Configuring EIGRP Authentication参考.ppt

Configuring EIGRP Configuring EIGRP Authentication Router Authentication Many routing protocols support authentication such that a router authenticates the source of each routing update packet that it receives. Simple password authentication is supported by: IS-IS OSPF RIPv2 MD5 authentication is supported by: OSPF RIPv2 BGP EIGRP Simple Password vs. MD5 Authentication Simple password authentication: Router sends packet and key. Neighbor checks whether key matches its key. Process not secure. MD5 authentication: Configure a key (password) and key ID; router generates a message digest, or hash, of the key, key ID and message. Message digest is sent with packet; key is not sent. Process OS secure. EIGRP MD5 Authentication EIGRP supports MD5 authentication. Router generates and checks every EIGRP packet. Router authenticates the source of each routing update packet that it receives. Configure a key (password) and key ID; each participating neighbor must have same key configured. MD5 Authentication EIGRP MD5 authentication: Router generates a message digest, or hash, of the key, key ID, and message. EIGRP allows keys to be managed using key chains. Specify key ID (number), key, and lifetime of key. First valid activated key, in order of key numbers, is used. Configuring EIGRP MD5 Authentication Configuring EIGRP MD5 Authentication (Cont.) Configuring EIGRP MD5 Authentication (Cont.) Example MD5 Authentication Configuration R1 Configuration for MD5 Authentication R2 Configuration for MD5 Authentication Verifying MD5 Authentication Troubleshooting MD5 Authentication Troubleshooting MD5 Authentication Problem Summary There are two types of router authentication: simple password and MD5. When EIGRP authentication is configured, the router generates and checks every EIGRP packet and authenticates the source of each routing update packet that it receives. EIGRP supports MD5 authentication. To configure MD5 authentication, use the ip authentication mode eigrp and ip aut