Scribd
Upload
60 views

Routing Authentication and Passive Interfaces

This document discusses network infrastructure protection for CCNP SCOR students. It covers protecting the control plane, data plane, and management plane. Specifically, it outlines how to configure routing protocol authentication for RIP, OSPF, and EIGRP to protect the control plane. It also discusses configuring passive interfaces for RIP, OSPF, and EIGRP to control routing updates. The document provides configuration examples for authentication and passive interfaces for each of the routing protocols.

Uploaded by

shimaa ashraf
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
60 views

Routing Authentication and Passive Interfaces

This document discusses network infrastructure protection for CCNP SCOR students. It covers protecting the control plane, data plane, and management plane. Specifically, it outlines how to configure routing protocol authentication for RIP, OSPF, and EIGRP to protect the control plane. It also discusses configuring passive interfaces for RIP, OSPF, and EIGRP to control routing updates. The document provides configuration examples for authentication and passive interfaces for each of the routing protocols.

Uploaded by

shimaa ashraf
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 3

2020

Network Infrastructure
Protection
For
CCNP SCOR Students
By
Eng. Abeer Hosni
Network Traffic Architecture
- Control Plane (STP, RIP, OSPF, EIGRP, BGP….)
- Data Plane
- Management Plane (Telnet, SSH, SNMP, HTTP, HTTPS….)

Note:
NFP (Network Foundation Protection) is a set of security tools used to
protect different planes.

Control Plane
1- Routing Protocols Authentication:

- RIP Authentication:
R1(config)#key chain TSHOOT
R1(config-keychain)#key 1
R1(config-keychain-key)#key-string CCNPSCOR
R1(config-keychain-key)#accept-lifetime 00:00:00 1 jan 2020 00:00:00 31
jun 2020
R1(config-keychain-key)#send-lifetime 00:00:00 1 jan 2020 00:00:00 31 jun
2020
R1(config-keychain-key)#int f0/0
R1(config-if)#ip rip authentication key-chain TSHOOT
R1(config-if)#ip rip authentication mode md5

- OSPF Authentication:
R1(config)#int f0/0
R1(config-if)#ip ospf authentication-key CCNPSCOR

Or:
R1(config-if)#ip ospf authentication message-digest
R1(config-if)#ip ospf message-digest-key 1 md5 CCNPSCOR

R1(config)#router ospf 1
R1(config-router)#area 0 authentication
R1(config-router)#area 0 authentication message-digest

For IOS XE Release 3S:


R1(config)#key chain TSHOOT
R1(config-keychain)#key 1
R1(config-keychain-key)#key-string CCNPSCOR
R1(config-keychain-key)# cryptographic-algorithm hmac-sha-256
R1(config-keychain-key)#accept-lifetime 00:00:00 1 jan 2020 infinite
R1(config-keychain-key)#send-lifetime 00:00:00 1 jan 2020 infinite
R1(config-keychain-key)#int g0/0
R1(config-if)#ip ospf authentication key-chain TSHOOT

- EIGRP Authentication:
R1(config)#key chain TSHOOT
R1(config-keychain)#key 1
R1(config-keychain-key)#key-string CCNPSCOR
R1(config-keychain-key)#accept-lifetime 00:00:00 1 jan 2020 infinite
R1(config-keychain-key)#send-lifetime 00:00:00 1 jan 2020 infinite
R1(config-keychain-key)#int f0/0
R1(config-if)#ip authentication key-chain eigrp 1 TSHOOT
R1(config-if)#ip authentication mode eigrp 1 md5

2- Passive Interfaces:
- RIP Passive Interface:
R1(config)#router rip
R1(config-router)#passive-interface f0/0
R1(config-router)#passive-interface default

- OSPF Passive Interface:


R1(config)#router ospf 1
R1(config-router)#passive-interface f0/0
R1(config-router)#passive-interface default

- EIGRP Passive Interface:


R1(config)#router eigrp 1
R1(config-router)#passive-interface f0/0
R1(config-router)#passive-interface default

Best Wishes
Abeer :)

You might also like