eigrp配置实验_EIGRP的认证的配置

实验拓扑图：

实验步骤及要求：

1、配置各台路由器的IP地址，并且使用Ping命令确认各路由器的直连口的互通性。

2、在二台路由配置EIGRP自治系统编号为50。

3、查看R1与R2的路由表。

R1#show ip route

172.16.0.0/16 is variably subnetted, 2 subnets, 2 masks

C 172.16.1.8/30 is directly connected, Serial1/1

D 172.16.0.0/16 is a summary, 00:00:37, Null0

10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks

C 10.1.1.0/24 is directly connected, Loopback0

D 10.0.0.0/8 is a summary, 00:00:37, Null0

D 192.168.1.0/24 [90/2297856] via 172.16.1.10, 00:00:09, Serial1/1

R1#

R2#show ip route

172.16.0.0/16 is variably subnetted, 2 subnets, 2 masks

C 172.16.1.8/30 is directly connected, Serial1/0

D 172.16.0.0/16 is a summary, 00:00:53, Null0

D 10.0.0.0/8 [90/2297856] via 172.16.1.9, 00:00:51, Serial1/0

C 192.168.1.0/24 is directly connected, Loopback0

R2#

4、配置R1的EIGRP认证。

R1#configure terminal

R1(config)#key chain edurainbow

R1(config-keychain)#key 1

R1(config-keychain-key)#key-string cisco

R1(config-keychain-key)#exit

R1(config-keychain)#exit

R1(config)#

R1(config)#interface serial 1/1

R1(config-if)#ip authentication key-chain eigrp 50 edurainbow

R1(config-if)#ip authentication mode eigrp 50 md5

R1(config-if)#end

R1(config)#

5、双方路由器使用clear ip route *命令进行刷新路由表，加快路由表的收敛。

6、查看R1与R2路由表，观察变化。

R1#show ip route

C 172.16.1.8/30 is directly connected, Serial1/1

D 172.16.0.0/16 is a summary, 00:00:16, Null0

10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks

C 10.1.1.0/24 is directly connected, Loopback0

D 10.0.0.0/8 is a summary, 00:00:16, Null0

R1#

R2#show ip route

………

C 172.16.1.8/30 is directly connected, Serial1/0

D 172.16.0.0/16 is a summary, 00:02:53, Null0

C 192.168.1.0/24 is directly connected, Loopback0

R2#

此时R1和R2已经无法学习到对方路由器的路由.同时也注意到R2路由器系统的反馈信息:

*Mar 14 15:35:27.343: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 50: Neighbor 172.16.1.9 (Serial1/0) is up: new adjacency

*Mar 14 15:35:29.767: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 50: Neighbor 172.16.1.9 (Serial1/0) is down: Auth failure

7查看R2的路由表，由于认证失败，此时R1与R2的邻居关系也无法维持。

R2#show ip eigrp 50 neighbors

IP-EIGRP neighbors for process 50

R2#

8、配置R2的EIGRP认证。

R2#

R2#configure terminal

R2(config)#key chain edurainbow

R2(config-keychain)#key 1

R2(config-keychain-key)#key-string cisco

R2(config-keychain-key)#exit

R2(config-keychain)#exit

R2(config)#

R2(config)#interface serial 1/0

R2(config-if)#ip authentication key-chain eigrp 50 edurainbow

R2(config-if)#ip authentication mode eigrp 50 md5

R2(config-if)#exit

R2(config)#exit

R2(config)#

9、当我们在R2路由器上完成认证的配置后，会注意到系统的提示信息：

*Mar 14 15:46:04.071: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 50: Neighbor 172.16.1.9 (Serial1/0) is up: new adjacency

同时，查看R2的邻居表，会发现R1已经成为R2的邻居。

R2#show ip eigrp 50 neighbors

IP-EIGRP neighbors for process 50

H Address Interface Hold Uptime SRTT RTO Q Seq

(sec) (ms) Cnt Num

0 172.16.1.9 Se1/0 11 00:01:17 28 200 0 8

R2#

10、再次使用刷新路由表后，观察R1与R2的路由表变化。

R1#show ip route

172.16.0.0/16 is variably subnetted, 2 subnets, 2 masks

C 172.16.1.8/30 is directly connected, Serial1/1

D 172.16.0.0/16 is a summary, 00:08:41, Null0

10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks

C 10.1.1.0/24 is directly connected, Loopback0

D 10.0.0.0/8 is a summary, 00:08:42, Null0

D 192.168.1.0/24 [90/2297856] via 172.16.1.10, 00:02:54, Serial1/1

R1#

R2#show ip route

172.16.0.0/16 is variably subnetted, 2 subnets, 2 masks

C 172.16.1.8/30 is directly connected, Serial1/0

D 172.16.0.0/16 is a summary, 00:08:28, Null0

D 10.0.0.0/8 [90/2297856] via 172.16.1.9, 00:03:44, Serial1/0

C 192.168.1.0/24 is directly connected, Loopback0

R2#

10、实验完成。