User Manual

410
Users Manual of XGS-6350-24X4C
authentication. Each RIP-2 packet uses the plain authentication by default.
For the purpose of security, do not use the plain authentication in the RIP packet
because the unencrypted authentication PIN is sent to each RIP-2 packet. You can
use the plain authentication without security concern.
Run the following commands in VLAN configuration mode to configure the RIP plain text authentication.
Command Purpose
ip rip authentication simple
Configures the interface to use the
plain authentication.
ip rip password [string]
Configures the PIN of the plain
authentication.
Run the following commands in interface configuration mode to configure the MD5 authentication of the RIP:
Command Purpose
ip rip authentication message-digest
Configures the interface to use the
MD5 authentication.
ip rip message-digest-key [key-ID]
md5 [key]
Configures the PIN and ID of the md5
authentication.
45.1.3.7 Forbidding Routing summary
RIP-2 supports the automatic routing summary by default. RIP-2 routes are collected when passing the
boundaries of different networks. The RIP-1 automatic collection function is always in positive state.
If there is a separated subnet, you need to forbid the routing summary function to declare the subnet. If the
routing summary function is disabled, the switch is to send the routing information of the subnet and the host
when passing through the boundaries of different networks. Run the following command in switch
configuration mode to disable the automatic routing summary function.
Command Purpose
no auto-summary
Disables the automatic routing
summary function.
45.1.3.8 Forbidding the Authentication of the Source IP Address
By default, the switch authenticates the source IP address in the RIP routing update information. If the
address is illegal, the routing update is dropped.
When a switch wants to receive its own update information and the network and neighbor are not configured
on the switch of the receiving side, you can forbid the authentication of the source IP address. Normally, you
are not recommended to use the command.Run the following command in switch configuration mode to forbid
authenticating the source IP address of the incoming routing information:
Command Purpose