Enabling Source Ip Address Check On Incoming Rip Updates; Configuring Rip-2 Message Authentication; Configuring A Rip Neighbor - 3Com MSR 50 Series Configuration Manual

984 C 59: RIP C
HAPTER ONFIGURATION
Enabling Source IP
Address Check on
Incoming RIP Updates
n
Configuring RIP-2
Message Authentication
Configuring a RIP
Neighbor
You can enable source IP address check on incoming RIP updates.
For a message received on an Ethernet interface, RIP compares the source IP
■
address of the message with the IP address of the interface. If they are not in
the same network segment, RIP discards the message.
For a message received on a serial interface, RIP checks whether the source
■
address of the message is the IP address of the peer interface. If not, RIP
discards the message.
Follow these steps to enable source IP address check on incoming RIP updates:
To do...
Enter system view
Enter RIP view
Enable source IP address
check on incoming RIP
messages
The source IP address check feature should be disabled if the RIP neighbor is not
directly connected.
RIP-2 supports two authentication modes: plain text and MD5.
In plain text authentication, the authentication information is sent with the RIP
message, which cannot meet high security needs.
Follow these steps to configure RIP-2 message authentication:
To do...
Enter system view
Enter interface view
Configure RIP-2
authentication mode
Usually, RIP sends messages to broadcast or multicast addresses. On non broadcast
or multicast links, you need to manually specify a RIP neighbor. If the specified
neighbor is not directly connected, you must disable the source address check on
update messages.
Follow these steps to configure a RIP neighbor:
To do...
Enter system view
Enter RIP view
Specify a RIP neighbor
Use the command...
system-view
rip [ process-id ]
[ vpn-instance
vpn-instance-name ]
validate-source-address
Use the command...
system-view
interface interface-type
interface-number
rip authentication-mode { md5
{ rfc2082 key-string key-id | rfc2453
key-string } | simple password }
Use the command...
system-view
rip [ process-id ] [ vpn-instance
vpn-instance-name ]
peer ip-address
Remarks
--
--
Optional
Enabled by default
Remarks
--
--
Required
Remarks
--
--
Required