一.概述: 動態路由協議,除了rip v1不能配置認證之外,其他的路由協議都能配置認證,認證方式有兩種,一種是明文方式的認證,一種是MD5認證,
參考鏈接:http://blog.sina.com.cn/s/blog_3e5d70910100mxzz.html
二.測試思路和結論:
A.思路:
①配置不同方式的動態路由認證
----包括路由和路由器,路由器和防火墻,明文認證和MD5認證
②通過抓包,確定認證信息是否協議key-ID
B.結論:
三.測試拓撲:
四.基本配置:
A.FW1:
interface Ethernet0
nameif Outside
security-level 0
ip address 202.100.1.1 255.255.255.0
no shut
interface Ethernet1
nameif Inside
security-level 100
ip address 192.168.1.1 255.255.255.0
no shut
B.R2:
interface Loopback0
ip address 2.2.2.2 255.255.255.0
interface FastEthernet0/0
ip address 192.168.1.2 255.255.255.0
no shut
interface FastEthernet0/1
ip address 10.1.1.2 255.255.255.0 no shut
C.R3:
interface Loopback0
ip address 3.3.3.3 255.255.255.0
interface FastEthernet0/0
ip address 10.1.1.3 255.255.255.0
no shut
五.RIP明文認證:
A.路由器與路由器:
①R2:
key chain ripkey
key 1
key-string cisco
key 2
key-string CISCO
router rip
version 2
network 2.0.0.0
network 10.0.0.0
no auto-summary
②R3:
key chain ripkey
key 1
key-string CISCO
key 2
key-string cisco
router rip
version 2
network 3.0.0.0
network 10.0.0.0
no auto-summary
③抓包:
R2:
R3: