My friend, and IPexpert Guest Speaker, Keith Barker always says, “friends should not let friends run RIP!” Yes, we agree Keith, but in this post we need to look at running RIP on the Cisco ASA. This is of course in the event that there is an area like this in the CCIE Security Practical Lab Exam.
First, the basics – let us configure basic RIP version 2 on the Cisco ASA:
ASA1# configure terminal ASA1(config)# router rip ASA1(config-router)# version 2 ASA1(config-router)# no auto-summary ASA1(config-router)# network 10.0.0.0 ASA1(config-router)# passive-interface default ASA1(config-router)# no passive-interface Inside ASA1(config-router)# end ASA1#
Notice this “best practices” configuration is just like how I would configure RIP on the router. The passive-interface default bit and then the no passive bit ensures that we are only sending updates out the interface that we want speaking RIP. There is still no method of configuring RIP under an interface on the ASA or a Cisco router.
Read Full Entry »









