From: Victor Cappuccio (victor@ccbootcamp.com)
Date: Wed Feb 21 2007 - 01:15:21 ART
Hi Jennytan.
Can you please do this on your Routers
conf te
router rip
no validate-update-source
end
wr
clear ip route *
and send us the
show run | b router rip
show run int f0/0
show ip int f0/0
and see if you still see the problem?
Now, for the debugs you send,
> *Feb 21 03:26:08.424: RIP: ignored v2 update from bad source 150.50.17.2on
> FastEthernet0/0
it is not indicating an authentication problem, is indicating that you have a
BAD SOURCE on the FastEthernet0/0, By default, the software validates the
source IP address of incoming RIP routing updates. If that source address is
not valid, the software discards the routing update.
Many thanks
Victor Cappuccio.
Network Learning Inc - A Cisco Sponsored Organization (SO) YES! We take
Cisco Learning credits!
victor@ccbootcamp.com
http://www.ccbootcamp.com (Cisco Training and Rental Racks)
http://www.ccbootcamp.com/groupstudy.html (groupstudy member discounts!)
Voice: 702-968-5100
FAX: 702-446-8012
-----Original Message-----
From: kim.teu@gmail.com on behalf of jennytan
Sent: Tue 2/20/2007 19:56
To: Victor Cappuccio
Cc: Cisco certification
Subject: Re: Authentication for RIP updates - IE workbook [html-rem]
R2#sho ip int brief
Interface IP-Address OK? Method Status
Protocol
FastEthernet0/0 150.50.17.2 YES manual up
up
FastEthernet0/1 unassigned YES unset administratively down
down
Serial0/0/0 unassigned YES unset up
up
Serial0/0/0.24 150.50.24.2 YES manual up
up
Serial0/0/0.256 150.50.100.2 YES manual up
up
Serial0/0/1 150.50.9.2 YES manual up
up
Serial0/1/0 unassigned YES unset administratively down
down
Serial0/1/1 unassigned YES unset administratively down
down
Loopback0 200.0.0.2 YES manual up
up
R2#sho ip proto
Routing Protocol is "rip"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Sending updates every 30 seconds, next due in 24 seconds
Invalid after 180 seconds, hold down 0, flushed after 240
Redistributing: rip
Default version control: send version 2, receive version 2
Interface Send Recv Triggered RIP Key-chain
FastEthernet0/0 2 2
Serial0/0/0.24 2 2 Yes R2toR4
Serial0/0/0.256 2 2 R2toR5R6
Serial0/0/1 2 2
Loopback0 2 2
Automatic network summarization is not in effect
Maximum path: 4
Routing for Networks:
150.50.0.0
200.0.0.0
Routing Information Sources:
Gateway Distance Last Update
150.50.9.5 120 00:00:11
150.50.17.1 120 00:00:17
150.50.24.4 120 00:03:02
Distance: (default is 120)
R2#
R4#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static
route
o - ODR, P - periodic downloaded static route
Gateway of last resort is not set
200.0.0.0/32 is subnetted, 6 subnets
R 200.0.0.8 [120/8] via 150.50.24.2, 00:01:59, Serial0/0/0.24
R 200.0.0.1 [120/2] via 150.50.24.2, 00:01:59, Serial0/0/0.24
R 200.0.0.2 [120/1] via 150.50.24.2, 00:01:59, Serial0/0/0.24
C 200.0.0.4 is directly connected, Loopback0
R 200.0.0.5 [120/2] via 150.50.24.2, 00:01:59, Serial0/0/0.24
R 200.0.0.7 [120/3] via 150.50.24.2, 00:01:59, Serial0/0/0.24
R 172.1.0.0/16 [120/2] via 150.50.24.2, 00:01:59, Serial0/0/0.24
10.0.0.0/24 is subnetted, 1 subnets
C 10.10.1.0 is directly connected, FastEthernet0/0
150.50.0.0/16 is variably subnetted, 10 subnets, 4 masks
R 150.50.6.128/25 [120/4] via 150.50.24.2, 00:02:00, Serial0/0/0.24
R 150.50.200.0/24 [120/2] via 150.50.24.2, 00:02:00, Serial0/0/0.24
R 150.50.4.0/24 [120/4] via 150.50.24.2, 00:02:01, Serial0/0/0.24
R 150.50.6.0/25 [120/3] via 150.50.24.2, 00:02:01, Serial0/0/0.24
R 150.50.7.0/25 [120/2] via 150.50.24.2, 00:02:01, Serial0/0/0.24
R 150.50.9.0/25 [120/1] via 150.50.24.2, 00:02:01, Serial0/0/0.24
R 150.50.17.0/24 [120/1] via 150.50.24.2, 00:02:01, Serial0/0/0.24
C 150.50.24.0/24 is directly connected, Serial0/0/0.24
R 150.50.100.0/26 [120/1] via 150.50.24.2, 00:02:01, Serial0/0/0.24
R 150.50.5.64/27 [120/3] via 150.50.24.2, 00:02:01, Serial0/0/0.24
R4#sh ip proto
Routing Protocol is "rip"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Sending updates every 30 seconds, next due in 26 seconds
Invalid after 180 seconds, hold down 0, flushed after 240
Redistributing: rip
Default version control: send version 2, receive version 2
Interface Send Recv Triggered RIP Key-chain
Serial0/0/0.24 2 2 Yes R2toR4
Loopback0 2 2
Automatic network summarization is in effect
Maximum path: 4
Routing for Networks:
10.0.0.0
150.50.0.0
200.0.0.0
Passive Interface(s):
FastEthernet0/0
Routing Information Sources:
Gateway Distance Last Update
150.50.24.2 120 00:02:07
Distance: (default is 120)
R4#sh ip int brief
Interface IP-Address OK? Method Status
Protocol
FastEthernet0/0 10.10.1.4 YES manual up
up
FastEthernet0/1 unassigned YES unset administratively down
down
Serial0/0/0 unassigned YES manual up
up
Serial0/0/0.24 150.50.24.4 YES manual up
up
Serial0/0/1 unassigned YES unset administratively down
down
Loopback0 200.0.0.4 YES manual up
up
R4#
On 2/20/07, Victor Cappuccio <victor@ccbootcamp.com> wrote:
>
>
> Hi, seems to me that you have other problem different than Authentication
> My betis is that you musts configure
>
>
http://www.cisco-gu.com/univercd/cc/td/doc/product/software/ios113ed/cs/csprt
n1/csrip.htm#xtocid2534115
>
> please show us your configurations, in order to avoid the guessing
>
> specifically:
> show ip route rip
> show ip proto
> show ip int brief
>
>
> thanks,
> Victor Cappuccio.-
> Network Learning Inc - A Cisco Sponsored Organization (SO) YES! We take
> Cisco Learning credits!
