Cisco PIX 525 Especificaciones descargar pdf (Pagina 98)

8-16

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 8 Configuring IP Routing and DHCP Services

Configuring RIP

This section describes how to configure RIP. This section includes the following topics:

• RIP Overview, page 8-16

• Enabling RIP, page 8-16

RIP Overview

Devices that support RIP send routing-update messages at regular intervals and when the network

topology changes. These RIP packets contain information about the networks that the devices can reach,

as well as the number of routers or gateways that a packet must travel through to reach the destination

address. RIP generates more traffic than OSPF, but is easier to configure initially.

RIP has advantages over static routes because the initial configuration is simple, and you do not need to

update the configuration when the topology changes. The disadvantage to RIP is that there is more

network and processing overhead than static routing.

The security appliance uses a limited version of RIP; it does not send out RIP updates that identify the

networks that the security appliance can reach. However, you can enable one or both of the following

methods:

• Passive RIP—The security appliance listens for RIP updates but does not send any updates about its

networks out of the interface.

Passive RIP allows the security appliance to learn about networks to which it is not directly

connected.

• Default Route Updates—Instead of sending normal RIP updates that describe all the networks

reachable through the security appliance, the security appliance sends a default route to participating

devices that identifies the security appliance as the default gateway.

You can use the default route option with passive RIP, or alone. You might use the default route

option alone if you use static routes on the security appliance, but do not want to configure static

routes on downstream routers. Typically, you would not enable the default route option on the

outside interface, because the security appliance is not typically the default gateway for the upstream

router.

Enabling RIP

To enable RIP on an interface, enter the following command:

hostname(config)# rip

interface_name

{default | passive} [version {1 | 2

[authentication {text | md5}

key key_id

]}]

You can enable both the passive and default modes of RIP on an interface by entering the rip command

twice, one time for each method. For example, enter the following commands:

hostname(config)# rip inside default version 2 authentication md5 scorpius 1

hostname(config)# rip inside passive version 2 authentication md5 scorpius 1

If you want to enable passive RIP on all interfaces, but only enable default routes on the inside interface,

enter the following commands:

hostname(config)# rip inside default version 2 authentication md5 scorpius 1

hostname(config)# rip inside passive version 2 authentication md5 scorpius 1

hostname(config)# rip outside passive version 2 authentication md5 scorpius 1

1 2 ... 93 94 95 96 97 98 99 100 101 102 103 ... 603 604

Comentarios a estos manuales

Sin comentarios

Cisco PIX 525 Especificaciones Pagina 98

Comentarios a estos manuales