H3C S5500-SI Series, Operation Manual

Page: 346 / 1217

1-14
Configuring RIPv2 Message Authentication
In a network requiring high security, you can configure this task to implement RIPv2 message validity
check and authentication.
RIPv2 supports two authentication modes: plain text and MD5.
In plain text authentication, the authentication information is sent with the RIP message, which however
cannot meet high security needs.
Follow these steps to configure RIPv2 message authentication:
To do… Use the command… Remarks
Enter system view system-view ––
Enter interface view interface interface-type interface-number ––
Configure RIPv2
authentication
rip authentication-mode { md5 { rfc2082
key-string key-id | rfc2453 key-string } | simple
password }
Required
This task does not apply to RIPv1 because RIPv1 does not support authentication. Although you can
specify authentication modes for RIPv1 in interface view, the configuration does not take effect.
Specifying a RIP Neighbor
Usually, RIP sends messages to broadcast or multicast addresses. On non broadcast or multicast links,
you need to manually specify RIP neighbors. If a specified neighbor is not directly connected, you must
disable source address check on incoming updates.
Follow these steps to specify a RIP neighbor:
To do… Use the command… Remarks
Enter system view system-view ––
Enter RIP view rip [ process-id ] ––
Specify a RIP neighbor
peer ip-address
Required
Disable source address check
on incoming RIP updates
undo validate-source-address
Required
Not disabled by default