Solved

RIP V2 MD5 authentication

Posted on 2012-03-29
10
506 Views
Last Modified: 2014-08-09
Hi, I want to implement RIP V2 MD5 authentication in an existing network. RIP V2 is up and running already. If I turn on MD5 authenticattion on a router or switch, will it lose connectivity with the rest of the network until I can turn on authentication on the rest of the network devices.
0
Comment
Question by:rajaroraus
10 Comments
 
LVL 2

Expert Comment

by:FostWare
ID: 37782777
It may seem a stupid question, why are you using RIP in particular?
0
 
LVL 13

Expert Comment

by:Sandy
ID: 37782780
no this will not loose the connectivity until unless you configured it for auth required mode.
0
 
LVL 11

Expert Comment

by:Khandakar Ashfaqur Rahman
ID: 37783101
It won't lose the connection immediately .But after you enable MD5 into router it'll generate error "Invalid Authentication".If you debug then you can see this error.
#debug ip rip
After few seconds routes will become down and it'll show : Routes are possibly down.Then  after few moments routes will be deleted by flush timers.
0
Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

 

Author Comment

by:rajaroraus
ID: 37783302
so rigan123, you're saying that it will loose connectivity?(few Seconds)?
0
 
LVL 11

Expert Comment

by:Khandakar Ashfaqur Rahman
ID: 37783575
It'll live few moments.Then after few moments it'll become down completely.Because flush timers will update "Invalid Authentication" error.Your existing routes will be deleted too.
0
 

Author Comment

by:rajaroraus
ID: 37783651
so how would you recommend doing this?
0
 
LVL 11

Accepted Solution

by:
Khandakar Ashfaqur Rahman earned 250 total points
ID: 37785085
You need to configure all the routers MD5 at the same time.At first, write down all of your router's new configuration and double check that configuration is ok.You can use Cisco Packet Tracer software to verify your configuration.
http://www.ccna4u.org/2010/11/packet-tracer-version-531-software.html
Then configure remote router first.Then step by step configure other routers.
0
 
LVL 15

Assisted Solution

by:Nayyar HH (CCIE RS)
Nayyar HH (CCIE RS) earned 250 total points
ID: 37787467
RIP authentication is configured on a per interface basis; changes you make will only after that link, so if you have redundant paths in your network you should be OK.

Another option to consider is to increase the flush time; This is the amount of time (in seconds) that must pass before a route is removed from the routing table

Command

timers basic update invalid holddown flush [sleeptime]

I also support the practise of configuring devices further downstream first and working backwards

In addition use the "reload in" command to reload the box should things go wrong;
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
WatchGuard T50 - Internet Priority Based on VLAN or User 1 78
using BGP Attributes 2 117
BGP recommended setup with failover 2 85
SMB Packet - File Data 4 41
This article is a step by step guide on how to create a basic PTP link using Ubiquiti airOS devices. This guide can be used on the following Ubiquiti AirMAX devices. Nanostation, Bullets, AirBridge, Nanobeam, NanoBridge to name a few. Please review …
Security is one of the biggest concerns when moving and migrating your data from your on-premise location to the Public Cloud.  Where is your data? Who can access it? Will it be safe from accidental deletion?  All of these questions and more are imp…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

680 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question