BSCI Exam Tutorial

De BISAWiki

When you earned your CCNA, you believed you learned anything there is to know about RIP. Close, but not very! There are some further facts you want to know to pass the BSCI exam and get a single step closer to the CCNP exam, and one of those entails RIP update packet authentication.

You happen to be familiar with some advantages of employing RIPv2 more than RIPv1, assistance for VLSM chief among them. But one advantage that you happen to be not introduced to in your CCNA scientific studies is the capacity to configure routing update packet authentication.

You have two options, clear text and MD5. Clear text is just that - a clear text password that is visible by any person who can choose a packet off the wire. Learn further on our favorite partner website - Click here: tyler collins profile. If you are going to go to the trouble of configuring update authentication, you really should use MD5. The MD stands for "Message Digest", and this is the algorithm that generates the hash value for the password that will be contained in the update packets.

Not only should the routers agree on the password, they must agree on the authentication method. If one router sends an MD5-hashed password to an additional router that is configured for clear-text authentication, the update will not be accepted. We found out about homepage by searching books in the library. debug ip rip is a fantastic command for troubleshooting authenticated updates.

R1, R2, and R3 are running RIP more than a frame relay cloud. Identify further on this affiliated article directory by visiting twitter. Right here is how RIP authentication would be configured on these 3 routers.

R1#conf t

R1(config)#essential chain RIP

< The key chain can have any name.>

R1(config-keychain)#important 1

< Key chains can have multiple keys. Number them carefully when using multiples.>

R1(config-keychain-key)#important-string CISCO

< This is the text string the key will use for authentication.>

R1(config)#int s0

R1(config-if)#ip rip authentication mode text

< The interface will use clear-text mode.>

R1(config-if)#ip rip authentication crucial-chain RIP

< The interface is using key chain RIP, configured earlier.>

R2#conf t

R2(config)#key chain RIP

R2(config-keychain)#key 1

R2(config-keychain-important)#important-string CISCO

R2(config)#int s0.123

R2(config-subif)#ip rip authentication mode text

R2(config-subif)#ip rip authentication important-chain RIP

R3#conf t

R3(config)#key chain RIP

R3(config-keychain)#essential 1

R3(config-keychain-crucial)#essential-string CISCO

R3(config)#int s0.31

R3(config-subif)#ip rip authentication mode text

R3(config-subif)#ip rip authentication key-chain RIP

To use MD5 authentication rather than clear-text, just replace the word "text" in the ip rip authentication mode command with md5.

Here's what a effectively authentication RIPv2 packet looks like, courtesy of debug ip rip. Clear-text authentication is in impact and the password is "cisco".

3d04h: RIP: received packet with text authentication cisco

3d04h: RIP: received v2 update from 150.1.1.three on Ethernet0

3d04h: 100.../eight by means of ... in 1 hops

3d04h: 150.1.two./24 by way of ... in 1 hops

Here's what it looks like when the remote device is set for MD5 authentication and the regional router is set for clear-text. You are going to also see this message if the password itself is incorrect.

3d04h: RIP: ignored v2 packet from 150.1.1.three (invalid authentication)

"Debug ip rip" may be a simple command as compared to the debugs for other protocols. Get further about Free Myspace Backgrounds Can Do Wonders by navigating to our grand web resource. but it really is also a very powerful debug. Start using debugs as early as possible in your Cisco studies to learn how router commands genuinely operate!.