> victor@ccbootcamp.com
> http://www.ccbootcamp.com (Cisco Training and Rental Racks)
> http://www.ccbootcamp.com/groupstudy.html (groupstudy member discounts!)
> Voice: 702-968-5100
> FAX: 702-446-8012
>
>
>
>
> -----Original Message-----
> From: nobody@groupstudy.com on behalf of jennytan
> Sent: Tue 2/20/2007 19:14
> To: Cisco certification
> Subject: Authentication for RIP updates - IE workbook
>
> I am working on IPExpert workbook. R2 and R4 are enabled for RIP
> authentication. Below shows the debug ip rip event. Do you see
> authentication error? According to the proctor guide, I should be seeing
> invalid authentication.
>
> R2#
> *Feb 21 03:25:04.708: RIP: received v2 update from 150.50.24.4 on
> Serial0/0/0.24
> *Feb 21 03:25:04.712: RIP: Update contains 4 routes
> *Feb 21 03:25:04.712: RIP: received v2 update from 150.50.24.4 on
> Serial0/0/0.24
> *Feb 21 03:25:04.712: RIP: Update contains 4 routes
> *Feb 21 03:25:06.460: RIP: sending v2 update to 255.255.255.255 via
> FastEthernet0/0 (150.50.17.2)
> *Feb 21 03:25:06.460: RIP: Update contains 14 routes
> *Feb 21 03:25:06.460: RIP: Update queued
> *Feb 21 03:25:06.460: RIP: Update sent via FastEthernet0/0
> *Feb 21 03:25:11.228: RIP: ignored v2 update from bad source 150.50.7.5 on
> FastEthernet0/0
> *Feb 21 03:25:17.456: RIP: received v2 update from 150.50.9.5 on
> Serial0/0/1
> *Feb 21 03:25:17.456: RIP: Update contains 10 routes
> *Feb 21 03:25:18.332: RIP: sending v2 update to 224.0.0.9 via Loopback0 (
> 200.0.0.2)
> *Feb 21 03:25:18.332: RIP: Update contains 17 routes
> *Feb 21 03:25:18.332: RIP: Update queued
> *Feb 21 03:25:18.332: RIP: Update sent via Loopback0
> *Feb 21 03:25:18.332: RIP: ignored v2 packet from 200.0.0.2 (sourced from
> one of our addresses)
> *Feb 21 03:25:20.584: RIP: ignored v2 update from bad source 150.50.7.7 on
> FastEthernet0/0
> *Feb 21 03:25:20.612: RIP: sending v2 update to 224.0.0.9 via Serial0/0/1
> (
> 150.50.9.2)
> *Feb 21 03:25:20.612: RIP: Update contains 9 routes
> *Feb 21 03:25:20.612: RIP: Update queued
> *Feb 21 03:25:20.612: RIP: Update sent via Serial0/0/1u all
> All possible debugging has been turned off
>
>
> R4#
> *Feb 21 03:26:01.272: RIP: ignored v2 update from bad source 150.50.17.1on
> FastEthernet0/0
> *Feb 21 03:26:03.568: RIP: ignored v2 update from bad source 150.50.7.6 on
> FastEthernet0/0
> *Feb 21 03:26:05.240: RIP: received v2 update from 150.50.24.2 on
> Serial0/0/0
> *Feb 21 03:26:05.240: RIP: Update contains 15 routes
> *Feb 21 03:26:08.424: RIP: ignored v2 update from bad source 150.50.17.2on
> FastEthernet0/0
> *Feb 21 03:26:11.800: RIP: sending v2 update to 224.0.0.9 via Serial0/0/0
> (
> 150.50.24.4)
> *Feb 21 03:26:11.800: RIP: Update contains 13 routes
> *Feb 21 03:26:11.800: RIP: Update queued
> *Feb 21 03:26:11.800: RIP: Update sent via Serial0/0/0
> *Feb 21 03:26:15.876: RIP: ignored v2 update from bad source 150.50.7.5 on
> FastEthernet0/0
> *Feb 21 03:26:19.028: RIP: ignored v2 update from bad source 150.50.7.7 on
> FastEthernet0/0
> *Feb 21 03:26:19.372: RIP: sending v2 update to 224.0.0.9 via Loopback0 (
> 200.0.0.4)
> *Feb 21 03:26:19.372: RIP: Update contains 8 routes
> *Feb 21 03:26:19.372: RIP: Update queued
> *Feb 21 03:26:19.372: RIP: Update sent via Loopback0
> *Feb 21 03:26:19.372: RIP: ignored v2 packet from 200.0.0.4 (sourced from
> one of our addresses)u all
> All possible debugging has been turned off
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Thu Mar 01 2007 - 07:38:47 ART