Comment on page
RIP 101

Starting the routing process
R(config)# router rip
R(config-router)# network NETWORK-ADDR
In RIP there is no wildcard option when configuring the network command. The NETWORK-ADDR will always be considered a classful address and will match all interfaces that are in the same classful network:
R(config-router)#network 172.16.23.45
R1(config-router)#do sh run | se router
router rip
network 172.16.0.0
The network command enables RIP on the interfaces where an IP address is configured that is part of the classful network that is defined in the command. By enabling RIP on that interface, the router will advertise the subnets for the interfaces where RIP has been enabled.
RIP Versions
By default, a router will send V1 updates, but will accept both v1 and v2
Version 2 can be enabled globally or per interface:
! Globally, inside the router process
R(config-router)# version {1|2}
! Per interface
R(config-if)# ip rip {send|receive} version {1|2|1 2}
RIPv1 vs RIPv2
RIPv2 is backwards compatible with RIPv1, but RIPv1 ignore version 2 updates
RIPv2 supports VLSM, RIPv1 doesn’t – RIPv1 is a classful routing protocol that does not send netmask information in routing updates
RIPv2 sends updates using multicast 224.0.0.9 instead of broadasts like RIPv1
RIPv2 supports authentication (MD5 and text)
RIPv2 supports route tagging (for redistribution)
RIPv1 updates
RIPv1 does not send netmask information in routing updates, so it uses a system to deduce the mask associated with a destination.
When sending an update:
Is the advertised network part of the same major network as the outgoing interface?
NO: Advertise the major network of the route (Auto-Summary)
YES: Does the advertised network has the same netmask as the outgoing interface?
YES: Advertise the network
NO: Is it a host route? (/32 netmask)
YES: advertise the network
NO: Do not advertise the network
When receiving an update:
Is the received network part of the same major network as the incoming interface?
YES: Does it has non-zero bits in the host part (Host network)?
YES: Add it to the routing table as a host network (/32)
NO: Add it to the routing table with the same netmask as the incoming interface
NO: Then it must be a major netwokr. Are there any subnets of this major network already in the routing table, received on other interfaces?
YES: Drop the route (Does not support discontiguous networks)
NO: Apply a classful mask to the network address and add it to the routing table
Split Horizon
“Split Horizon” rule blocks information about routes from being advertised out the interface where that information was received on.
“Split Horizon” is on by default, except on Frame Relay physical interfaces. It should be manually disabled on multipoint subinterfaces, or even on Ethernet interfaces, when it is needed.
To disable/enable split-horizon on an interface use:
R(config)# [no] ip split-horizon
To verify if split-horizon is enabled or not, use:
R# show ip interface INTERFACE | i Split
 Split horizon is enabled
Passive interfaces
Setting an interface as passive will disable sending advertisements, but will not disable receiving advertisements.
! Use this command to make all interfaces passive by default:
R(config-router)# passive-interface default
! Use this to enable/disable sending on one interface:
R(config-router)# [no] passive-interface INTERFACE
Neighbors
Static Neighbors
Static neighbors for RIP can be defined with the command:
R(config)# neighbor NEIGH-ADDR
Now, communication with this neighbor will be done using unicast addresses. Unlike EIGRP, multicast addresses will still be used on the interfaces where static neighbors are defined.
Authentication
RIPv2 supports both MD5 and text authentication.
1.Define the key chain:
R(config)# key chain KEY-CHAIN
R(config-keychain)# key KEY-NUMBER
R(config-keychain-key)# key-string KEY-STRING
! Optionally, define an accept-lifetime
R(config-keychain-key)# accept-lifetime START-TIME {infinte|END-TIME|duration SEC}
! Optionally, define the a send-lifetime
R(config-keychain-key)# send-lifetime START-TIME {infinte|END-TIME|duration SEC}
R(config-keychain-key)# end
2.Apply it on an interface:
! set the authentication as MD5 or plain text
R(config-if)# ip rip authentication mode {md5|text}
R(config-if)# ip rip authentication key-chain KEY-CHAIN
When using plain text authentication, the Key ID is ignored. Whe using md5 authentication, the Key ID should match for a properly working network. But in fact, a router will accept RIP packets authenticated with a lower key ID and will reject RIP packets authenticated with a higher key ID.
Timers
RIP sends routing updates at regular intervals and when the network topology changes.
