Understanding the network.pdf - Back to Home

In situations where you have networks that consist of nonbroadcast media, or
where it is desirable only to exchange routing updates between two hosts connected
over broadcast-supported media, IOS provides the router subprocess command
. The ISP provider for the Albany network uses Frame
Relay over HDLC, so a neighbor must be specified:
asbr-a1(config-router)#neighbor 12.14.116.66
Configuring Authentication
When you employ any routing protocol in a publicly accessible environment, it is
wise to use authentication to verify with whom you are exchanging route
advertisements. RIP version 2 supports clear text and MD5 authentication. Both
routers must exchange the same password regardless of the authentication method.
To use authentication, each router needs to create a and key and then
enable authentication on the appropriate interfaces. To set up a key chain, use the
following:
asbr-a1(config)#key chain test
asbr-a1(config-keychain)#key 1
asbr-a1(config-keychain)#key-string atestkey
asbr-a1(config-keychain)#accept-lifetime 12:00:00 31 dec 1998 infinite
asbr-a1(config-keychain)#send-lifetime 12:00:00 31 dec 1998 infinite
The example above creates a key-chain called "test" and a single key with the
password "atestkey." A key chain containing a key with "atestkey" as a password
must also be created on all routers that asbr-a1 wishes to exchange route
announcements. After the keys are in place, the interface is configured:
asbr-a1(config)# interface s1
asbr-a1(config-if)#ip rip authentication key-chain test
asbr-a1(config-if)#ip rip authentication mode md5
NOTE