Fortinet FortiGate 60R, Installation And Configuration Manual

Page: 123 / 270

RIP configuration Adding RIP neighbors
FortiGate-60R Installation and Configuration Guide
123
4 Select OK to save the RIP configuration for the selected interface.
Figure 2: Example RIP configuration for an internal interface
Adding RIP neighbors
Add RIP neighbors to define a neighboring router with which to exchange routing
information. Add neighbors on non-broadcast networks.
When you add neighbors, the FortiGate unit exchanges routing information with the
neighbor router directly, instead of relying on broadcasting routes. This point-to-point
exchange of routing information between the FortiGate unit and the routers added to
the neighbor list is more secure and reduces network traffic. Adding neighbors is
required to be able to exchange routes over non-broadcast networks.
When used in combination with the RIP filters, the FortiGate unit can be configured to
exchange routing information with a subset of routers and access servers on a LAN.
Metric Changes the metric for routes sent by this interface. All routes sent from this
interface will have this metric added to their current metric value. You can
change interface metrics to give higher priorities to some interfaces. For
example, if you have two interfaces that can be used to route packets to the
same destination, if you set the metric of one interface higher than the other,
the routes to the interface with the lower metric will seem to have a lower
cost, so more traffic will use routes to the interface with the lower metric. The
metric can be from 1 to 16.
Note: MD5 authentication is used to verify the integrity of the routing message sent by the
FortiGate unit. Using MD5 authentication, the password is added to the routing message and
MD5 is applied to create the MD5 digest of the routing message. The password is replaced in
the routing message with this MD5 digest and this message is broadcast. When a router
receives the routing message, it replaces the MD5 digest with the password, computes the MD5
digest of this new messaged and then compares the result with the MD5 digest sent with the
original message. If the two MD5 digests are identical, the receiver accepts the message. If they
are not, the receiver rejects the message.