Cisco CCNP / BSCI Exam Tutorial: RIP Update Packet Authentication Perfect

Cisco CCNP / BSCI Exam Tutorial: RIP Update Packet Authentication

Team info
Description When you earned your CCNA, you believed you learned anything there is to know about RIP. Close, but not quite! There are some extra specifics you require to know to pass the BSCI exam and get a single step closer to the CCNP exam, and one of these requires RIP update packet authentication.

You happen to be familiar with some benefits of making use of RIPv2 more than RIPv1, assistance for VLSM chief among them. To get alternative interpretations, please take a peep at: rent perry belcher resources. But one particular benefit that you're not introduced to in your CCNA reports is the ability to configure routing update packet authentication.

You have two possibilities, clear text and MD5. Dig up new information on a related article - Click here: perry belcher profile. Clear text is just that - a clear text password that is visible by anybody who can pick a packet off the wire. If you are going to go to the difficulty of configuring update authentication, you should use MD5. The MD stands for "Message Digest", and this is the algorithm that generates the hash value for the password that will be contained in the update packets.

Not only have to the routers agree on the password, they have to agree on the authentication technique. If 1 router sends an MD5-hashed password to yet another router that is configured for clear-text authentication, the update will not be accepted. debug ip rip is a fantastic command for troubleshooting authenticated updates.

R1, R2, and R3 are running RIP over a frame relay cloud. Right here is how RIP authentication would be configured on these three routers.

R1#conf t

R1(config)#crucial chain RIP

< The key chain can have any name.>

R1(config-keychain)#important 1

< Key chains can have multiple keys. Number them carefully when using multiples.>

R1(config-keychain-key)#essential-string CISCO

< This is the text string the key will use for authentication.>

R1(config)#int s0

R1(config-if)#ip rip authentication mode text

< The interface will use clear-text mode.>

R1(config-if)#ip rip authentication important-chain RIP

< The interface is using key chain RIP, configured earlier.>

R2#conf t

R2(config)#key chain RIP

R2(config-keychain)#crucial 1

R2(config-keychain-important)#key-string CISCO

R2(config)#int s0.123

R2(config-subif)#ip rip authentication mode text

R2(config-subif)#ip rip authentication key-chain RIP

R3#conf t

R3(config)#key chain RIP

R3(config-keychain)#key 1

R3(config-keychain-crucial)#crucial-string CISCO

R3(config)#int s0.31

R3(config-subif)#ip rip authentication mode text

R3(config-subif)#ip rip authentication key-chain RIP

To use MD5 authentication rather than clear-text, merely replace the word "text" in the ip rip authentication mode command with md5.

Here's what a effectively authentication RIPv2 packet looks like, courtesy of debug ip rip. Clear-text authentication is in effect and the password is "cisco".

3d04h: RIP: received packet with text authentication cisco

3d04h: RIP: received v2 update from 150.1.1.three on Ethernet0

3d04h: one hundred.../eight by way of ... in 1 hops

3d04h: 150.1.2./24 via ... in 1 hops

Here's what it looks like when the remote device is set for MD5 authentication and the neighborhood router is set for clear-text. Visit about perry belcher to discover the reason for this hypothesis. You will also see this message if the password itself is incorrect.

3d04h: RIP: ignored v2 packet from 150.1.1.3 (invalid authentication)

"Debug ip rip" may be a easy command as compared to the debugs for other protocols. If you have an opinion about protection, you will seemingly need to read about perry belcher site. but it's also a extremely potent debug. Start off making use of debugs as early as possible in your Cisco scientific studies to discover how router commands really work!.
Created 29 May 2015
Web site http://theperrybelcher.tumblr.com/post/77457691781/perry-belcher-and-social-media-marketing
Total credit 1,992
Recent average credit 0
Cross-project stats Free-DC
BOINCstats.com
SETIBZH
Country None
Type Government agency
Members
Founder ---
New members in last day 0
Total members 1 (view)
Active members 0 (view)
Members with credit 1 (view)



Main page · Your account · Message boards


Copyright © 2024 Arizona State University
Generated 25 Apr 2024, 15:38:02 UTC