RIP Configuration
©2008 Allied Telesis Inc. All rights reserved.
27.8
AlliedWare Plus
TM
Operating System Software Reference C613-50003-00 REV E
Software Version 5.2.1
RIPv2 md5 authentication (multiple
keys)
This example illustrates the md5 authentication of the routing information exchange process
for RIP using multiple keys. The routing devices in this example are Allied Telesis managed
Layer 3 Switches. Switch 1 and Switch 2 are running RIP and exchange routing updates. To
configure authentication on Switch 1, define a key chain, specify keys in the key chain and then
define the authentication string or passwords to be used by the keys. Then set the time period
during which it is valid to receive or send the authentication key by specifying the accept and
send lifetimes. After defining the key string, specify the key chain (or the set of keys) that will be
used for authentication on the interface and the authentication mode to be used. Configure
Switch 2 and Switch 3 to have the same key ID and key string as Switch 1 for the time that
updates need to be exchanged.
In
md5
authentication, both the key ID and key string are matched for authentication. Switch 1
will receive only packets that match both the key ID and the key string in the specified key chain
(within the accept lifetime) on that interface. In the following example, Switch 2 has the same
key ID and key string as Switch 1. For additional security, the accept lifetime and send lifetime
are configured such that every fifth day the key ID and key string changes. To maintain
continuity, the accept lifetimes should be configured to overlap; however, the send lifetime
should not be overlapping.
Switch 1
rip_5
Switch 2
Switch 1
port1.0.0
port1.0.1
10.10.10.10
10.10.10.50
port1.0.1
10.10.12.50
port1.0.2
10.10.11.10
awplus#
configure terminal
Enter the
Configure
mode.
awplus(config)#
router rip
Define a RIP routing process and enter the Router
mode.
awplus(config-router)#
network 10.10.10.0/24
Associate network
10.10.10.0/24
with the RIP
process.
awplus(config-router)#
redistribute connected
Enable redistributing from connected routes.
awplus(config-router)#
exit
Exit the Router mode and return to the
Configure
mode.
awplus(config)#
key chain SUN
Enter the key chain management mode to add keys to
the key chain
SUN
.
awplus(config-keychain)#
key 1
Add authentication key ID (
1
) to the key chain
SUN
.
awplus(config-keychain-key)#
key-string Secret
Specify a password (Secret) to be used by the
specified key.
awplus(config-keychain-key)#
accept-lifetime
12:00:00 Mar 2 2007 14:00:00 Mar 7 2007
Specify the time period during which authentication
key string Secret can be received. In this case, key
string Secret can be received from noon of March 2
to 2 pm March 7, 2007.
awplus(config-keychain-key)#
send-lifetime
12:00:00 Mar 2 2007 12:00:00 Mar 7 2007
Specify the time period during which authentication
key string Secret can be send. In this case, key string
Secret can be received from noon of March 2 to
noon of March 7, 2007.
