Operation Manual – IPv4 RoutingH3C S5500-EI Series Ethernet Switches Chapter 2 RIP Configuration2-152.4.5 Enabling Source IP Address Check on Incoming RIP UpdatesYou can enable source IP address check on incoming RIP updates.For a message received on an Ethernet interface, RIP compares the source IP addressof the message with the IP address of the interface. If they are not in the same networksegment, RIP discards the message.For a message received on a serial interface, RIP checks whether the source addressof the message is the IP address of the peer interface. If not, RIP discards themessage.Follow these steps to enable source IP address check on incoming RIP updates:To do… Use the command… RemarksEnter system view system-view ––Enter RIP view rip [ process-id ] ––Enable source IP address checkon incoming RIP messages validate-source-address OptionalEnabled by defaultNote:The source IP address check feature should be disabled if a RIP neighbor is not directlyconnected.2.4.6 Configuring RIPv2 Message AuthenticationRIPv2 supports two authentication modes: plain text and MD5.In plain text authentication, the authentication information is sent with the RIP message,which however cannot meet high security needs.Follow these steps to configure RIPv2 message authentication:To do… Use the command… RemarksEnter system view system-view ––Enter interface view interface interface-typeinterface-number ––Configure RIPv2authenticationrip authentication-mode { md5{ rfc2082 key-string key-id | rfc2453key-string } | simple password }Required
