实验十八、RIP-2 邻居认证配置

一、 实验目的

1. 掌握邻居认证的配置

2. 理解RIP-2 与RIP-1 的不同

二、 应用环境

1. 为避免外部路由器得到路由表，保证一定安全性，采用认证

三、 实验设备

1. DCR-1751 两台

2. CR-V35FC 一条

3. CR-V35MT 一条

四、 实验拓扑

clip_image002

五、 实验要求

配置表

ROUTER-A ROUTER-B

S1/1 （DCE ） 192.168.1.1/24 S1/0 (DTE) 192.168.1.2/24

F0/0 192.168.0.1 F0/0 192.169.2.1/24

六、 实验步骤

第一步：按照实验三和上表，配置路由器的所有接口地址并测试连通性

第二步：配置路由器B

Router-B#conf

Router-B_config#router rip

Router-B_config_rip#version 2 ！配置为版本2

Router-B_config_rip#network 192.168.1.0 Router-B_config_rip#network 192.168.2.0

Router-B_config_rip#exit

Router-B_config#int s1/0 ！进入与A 相连的接口

Router-B_config_s1/0#ip rip authentication simple ！配置以明文方式验证

Router-B_config_s1/0#ip rip password digitalchina ！配置密码为digitalchina

Router-B_config_s1/0#^Z

第三步：查看B 的配置

Router-B#sh run

Building configuration...

Current configuration:

!

!version 1.3.2E

service timestamps log date

service timestamps debug date

no service password-encryption

!

hostname Router-B

!

!

interface FastEthernet0/0

ip address 192.168.2.1 255.255.255.0

no ip directed-broadcast

!

interface Serial1/0

ip address 192.168.1.2 255.255.255.0

no ip directed-broadcast

ip rip authentication simple

ip rip password digitalchina

!

interface Async0/0

no ip address

no ip directed-broadcast

!

!

router rip

version 2

network 192.168.2.0

network 192.168.1.0

!

!

第四步：配置路由器A （不配认证）并查看路由表Router-A#conf

Router-A_config#router rip

Router-A_config_rip#version 2

Router-A_config_rip#network 192.168.0.0

Router-A_config_rip#network 192.168.1.0

Router-A_config_rip#^Z

查看路由表

Router-A#sh ip route

Codes: C - connected, S - static, R - RIP, B - BGP, BC - BGP connected

D - DEIGRP, DEX - external DEIGRP, O - OSPF, OIA - OSPF inter area

ON1 - OSPF NSSA external type 1, ON2 - OSPF NSSA external type 2

OE1 - OSPF external type 1, OE2 - OSPF external type 2

DHCP - DHCP type

VRF ID: 0

C 192.168.0.0/24 is directly connected, FastEthernet0/0 ！没有学习到路由

C 192.168.1.0/24 is directly connected, Serial1/1

第五步：配置A 的认证

Router-A_config#int s1/1 ！进入与B 相连的接口

Router-A_config_s1/1#ip rip authentication simple

Router-A_config_s1/1#ip rip password digitalchina

第六步：再次查看路由表

Router-A#sh ip route

Codes: C - connected, S - static, R - RIP, B - BGP, BC - BGP connected

D - DEIGRP, DEX - external DEIGRP, O - OSPF, OIA - OSPF inter area

ON1 - OSPF NSSA external type 1, ON2 - OSPF NSSA external type 2

OE1 - OSPF external type 1, OE2 - OSPF external type 2

DHCP - DHCP type

VRF ID: 0

C 192.168.0.0/24 is directly connected, FastEthernet0/0

C 192.168.1.0/24 is directly connected, Serial1/1

R 192.168.2.0/24 [120,1] via 192.168.1.2(on Serial1/1)

Router-B#show ip route

Codes: C - connected, S - static, R - RIP, B - BGP, BC - BGP connected

D - DEIGRP, DEX - external DEIGRP, O - OSPF, OIA - OSPF inter area

ON1 - OSPF NSSA external type 1, ON2 - OSPF NSSA external type 2

OE1 - OSPF external type 1, OE2 - OSPF external type 2 DHCP - DHCP type

VRF ID: 0

R 192.168.0.0/24 [120,1] via 192.168.1.1(on Serial1/0)

C 192.168.1.0/24 is directly connected, Serial1/0

C 192.168.2.0/24 is directly connected, FastEthernet0/0