在PIX启用rip md5认证

| No Comments | No TrackBacks

其实大多数情况下不会用防火墙跑动态路由协议的,动态路由协议本身严格的说就是一种不确定因素,所欧的不确定因素都是有可能影响最终的安全的。从技术的角度上看,PIX是可以支持动态路由协议的,如果一定要去支持的话……

在PIX 7.2上配置RIP MD5方式认证的方法很简单:
1. 启用rip协议,7.x之后的版本PIX的CLI界面和IOS的操作界面几乎一样了:
router rip
 no auto-summary
 version 2
 network  ...

2.在接口上指名要使用MD5认证:
interface Ethernet0
 nameif 名称
 security-level 某个代表安全级别的数字
 ip address ...
 rip authentication mode md5
 rip authentication key 预先约定的key-string key_id 某个数字

其实和路由器上的配置基本上一样,区别在于:
1.在PIX上不是单独配置的key-chain
2.PIX是接口下的命令直接写rip,在路由器上需要写ip rip...

No TrackBacks

TrackBack URL: http://www.liukang.com/cgi-bin/mt/mt-tb.cgi/590

Leave a comment

Google ADs

ClustrMaps

Archives

Pages

OpenID accepted here Learn more about OpenID
Powered by Movable Type 4.37
Creative Commons License
This blog is licensed under a Creative Commons License.

January 2012

Sun Mon Tue Wed Thu Fri Sat
1 2 3 4 5 6 7
8 9 10 11 12 13 14
15 16 17 18 19 20 21
22 23 24 25 26 27 28
29 30 31        

About this Entry

This page contains a single entry by Kang published on May 3, 2007 11:15 PM.

源在前还是目的在前 was the previous entry in this blog.

Key for my gmail account is the next entry in this blog.

Find recent content on the main index or look in the archives to find all content.

Google ADs