Combinatorial testing of key chain in different dynamic routing Protocol Verification
one。 Overview: dynamic routing protocols, except rip v1 can not configure authentication, other routing protocols can be configured with authentication, there are two authentication methods, one is plaintext authentication, the other is MD5 authentication
Reference link: http://blog.sina.com.cn/s/blog_3e5d70910100mxzz.html II. Test ideas and conclusions: a. Idea: ① configures different ways of dynamic routing authentication-including routes and routers, routers and firewalls, plaintext authentication and MD5 authentication ② grabs packets to determine whether the authentication information is a protocol key-ID
b. Conclusion:
three。 Test the topology:
four。 Basic configuration: A.FW1:interface Ethernet0
Nameif Outside
Security-level 0
Ip address 202.100.1.1 255.255.255.0
No shut
Interface Ethernet1
Nameif Inside
Security-level 100
Ip address 192.168.1.1 255.255.255.0 no shutB.R2:interface Loopback0
Ip address 2.2.2.2 255.255.255.0
Interface FastEthernet0/0 ip address 192.168.1.2 255.255.255.0
No shutinterface FastEthernet0/1
Ip address 10.1.1.2 255.255.255.0 no shutC.R3:interface Loopback0
Ip address 3.3.3.3 255.255.255.0
Interface FastEthernet0/0
Ip address 10.1.1.3 255.255.255.0
No shut5. Rip plaintext authentication: a. Router and Router: ① R2:key chain ripkey
Key 1
Key-string cisco
Key 2
Key-string CISCOrouter rip
Version 2
Network 2.0.0.0
Network 10.0.0.0
No auto-summary ② R3:key chain ripkey
Key 1
Key-string CISCO key 2
Key-string ciscorouter rip
Version 2
Network 3.0.0.0
Network 10.0.0.0
No auto-summary
③ grab bag:
R2:
R3:
