Configure RIP
Table of Contents
Expand All
|
Collapse All
Next-Generation Firewall Docs
-
-
- Cloud Management of NGFWs
- PAN-OS 10.0 (EoL)
- PAN-OS 10.1
- PAN-OS 10.2
- PAN-OS 11.0
- PAN-OS 11.1 & Later
- PAN-OS 9.1 (EoL)
-
- PAN-OS 10.1
- PAN-OS 10.2
- PAN-OS 11.0
- PAN-OS 11.1 & Later
-
-
- Cloud Management and AIOps for NGFW
- PAN-OS 10.0 (EoL)
- PAN-OS 10.1
- PAN-OS 10.2
- PAN-OS 11.0
- PAN-OS 11.1
- PAN-OS 11.2
- PAN-OS 8.1 (EoL)
- PAN-OS 9.0 (EoL)
- PAN-OS 9.1 (EoL)
Configure RIP
Perform the following procedure to configure RIP.
- Configure general virtual router settings.Configure general RIP configuration settings.
- Select a virtual router (NetworkVirtual Routers) and for the virtual router, select RIP.Select Enable to enable the RIP protocol.Select Reject Default Route if you do not want to learn any default routes through RIP. This is the recommended, default setting.Clear Reject Default Route if you want to permit redistribution of default routes through RIP.Configure interfaces for RIP.
- On the Interfaces tab, select an interface in the Interface configuration section.Select an already defined interface.Select Enable.Select Advertise Default Route to advertise a default route to RIP peers with the specified metric value.(Optional) Select a profile from the Auth Profile list.Select normal, passive or send-only from the Mode list.(Optional) To enable BFD for RIP globally for the virtual router, select a BFD profile.Click OK.Configure RIP timers.
- On the Timers tab, enter a value for Interval Seconds (sec). This setting defines the length of the following RIP timer intervals in seconds (range is 1 to 60; default is 1).Specify the Update Intervals to define the number of intervals between route update announcements (range is 1 to 3,600; default is 30).Specify the Expire Intervals to define the number of intervals between the time that the route was last updated to its expiration (range is 1 to 3600; default is 120).Specify the Delete Intervals to define the number of intervals between the time that the route expires to its deletion (range is 1 to 3,600; default is 180).(Optional) Configure Auth Profiles.By default, the firewall does not use RIP authentication for the exchange between RIP neighbors. Optionally, you can configure RIP authentication between RIP neighbors by either a simple password or MD5 authentication. MD5 authentication is recommended; it is more secure than a simple password.Simple Password RIP authentication
- Select Auth Profiles and Add a name for the authentication profile to authenticate RIP messages.Select Simple Password as the Password Type.Enter a simple password and then confirm.MD5 RIP authentication
- Select Auth Profiles and Add a name for the authentication profile to authenticate RIP messages.Select MD5 as the Password Type.Add one or more password entries, including:
- Key-ID (range is 0 to 255)
- Key
(Optional) Select Preferred status.Click OK to specify the key to be used to authenticate outgoing message.Click OK again in the Virtual Router - RIP Auth Profile dialog box.Commit your changes.