I. Overview:Dynamic Routing Protocol, except for rip v1, which cannot be configured for authentication, other routing protocols can be configured for authentication. There are two authentication methods: plaintext authentication and MD5 authentication,
Reference: http://blog.sina.com.cn/s/blog_3e5d70910100mxzz.html
Ii. test ideas and conclusions:
A. Ideas:① Configure Dynamic Route authentication in different ways-including routes and routers, routers and firewalls, plaintext authentication and MD5 authentication ② capture packets to determine whether the authentication information is a protocol key-ID
B. Conclusion:
Iii. Test topology:650) this. width = 650; "src =" http://www.bkjia.com/uploads/allimg/131227/0942151Q1-0.jpg "title =" tupu. JPG "alt =" 224722527.jpg"/>
4. Basic Configuration:
A. FW1:Interface Ethernet0
Nameif Outside
Security-level 0
Ip address 202.100.1.1 255.255.255.0
No shut
Interface Ethernet1
Nameif Inside
Security-level 100
Ip address 192.168.1.1 255.255.255.0 no shut
B. R2:Interface Loopback0
Ip address 2.2.2.2 255.255.255.0
Interface FastEthernet0/0 ip address 192.168.1.2 255.255.255.0
No shutinterface FastEthernet0/1
Ip address 10.1.1.2 255.255.255.0 no shut
C. R3:Interface Loopback0
Ip address 3.3.3.3 255.255.255.0
Interface FastEthernet0/0
Ip address 10.1.1.3 255.255.255.0
No shut
V. RIP plaintext authentication:
A. Routers and Routers:
① R2:Key chain ripkey
Key 1
Key-string cisco
Key 2
Key-string CISCOrouter rip
Version 2
Network 2.0.0.0
Network 10.0.0.0
No auto-summary
② R3:Key chain ripkey
Key 1
Key-string CISCO key 2
Key-string ciscorouter rip
Version 2
Network 3.0.0.0
Network 10.0.0.0
No auto-summary
③ Packet capture:
R2:650) this. width = 650; "src =" http://www.bkjia.com/uploads/allimg/131227/094215K20-1.jpg "title =" R2RIP. JPG "alt =" 224842484.jpg"/>
R3:
650) this. width = 650; "src =" http://www.bkjia.com/uploads/allimg/131227/09421512X-2.jpg "title =" R3RIP. JPG "alt =" 224904763.jpg"/>
This article is from the "httpyuntianjxxll. spac..." blog, please be sure to keep this source http://333234.blog.51cto.com/323234/1300280