Skip to main content

Securing Routing updates (Routing Authentication)

Router
ASA
RIP v2
!
key chain RIP
 key 1   
  key-string cisco
!
router rip
 version 2
 network 136.1.0.0
 network 150.1.0.0
 no auto-summary
!
interface FastEthernet0/0
 ip address 136.1.121.1 255.255.255.0
 ip rip authentication mode md5
 ip rip authentication key-chain RIP
end
!
!
router rip
 network 10.0.0.0
 network 136.1.0.0
 version 2
 no auto-summary
!
interface Ethernet0/1
 description ** Inside  Interface **
 nameif inside
 security-level 100
 ip address 136.1.121.12 255.255.255.0
 rip authentication mode md5
 rip authentication key <removed> key_id 1
OSPF v2
Simple
!
router ospf 1
 router-id 150.1.3.3
 log-adjacency-changes
 area 0 authentication
 network 136.1.0.0 0.0.0.255 area 0
 network 150.1.3.3 0.0.0.0 area 0
!
interface FastEthernet0/0
 ip address 136.1.0.3 255.255.255.0
 ip ospf authentication-key cisco
end
!
MD5-Hash
!
interface FastEthernet0/0
 ip address 136.1.124.4 255.255.255.0
 ip ospf authentication message-digest
 ip ospf message-digest-key 1 md5 cisco
end
!


Simple
!
router ospf 1
 router-id 150.1.12.12
 network 136.1.0.0 255.255.255.0 area 0
 area 0 authentication
 log-adj-changes
!
!
interface Ethernet0/0
 description ** Outside Interface **
 nameif outside
 security-level 0
 ip address 136.1.0.12 255.255.255.0
 ospf authentication-key cisco
!
MD5-Hash
!
nterface Ethernet0/2
 nameif dmz2
 security-level 50
 ip address 136.1.124.12 255.255.255.0
 ospf message-digest-key 1 md5 <removed>
 ospf authentication message-digest
!


EIGRP
!
router eigrp 1
 network 136.1.0.0
 no auto-summary
!
!
interface FastEthernet0/0
 ip address 136.1.124.4 255.255.255.0
 ip authentication mode eigrp 1 md5
 ip authentication key-chain eigrp 1 EIGRP
 duplex auto
 speed auto
end
!
!
router eigrp 1
 no auto-summary
 network 136.1.0.0 255.255.0.0
!
!
interface Ethernet0/2.124
 description ** DMZ2 VLAN **
 nameif dmz2
 security-level 50
 ip address 136.1.124.12 255.255.255.0
 authentication key eigrp 1 <removed> key-id 1
 authentication mode eigrp 1 md5
!

Comments