...
Center |
---|
Scroll Title |
---|
title | Figure - The transition scheme between different modes of CS |
---|
| Copy Copy |
|
Commands may have different arguments, which are specified in several formats. Arguments format is described in the context help ("?") or in the list of commands ("help") in the following way:
...
- "WORD" – list identifier.
- "seq <1-4294967295>" – sequential number.
- "(deny|permit)" – resulting action.
- "A.B.C.D/M" – IP address range.
"exact-match" – is used for the exact match of a parameter to the range.
"ge <0-32> le <0-32>" – allowed mask values range.
Examples
Enable RIP on the interface with network IP address matching "4.7.8.0/24". Code Block |
---|
| RIP(config-router)# network 4.7.8.0/24 |
|
Set authentication using a secret key. By using "key chain" parameter create the "TEST" key-chain with key identifier "123" and set the secret key value "TESTTEST". Code Block |
---|
| RIP(config)# key chain TEST
RIP(config-keychain)# key 123
RIP(config-keychain-key)# key-string TESTTEST |
Enable MD5 authentication mode and select secret key with "TESTTEST" name. Code Block |
---|
| RIP(config-if)# authentication mode md5
RIP(config-if)# authentication key-chain TESTTEST |
The "no" prefix is used to disable authentication. Code Block |
---|
| RIP(config-if)# no authentication mode md5 |
|
Create such configuration for the "eth0" interface to allow packets which are routed in "10.0.0.0/8" network only. In the "config" mode create "private" nominate access list which allow "10.0.0.0/8" network IP addresses and deny all others. After that in "config-router" mode apply this list to the "eth0" interface. Code Block |
---|
| RIP(config)# access-list private permit 10.0.0.0/8
RIP(config)# access-list private deny any
RIP(config-router)# distribute-list private in eth0 |
|
In the following configuration, the router advertises external links created from the system routing table "connected" routes. If a destination for this route is a "192.168.200.0/24" subnetwork, the formed link will have metric 7, any other destination will not lead to route advertising it. Code Block |
---|
| RIP(config)# access-list AnyNetwork permit any
RIP(config)# access-list net200 permit 192.168.200.0/24
RIP(config)# route-map mapForConnected permit 10
RIP(config-route-map)# match address net200
RIP(config-route-map)# set metric 7
RIP(config-route-map)# route-map mapForConnected deny 11
RIP(config-route-map)# match address AnyNetwork
RIP(config-router)# redistribute connected route-map mapForConnected |
|