Cisco Systems ASA5515K9, ASA 5500 - page 490

25-10
Cisco ASA 5500 Series Configuration Guide using the CLI
Chapter25 Configuring RIP
Customizing RIP
RIP route authentication provides MD5 authentication of routing updates from the RIP routing protocol.
The MD5 keyed digest in each RIP packet prevents the introduction of unauthorized or false routing
messages from unapproved sources.
RIP route authentication is configured on a per-interface basis. All RIP neighbors on interfaces
configured for RIP message authentication must be configured with the same authentication mode and
key for adjacencies to be established.
Note Before you can enable RIP route authentication, you must enable RIP.
To enable RIP authentication on an interface, perform the following steps:
Detailed Steps
. Restarting the RIP Process
To remove the entire RIP configuration, enter the following command:
Command Purpose
Step1 router rip as-num
Example:
hostname(config)# router rip 2
Creates the RIP routing process and enters router configuration
mode for this RIP process.
The as-num argument is the autonomous system number of the
RIP routing process.
Step2 interface phy_if
Example:
hostname(config)# interface phy_if
Enters interface configuration mode for the interface on which
you are configuring RIP message authentication.
Step3 rip authentication mode {text | md5}
Example:
hostname(config-if)# rip authentication
mode md5
Sets the authentication mode. By default, text authentication is
used. We recommend that you use MD5 authentication.
Step4 rip authentication key key key-id key-id
Example:
hostname(config-if)# rip authentication
key cisco key-id 200
Configures the authentication key used by the MD5 algorithm.
The key argument can include up to 16 characters.
The key-id argument is a number from 0 to 255.
Command Purpose
clear rip pid {process | redistribution |
counters [neighbor [neighbor-interface]
[neighbor-id]]}
Example:
hostname(config)# clear rip
Removes the entire RIP configuration that you have enabled. After the
configuration is cleared, you must reconfigure RIP again using the router
rip command.