Fortinet FortiGate 1000A, Руководство администратора

Страница: 174 / 412

174
01-28011-0254-20051115 Fortinet Inc.
Router objects Router
4 Under Match, select the criteria to match.
5 Under Set, select the criteria to change.
6 Select OK.
Key chain list
RIP version 2 uses authentication keys to ensure that the routing information
exchanged between routers is reliable. For authentication to work both the sending
and receiving routers must be set to use authentication, and must be configured with
the same keys.
A key chain is a list of one or more keys and the send and receive lifetimes for each
key. Keys are used for authenticating routing packets only during the specified
lifetimes. The FortiGate unit migrates from one key to the next according to the
scheduled send and receive lifetimes. The sending and receiving routers should have
their system dates and times synchronized, but overlapping the key lifetimes ensures
that a key is always available even if there is some difference in the system times. See
“System time” on page 89 for information on setting the FortiGate system date and
time.
Figure 82: Key chain list
New key chain
Figure 83: Key chain name configuration
To add a key chain name
1 Go to Router > Router Objects > Key-chain .
Create New Add a new key chain.
Key-chain The key chain name.
Accept Lifetime The time period in which to accept a key.
Send Lifetime The time period in which to send a key.
Start End The start and end times for the accept and send lifetimes.
Delete, Add key-
chain entry, and
Edit icons Delete, add, or edit a key chain.