User's Manual

419
Notes:
Regarding the safety, please don’t use Plaintext Authentication in the groups of RIP, because the
unencrypted authentication key would be sent to each update of the RIP-2. If the safety is not a
big question, (in case that it is guaranteed that the wrongly configured host can not take part in the
route) the Plaintext Authentication can be used.
To configure the RIP Plaintext Authentication, the following steps should be taken under interface configuration
mode:
Command Purpose
ip rip authentication simple
Activate the RIP Authentication.
ip rip password
[string] Configure the Plaintext Authentication key for the
interface.
In order to configure the MD5 Authentication, the steps below should be taken under interface configuration
mode:
Command Purpose
ip rip authentication
message-digest Activate the RIP MD5 Authentication
ip rip message-digest-key
[key-ID]
md5
[key]
Configure the MD5 Authentication key for the
interface
58.3.7 Activating the ‘Passive’ and ‘Deaf’ of the Interface
By default the interface covered by RIP can forward and receive the routing update by flexibly applying the RIP
protocol.
To configure the passive and deaf status of the interface in the interface configuration mode:
Command Purpose
Ip rip passive
The interface will not forward the rip protocol
grouping.
ip rip deaf
The interface does not receive rip protocol
grouping.
58.3.8 Activating RIP Authentication
RIP-1 does not support authentication. If the grouping of RIP-2 is forwarding and receiving, the
RIP authentication can be activated on the interface.
Multiple authentication modes are supported on RIP activated interface: plaintext authentication, MD5
authentication, dynamic authentication (md5 and sha1). Each RIP-2 grouping uses plaintext authentication by
default.
Note:
If considering safety, do not use the plaintext authentication in RIP grouping, this is because the authentication
key without encryption is forwarded to each RIP-2 grouping. If safety is not considered (for instance, the host
with error configuration cannot participate in the route), the plaintext authentication is available.
To configure RIP plaintext authentication, do as follows in the interface configuration mode: