| Casual Articles |
Hubs | Hubbers | Topics | Request |
| #1 in Business | Subscribe Email Print |
|
You are here: Home > Computers and Technology > Certification Tests > Cisco CCNP / BSCI Exam Tutorial: RIP Update Packet Authentication |
|
Casual Articles - Cisco CCNP / BSCI Exam Tutorial: RIP Update Packet Authentication
About Ending Competition p>1. Why should I not compete with others?The very concept of “competition” is fear based. Somehow you are telling yourself that you have to “beat” the competition, or “take” a certain share of the marketplace, or “win over” a certain person. In reality, there is no other exactly like you, and there is no other person that can contribute to our world in EXACTLY the same way you can.Competition exists solely in your mind, and i R3(config)#int s0.31 R3(config-subif)#ip rip authentication mode text R3(config-subif)#ip rip authentication key-chain RIP To use MD5 authentication rather than clear-text, simply replace the word "text" in the ip rip authentication mode command with md5. Here's what a successfully authentication RIPv2 packet looks like, courtesy of debug ip rip. Clear-text authentication is in effect and the password is "cisco". 3d04h: RIP: received packet with text authentication cisco 3d04h: RIP: received v2 update from 150.1.1.3 on Ethernet0 3d04h: 10 HIPAA and Document Imaging When you earned your CCNA, you thought you learned everything there is to know about RIP. Close, but not quite! There are some additional details you need to know to pass the BSCI exam and get one step closer to the CCNP exam, and one of those involves RIP update packet authentication.The Health Insurance Portability and Accountability Act (HIPAA) was enacted in 1996 and has made quite an impression on the world of digital document imaging and forms processing. Any company as a covered entity of HIPAA needs to take certain precautions when outsourcing any aspect of their operations that deal with personnel health information (PHI.) There are two main components to HIPAA that deal directly with the outsourcing of docume You're familiar with some advantages of using RIPv2 over RIPv1, support for VLSM chief among them. But one advantage that you're not introduced to in your CCNA studies is the ability to configure routing update packet authentication. You have two options, clear text and MD5. Clear text is just that - a clear text password that is visible by anyone who can pick a packet off the wire. If you're going to go to the trouble of configuring update authentication, you should use MD5. The MD stands for "Message Digest", and this is the algorithm that produces the hash value for the password that will be contained in the update packets. Not only must the routers agree on the password, they must agree on the authentication method. If one router sends an MD5-hashed password to another router that is configured for clear-text authentication, the update will not be accepted. debug ip rip is a great command for troubleshooting authenticated updates. R1, R2, and R3 are running RIP over a frame relay cloud. Here is how RIP authentication would be configured on these three routers. R1#conf t R1(config)#key chain RIP < The key chain can have any name. > R1(config-keychain)#key 1 < Key chains can have multiple keys. Number them carefully when using multiples. > R1(config-keychain-key)#key-string CISCO < This is the text string the key will use for authentication. > R1(config)#int s0 R1(config-if)#ip rip authentication mode text < The interface will use clear-text mode. > R1(config-if)#ip rip authentication key-chain RIP < The interface is using key chain RIP, configured earlier. > R2#conf t R2(config)#key chain RIP R2(config-keychain)#key 1 R2(config-keychain-key)#key-string CISCO R2(config)#int s0.123 R2(config-subif)#ip rip authentication mode text R2(config-subif)#ip rip authentication key-chain RIP R3#conf t R3(config)#key chain RIP R3(config-keychain)#key 1 R3(config-keychain-key)#key-string CISCO R3(config)#int s0.31 R3(config-subif)#ip rip authentication mode text R3(config-subif)#ip rip authentication key-chain RIP To use MD5 authentication rather than clear-text, simply replace the word "text" in the ip rip authentication mode command with md5. Here's what a successfully authentication RIPv2 packet looks like, courtesy of debug ip rip. Clear-text authentication is in effect and the password is "cisco". 3d04h: RIP: received packet with text authentication cisco 3d04h: RIP: received v2 update from 150.1.1.3 on Ethernet0 3d04h: 100 How Not To Purchase Tickets for a Concert! st that - a clear text password that is visible by anyone who can pick a packet off the wire. If you're going to go to the trouble of configuring update authentication, you should use MD5. The MD stands for "Message Digest", and this is the algorithm that produces the hash value for the password that will be contained in the update packets.Quite a few years ago I read a small ad in the Sunday morning Times Picayune News Paper. The ad said that Frank Sinatra would be appearing at the University of New Orleans Arena for one performance only on a certain date about a month away.I thought to myself, I am going to go to the D. H. Holmes Department Store first thing Monday morning where Ticket Masters was located and purchase two tickets. I am going to be the first one th Not only must the routers agree on the password, they must agree on the authentication method. If one router sends an MD5-hashed password to another router that is configured for clear-text authentication, the update will not be accepted. debug ip rip is a great command for troubleshooting authenticated updates. R1, R2, and R3 are running RIP over a frame relay cloud. Here is how RIP authentication would be configured on these three routers. R1#conf t R1(config)#key chain RIP < The key chain can have any name. > R1(config-keychain)#key 1 < Key chains can have multiple keys. Number them carefully when using multiples. > R1(config-keychain-key)#key-string CISCO < This is the text string the key will use for authentication. > R1(config)#int s0 R1(config-if)#ip rip authentication mode text < The interface will use clear-text mode. > R1(config-if)#ip rip authentication key-chain RIP < The interface is using key chain RIP, configured earlier. > R2#conf t R2(config)#key chain RIP R2(config-keychain)#key 1 R2(config-keychain-key)#key-string CISCO R2(config)#int s0.123 R2(config-subif)#ip rip authentication mode text R2(config-subif)#ip rip authentication key-chain RIP R3#conf t R3(config)#key chain RIP R3(config-keychain)#key 1 R3(config-keychain-key)#key-string CISCO R3(config)#int s0.31 R3(config-subif)#ip rip authentication mode text R3(config-subif)#ip rip authentication key-chain RIP To use MD5 authentication rather than clear-text, simply replace the word "text" in the ip rip authentication mode command with md5. Here's what a successfully authentication RIPv2 packet looks like, courtesy of debug ip rip. Clear-text authentication is in effect and the password is "cisco". 3d04h: RIP: received packet with text authentication cisco 3d04h: RIP: received v2 update from 150.1.1.3 on Ethernet0 3d04h: 10 How Multiple Server Hosting impacts your website's uptime g ip rip is a great command for troubleshooting authenticated updates.This article describes the technology behind multiple server hosting and how you may utilize it to maximize your site's security and uptimeHosting of web sites has essentially become a commodity. There is very little distinguishing one hosting company from the next. Core plans and features are the same and price is no longer a true determining feature. In fact, choosing a host based on the cheapest price can be more expensive in th R1, R2, and R3 are running RIP over a frame relay cloud. Here is how RIP authentication would be configured on these three routers. R1#conf t R1(config)#key chain RIP < The key chain can have any name. > R1(config-keychain)#key 1 < Key chains can have multiple keys. Number them carefully when using multiples. > R1(config-keychain-key)#key-string CISCO < This is the text string the key will use for authentication. > R1(config)#int s0 R1(config-if)#ip rip authentication mode text < The interface will use clear-text mode. > R1(config-if)#ip rip authentication key-chain RIP < The interface is using key chain RIP, configured earlier. > R2#conf t R2(config)#key chain RIP R2(config-keychain)#key 1 R2(config-keychain-key)#key-string CISCO R2(config)#int s0.123 R2(config-subif)#ip rip authentication mode text R2(config-subif)#ip rip authentication key-chain RIP R3#conf t R3(config)#key chain RIP R3(config-keychain)#key 1 R3(config-keychain-key)#key-string CISCO R3(config)#int s0.31 R3(config-subif)#ip rip authentication mode text R3(config-subif)#ip rip authentication key-chain RIP To use MD5 authentication rather than clear-text, simply replace the word "text" in the ip rip authentication mode command with md5. Here's what a successfully authentication RIPv2 packet looks like, courtesy of debug ip rip. Clear-text authentication is in effect and the password is "cisco". 3d04h: RIP: received packet with text authentication cisco 3d04h: RIP: received v2 update from 150.1.1.3 on Ethernet0 3d04h: 10 Tax Relief thentication mode textTax relief is any deduction from taxes allowed to taxpayers by federal or state tax authorities for certain expense categories. An example is allowing the deduction of interest paid on educational loans from the income tax payable. Tax relief also takes the form of full or partial tax exemptions for low- and moderate-income families. In some cases, tax relief includes releasing citizens from paying taxes immediately, particularly during c < The interface will use clear-text mode. > R1(config-if)#ip rip authentication key-chain RIP < The interface is using key chain RIP, configured earlier. > R2#conf t R2(config)#key chain RIP R2(config-keychain)#key 1 R2(config-keychain-key)#key-string CISCO R2(config)#int s0.123 R2(config-subif)#ip rip authentication mode text R2(config-subif)#ip rip authentication key-chain RIP R3#conf t R3(config)#key chain RIP R3(config-keychain)#key 1 R3(config-keychain-key)#key-string CISCO R3(config)#int s0.31 R3(config-subif)#ip rip authentication mode text R3(config-subif)#ip rip authentication key-chain RIP To use MD5 authentication rather than clear-text, simply replace the word "text" in the ip rip authentication mode command with md5. Here's what a successfully authentication RIPv2 packet looks like, courtesy of debug ip rip. Clear-text authentication is in effect and the password is "cisco". 3d04h: RIP: received packet with text authentication cisco 3d04h: RIP: received v2 update from 150.1.1.3 on Ethernet0 3d04h: 10 Credit Cards: You Can Stay in Debt Forever! p>Credit card companies are notorious for keeping people in debt. You may not realize it but chances are like most Americans if you just pay your minimum payments, it will take anywhere between 10-25 years to get out from under your debt. Recently new banking regulations were put in place and many americans now have to pay double payments. Needless to say this is making many people struggle to keep up. Credit card companies employ creativ R3(config)#int s0.31 R3(config-subif)#ip rip authentication mode text R3(config-subif)#ip rip authentication key-chain RIP To use MD5 authentication rather than clear-text, simply replace the word "text" in the ip rip authentication mode command with md5. Here's what a successfully authentication RIPv2 packet looks like, courtesy of debug ip rip. Clear-text authentication is in effect and the password is "cisco". 3d04h: RIP: received packet with text authentication cisco 3d04h: RIP: received v2 update from 150.1.1.3 on Ethernet0 3d04h: 100.0.0.0/8 via 0.0.0.0 in 1 hops 3d04h: 150.1.2.0/24 via 0.0.0.0 in 1 hops Here's what it looks like when the remote device is set for MD5 authentication and the local router is set for clear-text. You'll also see this message if the password itself is incorrect. 3d04h: RIP: ignored v2 packet from 150.1.1.3 (invalid authentication) "Debug ip rip" may be a simple command as compared to the debugs for other protocols. but it's also a very powerful debug. Start using debugs as early as possible in your Cisco studies to learn how router commands really work!
HTTP = HTML link (for blogs, profiles,phorums):
Related Articles:Gap Analysis - Peeling Back The Layers Six Golden Rules Of Pay Per Click Marketing Campaign Identity Theft - A Growing Problem That Could Leave You Devastated
|