Routing updates are sent every 30 sec(default UPDATE)
If no update is received for a route for 180 sec(default INVALID), the route is marked inaccessible and advertised as unreachable (metric 16). However, the route is still used for forwarding packets
If no update is received for a route for 240 sec(default FLUSH), the route is removed from the routing table.
When a router receives an update with a metric worse than the one it already has, it puts the route in hold-down state. The route stays in this state for 180 sec (default HOLD-DOWN), interval during which outing information regarding better paths is suppressed. The route is marked inaccessible and advertised as unreachable. However, the route is still used for forwarding packets. When HOLD-DOWN expires, routes advertised by other sources are accepted and the route is no longer inaccessible.
The timer values can be changed globally:
! Globally:
R(config-router)# timers basic UPDATE INVALID HOLD-DOWN FLUSH [SLEEP]
! Default: 30 sec, 180 sec, 180 sec, 240 sec
The UPDATE interval can be changed per interface:
R(config-if)# ip rip advertise UPDATE
! Default: 30 sec
Packets
RIP uses UDP 520 (both source and destination) to exchange routing information
One RIP update packet can accomodate up to 25 routing updates
RIPv1 sends updates as broadcasts to 255.255.255.255
By default, RIPv2 sends updates to the multicast address 224.0.0.9 (MAC: 01-00-5E-00-00-09)
Multicasts in RIPv2 can be sent as broadcasts too, using the commnand:
R(config-if)#ip rip v2-broadcast
RIPv2 can also send updates as unicast if the neighbor is defined using:
R(config)# neighbor NEIGHBOR-ADDR
!Unless the interface is passive, the router will send both multicast
!and unicast address to the statically defined neighbors
To check what kind of updates are sent, use:
R# debug ip rip
Updates are sourced only from the primary IP of the interface.
When an update is received, the router checks if the source IP is in the same subnet as any IP address on the receiving interface. If it doesn’t find an IP address on the interface in the same subnet as the update source, it drops the update.
It can be a problem when using PPP or unnumbered links, because each end of the link can be in different subnets.
You can disable this behavior using:
R(config-router)# no validate-update-source
Normally, updates are sent every UPDATE , but you can set RIP to only send updates when there is a change in the topology. This can be usefull on Dial interfaces
R(config-if)# ip rip triggered
RIP Metric
RIP uses hop count as route metric
A metric of 16 equals infinty – The route is considered inaccesible
Offset lists
Use offset lists to add a value to the calculated metric:
R(config-router)# offset-list ACL {in|out} OFFSET
Offset value must be between 1 and 16. Remember that any route that has a metric of 16 is considered down. You can control how far a RIP update can reach by advertising the routes with a certain metric.
E.g., advertising the routes with a metric of 15, will allow only the next hop router to accept the route. Provided no other metric manipulation is done, other routers, beyond the next hop router, will consider the route inaccessible.
RIP Administrative Distace
The default AD for RIP is 120. This can be changed using the distance command:
R(config-router)# distance AD [SRC-ADDR WILDCARD [ACL]]
Load Balancing
RIP can only perform load balancing when the metric is equal. Use offset lists to modify the route metric in order to manually engineer load balancing.
Distribute lists
Use them to filter the updates that are sent or received
! Using ACLs
R(config-router)# distribute-list ACL {in|out} [INTERFACE]
! Using Prefix-list
R(config-router)# distribute-list prefix PREFIX-LIST {in|out} [INTERFACE]
! Using gateway - filter based on the source of the update:
R(config-router)# distribute-list gateway PREFIX-LIST1 [prefix PREFIX-LIST2] {in|out} [INTERFACE]
Summarization
By default, RIP summarizes at major network boundaries. This can be disabled using:
R(config-router)# no auto-summary
Manual summarization can be done per interface, using:
R(config-if)# ip summary-address rip SUMMARY-ADDR SUMMARY-MASK
When manually summarizing, you can’t go past the major network. As a workaround, you can add a static route to NULL and redistribute static. The summary route will have a metric equal to the lowest metric of all its children. Unlike EIGRP, RIP does not add a NULL route when summarizing.
Default routes
You can enable RIP to advertise a default route using:
R(config-router)# default-information originate [route-map ROUTE-MAP]
The route map can be used to make conditional advertisement of the default route:
Advertise a default route only on some interfaces:
R(config)# route-map ROUTE-MAP
R(config-route-map)# set interface INTERFACE
Advertise a default route only if another route is in the routing table:
R(config)# route-map ROUTE-MAP
R(config-route-map)# match ip address prefix-list PREFIX-LIST
RIP
EIGRP
Last modified 2yr ago