12.03.2015 Views

FortiGate Administration Guide - FirewallShop.com

FortiGate Administration Guide - FirewallShop.com

FortiGate Administration Guide - FirewallShop.com

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

RIP<br />

Router Dynamic<br />

RIP<br />

How RIP works<br />

RIP is a distance-vector routing protocol intended for small, relatively<br />

homogeneous, networks. The <strong>FortiGate</strong> implementation of RIP supports RIP<br />

version 1 (see RFC 1058) and RIP version 2 (see RFC 2453).<br />

Note: Basic routing options can be configured through the web-based manager. Many<br />

additional options may be configured through CLI <strong>com</strong>mands only. For <strong>com</strong>plete<br />

descriptions and examples of how to use CLI <strong>com</strong>mands to configure RIP settings, see the<br />

“router” chapter of the <strong>FortiGate</strong> CLI Reference.<br />

When RIP is enabled, the <strong>FortiGate</strong> unit broadcasts requests for RIP updates<br />

from each of its RIP-enabled interfaces. Neighboring routers respond with<br />

information from their routing tables. The <strong>FortiGate</strong> unit adds routes from<br />

neighbors to its own routing table only if those routes are not already recorded in<br />

the routing table. When a route already exists in the routing table, the <strong>FortiGate</strong><br />

unit <strong>com</strong>pares the advertised route to the recorded route and chooses the shortest<br />

route for the routing table.<br />

RIP uses hop count as the metric for choosing the best route. A hop count of 1<br />

represents a network that is connected directly to the <strong>FortiGate</strong> unit, while a hop<br />

count of 16 represents a network that the <strong>FortiGate</strong> unit cannot reach. Each<br />

network that a packet travels through to reach its destination usually counts as<br />

one hop. When the <strong>FortiGate</strong> unit <strong>com</strong>pares two routes to the same destination,<br />

the route having the lowest hop count is added to the routing table.<br />

Similarly, when RIP is enabled on an interface, the <strong>FortiGate</strong> unit sends RIP<br />

responses to neighboring routers on a regular basis. The updates provide<br />

information about the routes in the <strong>FortiGate</strong> routing table, subject to the rules that<br />

you specify for advertising those routes. You can specify how often the <strong>FortiGate</strong><br />

unit sends updates, how long a route can be kept in the <strong>FortiGate</strong> routing table<br />

without being updated, and for routes that are not updated regularly, how long the<br />

<strong>FortiGate</strong> unit advertises the route as unreachable before it is removed from the<br />

<strong>FortiGate</strong> routing table.<br />

Viewing and editing basic RIP settings<br />

When you configure RIP settings, you have to specify the networks that are<br />

running RIP and specify any additional settings needed to adjust RIP operation on<br />

the <strong>FortiGate</strong> interfaces that are connected to the RIP-enabled network.<br />

To configure basic settings for a <strong>FortiGate</strong> unit connected to a RIP network, go to<br />

Router > Dynamic > RIP. To edit the operating parameters of a RIP-enabled<br />

interface, go to Router > Dynamic > RIP and select the Edit icon in the row that<br />

corresponds to the RIP-enabled interface.<br />

Figure 152 shows the basic RIP settings on a <strong>FortiGate</strong> unit that has interfaces<br />

named “dmz” and “external”. The names of the interfaces on your <strong>FortiGate</strong> unit<br />

may be different.<br />

<strong>FortiGate</strong> Version 3.0 MR5 <strong>Administration</strong> <strong>Guide</strong><br />

244 01-30005-0203-20070830

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!