User's Manual

Part # 34357-MNL Rev.03 SPEEDLAN 9200 User Guide
3-34
• RIP 1 and RIP 2: Select to enable RIP 1 and RIP 2.
• Receive: This is from the incoming location.
• Send: This is from the outgoing location.
Receive and Send options:
• Global: Click this option to receive/send RIP 1, RIP 2 or RIP 1 & 2 throughout
the entire network.
• RIP 1: Click this option to receive/send RIP-1 from/to the interface.
• RIP 2: Click this option to receive/send RIP-2 from/to the interface.
• RIP 1 and 2: Click this option to receive/send RIP 1 & 2 from/to the interface.
Authentication on RIP-2 MD5
•
None: Select this option when authentication is not needed.
• Plain Text: Select this option to enable authentication (security) for legacy
systems.
• MD5 key: Select this option to enable RIP-2 MD5 authentication for security.
It is recommended that you select this option.
Note:
Note:Note:
Note: Both the RIP-2 MD5 authentication key and Plain Text entries are restricted to
digits or alphabetic characters. Both are entered like a password, but the characters
are visible. The minimum amount of characters entered is 4 and the maximum is 16.
What is RIP-2 MD5 Authentication?
Both RIP-1 and RIP-2 are vulnerable to hostile messages and attacks. This is because
broadcast (RIPv1) or multicast (RIPv2) packets alone lack authentication. When RIP-2 is
used with an authentication algorithm, such as MD5, network security is increased
since the destination receiving the RIP packet knows that it was generated by a reliable
source (i.e., the actual sender of the packet).
RIP-2 MD5 authentication transmits the output of the authentication algorithm rather
than the RIP-2 authentication key. Therefore, the RIP-2 authentication key is never
transmitted over the network and cannot be heard by other routers. This means a router
can determine exactly who sent the message and not assume which router sent it.