拓扑图：

clip_image002

实验说明：采用三层架构，R1和R2为总部，R3和R4为区域，R5和R6为分支机构，R7模拟Internet路由器

R2和R3儿童s0/3连接，R1和R4用s0/1连接，上图有误

实验要求：

1.分支到达总部或者其他区域要使用R1做为主链路，R2成为备用链路

2.IP编址的层次化，要能实现路由汇总

3.把分支机构的路由器做为Stub节点，避免其他路由器向分支发送查询

4.将R7做为Internet路由器，由R2发送一条默认路由到其他分站点

5.在R1和R2之间完成验证

步骤：

1.配置IP地址以及EIGRP路由

2.在R6 扩展PING172.12.0.1

Reply to request 3 (56 ms). Received packet has options

Total option bytes= 40, padded length=40

Record route:

(172.13.36.6)

(172.13.0.3)

(172.12.0.1)

(172.13.0.1)

(172.13.36.3)

(172.13.36.6) <*>

(0.0.0.0)

(0.0.0.0)

(0.0.0.0)

End of list

Reply to request 4 (56 ms). Received packet has options

Total option bytes= 40, padded length=40

Record route:

(172.13.36.6)

(172.23.0.3)

(172.12.0.2)

(172.12.0.1)

(172.13.0.1)

(172.13.36.3)

(172.13.36.6) <*>

(0.0.0.0)

(0.0.0.0)

End of list

可以看到R6到172.12.0.0的网段负载均衡，分别走R1和R2到达

修改R2的s0/0 s0/3两条链路的带宽

看R3的路由

修改前的路由

R3#show ip route

172.12.0.0/24 is subnetted, 1 subnets

D 172.12.0.0 [90/2195456] via 172.23.0.2, 00:00:15, Serial0/3

[90/2195456] via 172.13.0.1, 00:00:15, Serial0/0

修改后的路由

R3#show ip route

172.12.0.0/24 is subnetted, 1 subnets

D 172.12.0.0 [90/2195456] via 172.13.0.1, 00:00:10, Serial0/0

在R6上再次实现扩展PING

Reply to request 0 (128 ms). Received packet has options

Total option bytes= 40, padded length=40

Record route:

(172.13.36.6)

(172.13.0.3)

(172.12.0.1)

(172.13.0.1)

(172.13.36.3)

(172.13.36.6) <*>

(0.0.0.0)

(0.0.0.0)

(0.0.0.0)

End of list

可以看到所有到172.12.0.0网段的数据都走R1而不会走R2

2.路由汇总

在R5和R6建立环回口，接口地址在56.1.0.0/16的网段

看R1的路由表

R1#show ip route

56.0.0.0/24 is subnetted, 4 subnets

D 56.1.1.0 [90/2809856] via 172.13.0.3, 00:00:57, Serial0/0

D 56.1.3.0 [90/2809856] via 172.13.0.3, 00:00:18, Serial0/0

D 56.1.2.0 [90/2809856] via 172.13.0.3, 00:00:57, Serial0/0

D 56.1.4.0 [90/2809856] via 172.13.0.3, 00:00:18, Serial0/0

在R3汇总56.1.0.0/16的路由

看R1的路由表

R1#show ip route

D 56.1.0.0 [90/2809856] via 172.13.0.3, 00:00:19, Serial0/0

R1#ping 56.1.4.6

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 56.1.4.6, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 68/94/120 ms

3.在此拓扑中，假设不把把R4设成stub，断开R1的e1/0

Mar 1 01:08:26.563: IP-EIGRP(Default-IP-Routing-Table:90): Processing incoming QUERY packet

*Mar 1 01:08:26.563: IP-EIGRP(Default-IP-Routing-Table:90): Int 172.12.0.0/24 M 4294967295 - 0 4294967295 SM 4294967295 - 0 4294967295

把R4设置成Stub，不会收到查询包了

R4#

*Mar 1 01:11:54.771: IP-EIGRP(Default-IP-Routing-Table:90): Processing incoming UPDATE packet

*Mar 1 01:11:54.775: IP-EIGRP(Default-IP-Routing-Table:90): Int 172.12.0.0/24 M 4121600 - 2560000 1561600 SM 3609600 - 2560000 1049600

4.默认路由

取消Stub配置

R2: ip route 0.0.0.0 0.0.0.0 200.1.1.7

R2(config)#router eigrp 90

R2(config-router)#redistribute static

看R6的路由表

R6#show ip route

D*EX 0.0.0.0/0 [170/2733056] via 172.13.36.3, 00:00:09, Serial0/2

5.在R1和R2之间配置验证

key chain cisco

key 1

key-string 123456

ip authentication mode eigrp 90 md5

ip authentication key-chain eigrp 90 cisco