神舟数码RIP认证的验证.doc

RIP认证的验证试验拓扑：试验目的：验证RIP认证，其中包括明文认证的双向认证和单项认证；密文认证的双向认证和单向认证。试验环境：如上拓扑，r1和r2均使用RIPv2协议。试验步骤：1、 预配置r1#conf tEnter configuration commands, one per line. End with CNTL/Z.r1(config)#host router1router1(config)#no ip do router1(config)#no ip domain-lorouter1(config)#lin con 0router1(config-line)#no exec-trouter1(config-line)#logg syrouter1(config-line)#loginrouter1(config-line)#exitrouter1(config)#int s1/2router1(config-if)#ip add 12.0.0.1 255.255.255.0router1(config-if)#no shurouter1(config-if)#int lo 0router1(config-if)#ip add 1.1.1.1 255.255.255.255router1(config-if)#r2#conf tEnter configuration commands, one per line. End with CNTL/Z.r2(config)#host router2router2(config)#no ip domain-lorouter2(config)#lin con 0router2(config-line)#no exec-trouter2(config-line)#logg syrouter2(config-line)#loginrouter2(config-line)#exitrouter2(config)#int s2/1router2(config-if)#ip add 12.0.0.2 255.255.255.0router2(config-if)#no shutrouter2(config-if)#int lo 0router2(config-if)#ip add 2.2.2.2 255.255.255.2552、 配置RIProuter1#conf tEnter configuration commands, one per line. End with CNTL/Z.router1(config)#router riprouter1(config-router)#net 1.1.1.1router1(config-router)#net 12.0.0.0router1(config-router)#verrouter1(config-router)#version 2router1#conf tEnter configuration commands, one per line. End with CNTL/Z.router1(config)#router riprouter1(config-router)#net 1.1.1.1router1(config-router)#net 12.0.0.0router1(config-router)#verrouter1(config-router)#version 23、 配置认证密码，并设置为明文认证router1(config)#key chain r1router1(config-keychain)#ke 1router1(config-keychain-key)#key-string norverrouter1(config-keychain-key)#ke 2router1(config-keychain-key)#key-string ciscorouter1(config-keychain-key)#exitrouter1(config-keychain)#exitrouter1(config)#int s1/2router1(config-if)#ip rip au key-chain r1router1(config-if)#ip rip au mod text router1(config-if)#router2#conf tEnter configuration commands, one per line. End with CNTL/Z.router2(config)#key chain r1router2(config-keychain)#key 1router2(config-keychain-key)#key-string ciscorouter2(config-keychain-key)#ke 2router2(config-keychain-key)#key-string norvelrouter2(config-keychain-key)#ke 3router2(config-keychain-key)#key-string 12345router2(config-keychain-key)#exitrouter2(config-keychain)#exitrouter2(config)#int s2/1router2(config-if)#ip rip au key-chain r1router2(config-if)#ip rip au mod textrouter2(config-if)#4、验证明文单向认证router1#de ip ripRIP protocol debugging is onrouter1#RIP: received packet with text authentication ciscoRIP: received v2 update from 12.0.0.2 on Serial1/2 /明文/认证通过 2.0.0.0/8 - 0.0.0.0 in 1 hopsrouter1#router2#de ip ripRIP protocol debugging is onrouter2#RIP: sending v2 update to 224.0.0.9 via Serial2/1 (12.0.0.2) 2.0.0.0/8 - 0.0.0.0, metric 1, tag 0RIP: sending v2 update to 224.0.0.9 via Loopback0 (2.2.2.2) 12.0.0.0/8 - 0.0.0.0, metric 1, tag 0RIP: ignored v2 packet from 2.2.2.2 (sourced from one of our addresses)router2#cRIP: received packet with text authentication norverRIP: ignored v2 packet from 12.0.0.1 (invalid authentication) /明文认证失败5、 明文双向认证的配置及验证配置：将router1的key1密码更改为ciscorouter1#conf tEnter configuration commands, one per line. End with CNTL/Z.router1(config)#key chain r1router1(config-keychain)#key 1router1(config-keychain-key)#kerouter1(config-keychain-key)#key-string ciscorouter1(config-keychain-key)#验证明文双向认证router1#de ip ripRIP protocol debugging is onrouter1#cle ip route *router1#RIP: sending general request on Serial1/2 to 224.0.0.9RIP: sending general request on Loopback0 to 224.0.0.9RIP: ignored v2 packet from 1.1.1.1 (sourced from one of our addresses)router1#RIP: received packet with text authentication ciscoRIP: received v2 update from 12.0.0.2 on Serial1/2 /明文认证通过 2.0.0.0/8 - 0.0.0.0 in 1 hopsRIP: sending v2 update to 224.0.0.9 via Serial1/2 (12.0.0.1) 1.0.0.0/8 - 0.0.0.0, metric 1, tag 0RIP: sending v2 update to 224.0.0.9 via Loopback0 (1.1.1.1) 2.0.0.0/8 - 0.0.0.0, metric 2, tag 0 12.0.0.0/8 - 0.0.0.0, metric 1, tag 0RIP: ignored v2 packet from 1.1.1.1 (sourced from one of our addresses)RIP: sending v2 update to 224.0.0.9 via Serial1/2 (12.0.0.1) 1.0.0.0/8 - 0.0.0.0, metric 1, tag 0RIP: sending v2 update to 224.0.0.9 via Loopback0 (1.1.1.1) 2.0.0.0/8 - 0.0.0.0, metric 2, tag 0 12.0.0.0/8 - 0.0.0.0, metric 1, tag 0RIP: ignored v2 packet from 1.1.1.1 (sourced from one of our addresses)router2#de ip ripRIP protocol debugging is onrouter2#RIP: received packet with text authentication ciscoRIP: received v2 request from 12.0.0.1 on Serial2/1 /明文认证通过router2#6、 验证密文单向和双向认证配置密文验证router1(config)#int s1/2router1(config-if)#ip rip au mod md5router1(config-if)#router2(config)#int s2/1router2(config-if)#ip rip au mod md5验证密文单向认证router1(config)#ke chain r1 router1(config-keychain)#ke 1router1(config-keychain-key)#key-string nornel /更改router1的key1密码router1#de ip ripRIP protocol debugging is onrouter1#RIP: received packet with MD5 authenticationRIP: ignored v2 packet from 12.0.0.2 (invalid authentication) /密文认证未通过router1#router2#RIP: received packet with MD5 authenticationRIP: received v2 update from 12.0.0.1 on Serial2/1 /密文认证通过 1.0.0.0/8 - 0.0.0.0 in 1 hops验证密文双向认证router1#cle ip route *router1#RIP: sending general request on Serial1/2 to 224.0.0.9RIP: sending general request on Loopback0 to 224.0.0.9RIP: ignored v2 packet from 1.1.1.1 (sourced from one of our addresses)RIP: sending v2 update to 224.0.0.9 via Serial1/2 (12.0.0.1) 1.0.0.0/8 - 0.0.0.0, metric 1, tag 0RIP: sending v2 update to 224.0.0.9 via Loopback0 (1.1.1.1) 12.0.0.0/8