is enabled.
----End

3.8.6 Configuring RIP to Check the Validity of Update Packets

The check on RIP Update packets includes the check on zero fields in RIPv1 packets and the
check on source addresses of RIP Update packets. The two types of check have different
functions and applications.
Context
Perform the following steps on the RIP router:
Procedure
l
Issue 02 (2014-09-30)
RIPv2 is configured to use MD5 authentication, and authentication packets use the
nonstandard packet format.
rip authentication-mode hmac-sha256
key } key-id
RIPv2 is configured to use HMAC-SHA256 authentication.
rip authentication-mode keychain keychain-name
Keychain authentication is configured for RIP-2 packets.
NOTE
Before running the rip replay-protect command, run the rip authentication-mode md5 nonstandard
command or the rip authentication-mode hmac-sha256 { plain plain-text | [ cipher ] password-key }
key-id in the RIP interface view to configure cryptographic authentication packets .
NOTE
l For details of the Identification field in an IP packet, see Feature Description - IP Services.
l If you run the rip replay-protect command in the same view multiple times, only the last configuration
takes effect.
Configuring the Zero Field Check for RIPv1 Packets
1. Run:
system-view
The system view is displayed.
2. Run:
rip [ process-id ]
The RIP process is enabled and the RIP view is displayed.
3. Run:
checkzero
The zero field check is configured for RIPv1 packets.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
{ plain plain-text | [ cipher ] password-
3 RIP Configuration
193