思科认证课程 路由协议RIPv2.pptVIP

RIP V2 Instructor Name 目标 完成这个课程后，你将能够以下: 了解RIPV2的改进及与RIPV1的区别 配置RIPV2 RIPV2汇总及认证 RIPv1的不连续子网问题 RIPv1的不连续子网问题 RIPv2 配置命令 关闭RIPv2的自动汇总，解决不连续子网问题 RIP V2手动汇总 关闭RIPv2的自动汇总，解决不连续子网问题 RIP V2 与 RIP V1 兼容性设置 启用RIP认证 启用RIP认证 (cont.) 启用RIP认证 (cont.) 重叠得接受和发送时间账户可以不必时钟同步 验证和排错 show ip protocols 命令 show key chains 命令 RIP配置时注意的问题 RIPv1 与RIPv2 有相同的最大跳数 当认证被开启时，邻居路由器必须配置相同的密码 RIPv1路由器处理RIPv2包时，忽略RIP2 的掩码字段 If you are sending and receiving RIP2 packets, you can enable RIP authentication on an interface. Two authentication modes are supported for RIP2: Plain-text authentication—This is the default authentication as defined in RFC 1723. MD5 authentication—This is a Cisco proprietary encryption type of authentication. To better understand authentication configuration, you need to know the following terms: Key string—The actual password that needs to be accepted by neighboring routers. Key—Refers to a key string and its associated accept and send time frames. Key chain—Refers to a collection of keys. The key chain determines the set of keys that can be used on the interface. If a key chain has not been configured, no authentication is performed on that interface, not even the default authentication. Note: Use plain-text authentication when you want to ensure that misconfigured hosts do not participate in routing rather than for security because the unencrypted authentication key is sent in every RIP2 packet. Enable authentication on an interface by doing the following: Configure one or more key chains. Router (config)# key chain name-of-chain Router (config)# key number Router (config)# key-string text Router (config)# accept-lifetime start-time {infinite | end-time | duration seconds} Router (config)# end-lifetime start-time {infinite | end-time | duration seconds} Enable RIP authentication on one or more interfaces. Router (config-if)# ip rip authentication key-chain name-of-chain This new interface subcommand enables authentication and identifies the set of keys that may be used o