Tarmoq xavfsizligi

RIP protokol bo`yicha qurilgan tarmoq uchun ishni bajarish tartibi
8.3-rasmda tasvirlanga tarmoqda R1 va R2 routerlar o`rtasida axborot almashinuvini autentifikatsiyalash asosida va boshqa routerlar o`rtasida autentifikatsiyasiz sozlamalarini amalga oshiramiz, hamda ular o`rtasidagi farqlarni taqqoslaymiz.

R1 konfiguratsiyasi
Router(config)#hostname R1
R1(config)#router rip
R1(config-router)#version 2
R1(config-router)#no auto-summary
R1(config-router)#network 192.168.10.0
R1(config-router)#network 10.10.10.0
R1(config-router)#network 11.11.11.0
R1(config-router)#exit
R1(config)#key chain cisco
R1(config-keychain)#key 1
R1(config-keychain-key)#key-string cisco1
R1(config-keychain-key)#exit
R1(config-keychain)#exit
R1(config)#interface serial 0/0
R1(config-if)#ip rip authentication mode md5
R1(config-if)#ip rip authentication key-chain cisco
R1(config-if)#exit

R2 konfiguratsiyasi
Router(config)#hostname R2
R2(config)#router rip
R2(config-router)#version 2
R2(config-router)#no auto-summary
R2(config-router)#network 192.168.20.0
R2(config-router)#network 10.10.10.0
R2(config-router)#network 12.12.12.0
R2(config-router)#exit
R2(config)#key chain cisco
R2(config-keychain)#key 1
R2(config-keychain-key)#key-string cisco1
R2(config-keychain-key)#exit
R2(config-keychain)#exit
R2(config)#interface serial 0/0
R2(config-if)#ip rip authentication mode md5
R2(config-if)#ip rip authentication key-chain cisco
R2(config-if)#exit

8.5-rasm. R1 va R2 routerlar o`rtasida autentifikatsiyali axborot almashinuvi


EIGRP. Cisco Systems kompaniyasining EIGRP protokoli IGRP protokolining dastlabki versiyasining takomillashtirilgan ko‘rinishi hisoblaniladi. Protokol gibrid hisoblanadi va Diffusing-Update Algorithm (DUAL) algoritmiga asoslangan. EIGRP ning oxirgi versiyasi marshrutizatsiya jadvali elementlarini buzg‘unchilar yozib olishga imkon bermaydigan va MD5 kaliti asosida autentifikatsiyalaydigan himoyalash vositasiga ega (8.6-rasm).

8.6-rasm. EIGRP protokol autentifikatsiyasi sozlamasi

8.7-rasm. EIGRP protokol asosida qurilgan tarmoq topologiyasi