Enabling Zero Field Check On Incoming Ripv1 Messages; Enabling Source Ip Address Check On Incoming Rip Updates; Configuring Ripv2 Message Authentication - HPE FlexNetwork HSR6800 Configuration Manual

Enabling zero field check on incoming RIPv1 messages

Some fields in the RIPv1 message must be set to zero. These fields are called "zero fields." You can
enable zero field check on incoming RIPv1 messages. If a zero field of a message contains a
non-zero value, RIPv1 does not process the message. If you are certain that all messages are
trustworthy, disable zero field check to save CPU resources.
This feature does not apply to RIPv2 packets, because they have no zero fields.
To enable zero field check on incoming RIPv1 messages:
Step
Enter system view.
1.
Enter RIP view.
2.
Enable zero field check on
3.
incoming RIPv1 messages.

Enabling source IP address check on incoming RIP updates

Perform this task to enable source IP address check on incoming RIP updates.
Upon receiving a message on an Ethernet interface, RIP compares the source IP address of the
message with the IP address of the interface. If they are not in the same network segment, RIP
discards the message.
Upon receiving a message on a serial interface, RIP checks whether the source address of the
message is the IP address of the peer interface. If not, RIP discards the message.
IMPORTANT:
Disable the source IP address check feature if the RIP neighbor is not directly connected.
To enable source IP address check on incoming RIP updates:
Step
Enter system view.
1.
Enter RIP view.
2.
Enable source IP address
3.
check on incoming RIP
messages.

Configuring RIPv2 message authentication

Perform this task to enable authentication on RIPv2 messages. This feature does not apply to RIPv1
because RIPv1 does not support authentication. Although you can specify an authentication mode
for RIPv1 in interface view, the configuration does not take effect.
RIPv2 supports two authentication modes: simple authentication and MD5 authentication.
Command
system-view
rip [ process-id ] [ vpn-instance
vpn-instance-name ]
checkzero
Command
system-view
rip [ process-id ] [ vpn-instance
vpn-instance-name ]
validate-source-address
30
Remarks
N/A
N/A
Optional.
By default, this function is
enabled.
Remarks
N/A
N/A
Optional.
By default, this function is
enabled.