Enterasys Networks Security Router X-PeditionTM - Manual (Page 137)

Configuring RIP Examples
XSR User’s Guide 5-35
Figure 5-10 ECMP VPN Load Balancing Topology
Configuring RIP Examples
The following example enables RIP on both FastEthernet interfaces and a serial link of the XSR.
The FastEthernet 2 interface is configured to be totally passive (updates not sent or received).
The serial interface uses split horizon with poison reverse while the others use split horizon (the
default). Authentication mode text is used on Serial 1/0, and the key string is Mexico:
XSR(config)#interface fastethernet 1
XSR(config-if<F1>)#ip address 192.168.1.1 255.255.255.0
XSR(config-if<F1>)#no shutdown
XSR(config)#interface fastethernet 2
XSR(config-if<F2>)#no shutdown
XSR(config-if<F2>)#ip address 192.169.1.1 255.255.255.0
XSR(config)#interface serial 1/0
XSR(config-if<S1/0>)#ip address 192.5.10.2 255.255.255.0
XSR(config-if<S1/0>)#ip split-horizon poison
XSR(config-if<S1/0>)#ip rip authentication key-string Mexico
XSR(config-if<S1/0>)#ip rip authentication mode text
XSR(config-if<S1/0>)#encapsulation ppp
XSR(config-if<S1/0>)#no shutdown
XSR(config)#router rip
XSR(config-router)#network 192.168.1.0
XSR(config-router)#network 192.169.1.0
XSR(config-router)#network 192.5.10.0
XSR(config-router)#passive-interface fastethernet 2
XSR(config-router)#no receive-interface fastethernet 2
The following RIP example sets an Access Control List (ACL) to allow packets from the address of
192.168.1.xxx and 154.68.1.xxx (where xxx are any valid numbers) only through the XSR's F1 port.
XSR(config)#interface FastEthernet 1
XSR(config-if<F1>#no shutdown
VPN1: 1.1.1.1
N1
N2
Central XSR
Remote XSR1
Remote XSR2
VPN1: 1.1.1.2
VPN1:1.1.1.3
Peer1
Peer2
Internet
nh1
nh2
O N2 next hop 1.1.1.2
O N2 next hop 1.1.1.3
S Peer1 next hop nh1
S peer2 next hop nh2
Routes
VPN link
Physical link