Download InfiNet Wireless. OS WANFleX User Manual

InfiNet Wireless
WANFleX OS User Manual
In this configuration the router will announce a route formed from the connected
routes of the system routing table. With this, if a destination for this route is
192.168.200.0/24 network the formed route will have metric 7, any other
destination will not lead to route announcing it.
Attention!!! For the interface to use the route-map which we have created before
one have to use command route-map in the config-router mode:
route-map WORD (in|out) IFNAME
where WORD – name of the road-map which we have created before.
Authentication. Identity check
In order to prevent an unauthorized connection of the routers to RIP system, the
system has an identity check for protocol’s packets. Currently the router has two
different options for identity check (authentication):
•
Password authentication. Simple password authentication is
vulnerable for passive attacks (sniffing) because broadcasting is used and
the packet has a password in an explicit form.
•
Cryptographic authentication. Key is used while generation and
check of message-digest signatures. Digital signature is built based on MD5
algorithm. As a secret key is never send over the network in a clear form,
this gives a protection from passive attacks.
By default, the router does not have any authentication (null-authentication).
Authentication can be configured individually for each interface using the
following commands in config-if mode:
1. Password authentication:
authentication mode text
authentication string LINE
where LINE – password, less than 16 symbols.
2. Cryptographic authentication:
authentication mode md5
authentication key-chain LINE
where LINE – name of the secret MD5 key
To configure the key which name is specified in LINE parameter use
command in config mode:
RIP(config)# key chain WORD
RIP(config-keychain)# key <0-2147483647>
RIP(config-keychain-key)# key-string LINE
where
WORD – key chain name
<0-2147483647> - key ID
LINE – secret md5 key
Copyright © 2004-2012 by InfiNet Wireless
122