CCNP-4 EIGRP试验4(BSCI)-CSDN博客

CCNP-4 EIGRP试验4

实验拓扑：

试验要求： 1-R1,R2,R3 起 EIGRP 路由协议， R1 与 R2 之间配置 MD5 验证；

2- 把 R3 配置成为 stub 区域。

试验目的：掌握 EIGRP 的 MD5 验证方法和过程，并会配置；理解 STUB 区域的含义和 EIGRP 几种 stub 区域的区别，掌握 EIGRP 几种 stub 区域的配置方法。

实验配置：

R1 ：

interface Serial1/0

ip address 199.99.1.1 255.255.255.0

ip authentication mode eigrp 100 md5

ip authentication key-chain eigrp 100 ccnp

serial restart-delay 0

router eigrp 100

network 199.99.1.0

auto-summary

R2 ：

interface Serial1/0

ip address 199.99.1.2 255.255.255.0

ip authentication mode eigrp 100 md5

ip authentication key-chain eigrp 100 ccnp

serial restart-delay 0

clock rate 64000

router eigrp 100

network 199.99.1.0

network 199.99.2.0

auto-summary

R3 ：

interface Serial1/0

ip address 199.99.2.1 255.255.255.0

serial restart-delay 0

router eigrp 100

network 172.16.1.0 0.0.0.255

network 199.99.2.0

no auto-summary

基本配置完成，下面在 R1 上 debug eigrp packets 查看：

R1#debug eigrp packets

EIGRP Packets debugging is on

(UPDATE, REQUEST, QUERY, REPLY, HELLO, IPXSAP, PROBE, ACK, STUB, SIAQUERY, SIAREPLY)

R1#

*Mar 1 00:03:40.575: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 199.99.1.2 (Serial1/0) is up: new adjacency

*Mar 1 00:03:45.247: EIGRP: Sending HELLO on Serial1/0

*Mar 1 00:03:45.247: AS 100, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0

*Mar 1 00:03:45.539: EIGRP: received packet with MD5 authentication, key id = 1

*Mar 1 00:03:45.543: EIGRP: Received HELLO on Serial1/0 nbr 199.99.1.2

*Mar 1 00:03:45.543: AS 100, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 peerQ un/rely 0/0

*Mar 1 00:03:50.003: EIGRP: received packet with MD5 authentication, key id = 1

*Mar 1 00:03:50.007: EIGRP: Received HELLO on Serial1/0 nbr 199.99.1.2

*Mar 1 00:03:50.007: AS 100, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 peerQ un/rely 0/0

*Mar 1 00:03:50.199: EIGRP: Sending HELLO on Serial1/0

*Mar 1 00:03:50.199: AS 100, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0

发现收到 MD5 加密的 Hello 数据包，并且通过本地验证，成功成为邻居关系。

下面我们在 R3 上起 Loopback 接口进行 eigrp stub 测试：

interface Loopback0

ip address 172.16.1.1 255.255.255.0

ip route 192.168.1.0 255.255.255.0 172.16.1.2

并且用 EIGRP 通告出去，然后在 R1 上 show ip route ：

R1#show ip route

Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2

i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

ia - IS-IS inter area, * - candidate default, U - per-user static route

o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

172.16.0.0/24 is subnetted, 1 subnets

D 172.16.1.0 [90/2809856] via 199.99.1.2, 00:00:01, Serial1/0

D 199.99.2.0/24 [90/2681856] via 199.99.1.2, 00:00:30, Serial1/0

D EX 192.168.1.0/24 [170/2809856] via 199.99.1.2, 00:00:02, Serial1/0

C 199.99.1.0/24 is directly connected, Serial1/0

学到了 172.16.1.0 的路由，下面在 R3 上进行如下配置：

R3(config-router)#eigrp stub receive-only

R3(config-router)#redistribute static

配置完成后，在 R2 上会出现如下提示信息：

R2#

*Mar 1 00:06:17.959: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 199.99.2.1 (Serial1/1) is down: Interface Goodbye received

*Mar 1 00:06:19.351: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 199.99.2.1 (Serial1/1) is up: new adjacency

然后在 R1 上 show ip route 查看路由：

R1#show ip route

Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2

i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

ia - IS-IS inter area, * - candidate default, U - per-user static route

o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

D 199.99.2.0/24 [90/2681856] via 199.99.1.2, 00:00:04, Serial1/0

C 199.99.1.0/24 is directly connected, Serial1/0

没有了到 172.16.1.0 的路由了，第二中 stub 配置如下：

R3(config-router)#eigrp stub connected

再到 R1 上 show ip route ：

R1#show ip route

Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2

i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

ia - IS-IS inter area, * - candidate default, U - per-user static route

o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

172.16.0.0/24 is subnetted, 1 subnets

D 172.16.1.0 [90/2809856] via 199.99.1.2, 00:00:18, Serial1/0

D 199.99.2.0/24 [90/2681856] via 199.99.1.2, 00:01:50, Serial1/0

C 199.99.1.0/24 is directly connected, Serial1/0

又发现缺少了到 192.168.1.0 的路由，第三种 EIGRP stub 配置方法：

R3(config-router)#eigrp stub static

然后在 R1 上 show ip route ：

R1#show ip route

Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2

i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

ia - IS-IS inter area, * - candidate default, U - per-user static route

o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

D 199.99.2.0/24 [90/2681856] via 199.99.1.2, 00:05:07, Serial1/0

C 199.99.1.0/24 is directly connected, Serial1/0

D EX 192.168.1.0/24 [170/2809856] via 199.99.1.2, 00:00:02, Serial1/0

OK ，我们发现有了一条 D EX 的路由到 192.168.1.0/24 ，是作为外部路由被通告的。

实验总结：掌握 EIGRP MD5 验证的基本配置与不同 stub 区域区别与配置方法。

本文转自loveme2351CTO博客，原文链接： http://blog.51cto.com/loveme23/45738 ，如需转载请自行联系原作者