路由协议认证(RIP).doc

1 基本环境配置R1(config)#host SITE1R1(config)#int f1/0R1(config-if)#ip add 12.12.12.1 255.255.255.0R1(config-if)#no shutdownR1(config-if)#exitR1(config)#int f1/1R1(config-if)#ip add 13.13.13.1 255.255.255.0R1(config-if)#no shutdownSITE1(config)#interface loopback 0SITE1(config-if)#ip add 1.1.1.1 255.255.255.0SITE1(config-if)#exitR2(config)#host comR2(config)#interface lo 0R2(config-if)#ip add 2.2.2.2 255.255.255.0R2(config-if)#exitR2(config)#int f1/0R2(config-if)#ip add 12.12.12.2 255.255.255.0R2(config-if)#no shR2(config-if)#exitR2(config)#int f1/1R2(config-if)#ip add 23.23.23.2 255.255.255.0R2(config-if)#no shR3(config)#host SITE2SITE2(config)#int lo 0SITE2(config-if)#ip add 3.3.3.3 255.255.255.0SITE2(config-if)#exitSITE2(config)#int f1/0SITE2(config-if)#ip add 23.23.23.3 255.255.255.0SITE2(config-if)#no shSITE2(config-if)#exitSITE2(config)#int f1/1SITE2(config-if)#ip add 13.13.13.3 255.255.255.0SITE2(config-if)#no shSITE2(config-if)#exit2 配置动态路由协议RIPsite1(config)#router rip /启用RIP进程site1(config-router)#version 2 /使用版本2site1(config-router)#no auto-summary /关闭自动汇总site1(config-router)#network 1.1.1.0 /宣告直连网段site1(config-router)#network 12.12.12.0SITE1(config-router)#network 13.13.13.0com(config)#router ripcom(config-router)#version 2com(config-router)#no auto-summary com(config-router)#network 2.2.2.0com(config-router)#network 12.12.12.0com(config-router)#network 23.23.23.0site2(config)#router ripsite2(config-router)#ver 2site2(config-router)#no ausite2(config-router)#network 3.3.3.0site2(config-router)#network 23.23.23.0SITE2(config-router)#net 13.13.13.0SITE1#sh ip routeCodes: C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static routeGateway of last resort is not set 1.0.0.0/24 is subnetted, 1 subnetsC 1.1.1.0 is directly connected, Loopback0 2.0.0.0/24 is subnetted, 1 subnetsR 2.2.2.0 120/1 via 12.12.12.2, 00:00:27, FastEthernet1/0 3.0.0.0/24 is subnetted, 1 subnetsR 3.3.3.0 120/2 via 12.12.12.2, 00:00:01, FastEthernet1/0 23.0.0.0/24 is subnetted, 1 subnetsR 23.23.23.0 120/1 via 12.12.12.2, 00:00:27, FastEthernet1/0 12.0.0.0/24 is subnetted, 1 subnetsC 12.12.12.0 is directly connected, FastEthernet1/0 13.0.0.0/24 is subnetted, 1 subnetsC 13.13.13.0 is directly connected, FastEthernet1/1SITE1#ping 3.3.3.3Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 3.3.3.3, timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 28/39/56 ms3 配置RIP认证1. 配置密钥链SITE1(config)#key chain suibianxie /定义一个钥匙串SITE1(config-keychain)#key 1 /定义钥匙1SITE1(config-keychain-key)#key-string 12345 /定义密码SITE1(config-keychain-key)#exitSITE2(config)#key chain xiesuibianSITE2(config-keychain)#key 1SITE2(config-keychain-key)#key-string 12345SITE2(config-keychain-key)#exitSITE1(config)#int f1/1SITE1(config-if)#ip rip authentication mode md5 /使用更安全的密文加密密码SITE1(config-if)#ip rip authentication key-chain suibianxie /调用定义的钥匙串SITE1#debug ip rip events /开启DEBUG追踪RIP的事件RIP event debugging is onSITE1#SITE1#*Oct 21 15:38:12.367: RIP: ignored v2 packet from 13.13.13.3 (invalid authentication)*Oct 21 15:38:13.019: RIP: ignored v2 packet from 13.13.13.3 (invalid authentication)SITE1#un allSITE2(config-if)#ip rip authentication mode md5SITE2(config-if)#ip rip authentication key-chain xiesuibianSITE1#debug ip rip events SITE1#un allSITE1#*Oct 21 15:40:28.239: RIP: received v2 update from 13.13.13.3 on FastEthernet1/1*Oct 21 15:40:28.243: RIP: Update contains 3 routesSITE1#sh ip routeCodes: C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static routeGateway of last resort is not set 1.0.0.0/24 is subnetted, 1 subnetsC 1.1.1.0 is directly connected, Loopback0 2.0.0.0/24 is subnetted, 1 subnetsR 2.2.2.0 120/1 via 12.12.12.2, 00:00:28, FastEthernet1/0 3.0.0.0/24 is subnetted, 1 subnetsR 3.3.3.0 120/1 via 13.13.13.3, 00:00:05, FastEthernet1/1 23.0.0.0/24 is subnetted, 1 subnetsR 23.23.23.0 120/1 via 13.13.13.3, 00:00: