4
28
bintec User’s Guide
Frame Relay
Multiprotocol over Frame Relay Submenu
Gateways use
RIP
to exchange information stored in routing tables by
communicating with each other at regular intervals. The gateway supports both
version 1 and version 2 of RIP, either individually or together.
RIP is configured separately for LAN and WAN.
Active and passive
Gateways can be defined as active or passive gateways: Active gateways offer
their routing entries to other gateways via
broadcasts
. Passive gateways
accept the information from the active gateways and store it, but do not pass on
their own routing entries. The
gateway can be either active or passive.
Connection partner
If you negotiate with a connection partner to receive and/or send RIP packets,
your gateway
can exchange routing information dynamically with the gateways
in the LAN of the remote gateway.
IP Accounting
This option is for activating or deactivating the creation of IP accounting mes-
sages for this connection partner. If IP accounting is activated, a statistics mes-
sage is generated (and entered in the
biboAdmSyslogTable
), which contains
detailed information about the connections to this connection partner. (Settings
for storage of accounting messages into a file can be done in
S
YSTEM
➜
E
XTERNAL
S
YSTEM
L
OGGING
.)
Back Route
Verification
This term conceals a simple but very powerful function of the gateway. If Back-
route Verification is activated for a connection partner, data packets are only ac-
cepted at the interface if answering packets would be routed over the same
interface. You can therefore prevent packets with fake IP addresses being ac-
cepted – even without filters.
Route Announce
This option enables you to set when routing protocols (e.g. RIP), that have been
activated if applicable, propagate the IP routes defined for this interface.
Proxy ARP
Proxy ARP
enables the gateway to answer
ARP
requests from its
own LAN acting for the defined connection partner. If a host in the LAN wants
Note
Receiving routing tables via the RIP is a possible security loophole, as external
computers or gateways can change the routing functionality of the gateway.
RIP packets do not set up or hold dialup connections.
