CCNP-4 EIGRP试验4(BSCI)

CCNP-4 EIGRP试验4

实验拓扑：


试验要求：1-R1,R2,R3起EIGRP路由协议，R1与R2之间配置MD5验证；

2-把R3配置成为stub区域。
试验目的：掌握EIGRP的MD5验证方法和过程，并会配置；理解STUB区域的含义和EIGRP几种stub区域的区别，掌握EIGRP几种stub区域的配置方法。

实验配置：
R1：
interface Serial1/0
ip address
199.99.1.1 255.255.255.0
ip authentication mode eigrp 100 md5
ip authentication key-chain eigrp 100 ccnp
serial
restart-delay 0
!
router eigrp 100
network
199.99.1.0
auto-summary

R2：
interface Serial1/0
ip address
199.99.1.2 255.255.255.0
ip authentication mode eigrp 100 md5
ip authentication key-chain eigrp 100 ccnp
serial
restart-delay 0
clock rate 64000
!
router eigrp 100
network
199.99.1.0
network
199.99.2.0
auto-summary

R3：
interface Serial1/0
ip address
199.99.2.1 255.255.255.0
serial
restart-delay 0
!
router eigrp 100
network
172.16.1.0 0.0.0.255
network
199.99.2.0
no auto-summary
基本配置完成，下面在R1上debug eigrp packets查看：
R1#debug eigrp packets
EIGRP Packets debugging is on
(UPDATE,
REQUEST, QUERY, REPLY, HELLO, IPXSAP, PROBE, ACK, STUB, SIAQUERY, SIAREPLY)
R1#
*Mar 1 00:03:40.575:
%DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 199.99.1.2 (Serial1/0) is up: new
adjacency
*Mar 1
00:03:45.247: EIGRP: Sending HELLO on Serial1/0
*Mar 1
00:03:45.247: AS 100, Flags 0x0, Seq
0/0 idbQ 0/0 iidbQ un/rely 0/0
*Mar
1 00:03:45.539: EIGRP: received packet with MD5 authentication, key id =
1
*Mar 1
00:03:45.543: EIGRP: Received HELLO on Serial1/0 nbr 199.99.1.2
*Mar 1
00:03:45.543: AS 100, Flags 0x0, Seq
0/0 idbQ 0/0 iidbQ un/rely 0/0 peerQ un/rely 0/0
*Mar
1 00:03:50.003: EIGRP: received packet with MD5 authentication, key id =
1
*Mar 1
00:03:50.007: EIGRP: Received HELLO on Serial1/0 nbr 199.99.1.2
*Mar 1
00:03:50.007: AS 100, Flags 0x0, Seq
0/0 idbQ 0/0 iidbQ un/rely 0/0 peerQ un/rely 0/0
*Mar 1
00:03:50.199: EIGRP: Sending HELLO on Serial1/0
*Mar 1
00:03:50.199: AS 100, Flags 0x0, Seq
0/0 idbQ 0/0 iidbQ un/rely 0/0
发现收到MD5加密的Hello数据包，并且通过本地验证，成功成为邻居关系。
下面我们在R3上起Loopback接口进行eigrp stub测试：
interface Loopback0
ip address
172.16.1.1 255.255.255.0
!
ip route 192.168.1.0 255.255.255.0 172.16.1.2
并且用EIGRP通告出去，然后在R1上show ip route：
R1#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B
- BGP
D - EIGRP,
EX - EIGRP external, O - OSPF,
IA - OSPF inter area
N1 - OSPF
NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF
external type 1, E2 - OSPF external type 2
i - IS-IS,
su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS
inter area, * - candidate default, U - per-user static route
o - ODR, P
- periodic downloaded static route

Gateway of last resort is not set

172.16.0.0/24
is subnetted, 1 subnets
D
172.16.1.0 [90/2809856] via 199.99.1.2, 00:00:01, Serial1/0
D 199.99.2.0/24
[90/2681856] via 199.99.1.2, 00:00:30, Serial1/0
D EX 192.168.1.0/24 [170/2809856] via
199.99.1.2, 00:00:02, Serial1/0
C 199.99.1.0/24
is directly connected, Serial1/0
学到了172.16.1.0的路由，下面在R3上进行如下配置：
R3(config-router)#eigrp stub
receive-only
R3(config-router)#redistribute static
配置完成后，在R2上会出现如下提示信息：
R2#
*Mar 1
00:06:17.959: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 199.99.2.1
(Serial1/1) is down: Interface Goodbye received
*Mar 1
00:06:19.351: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 199.99.2.1
(Serial1/1) is up: new adjacency
然后在R1上show ip route查看路由：
R1#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B
- BGP
D - EIGRP,
EX - EIGRP external, O - OSPF,
IA - OSPF inter area
N1 - OSPF
NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF
external type 1, E2 - OSPF external type 2
i - IS-IS,
su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS
inter area, * - candidate default, U - per-user static route
o - ODR, P
- periodic downloaded static route

Gateway of last resort is not set

D
199.99.2.0/24 [90/2681856] via 199.99.1.2, 00:00:04, Serial1/0
C 199.99.1.0/24
is directly connected, Serial1/0
没有了到172.16.1.0的路由了，第二中stub配置如下：
R3(config-router)#eigrp stub connected
再到R1上show ip route：
R1#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B
- BGP
D - EIGRP,
EX - EIGRP external, O - OSPF,
IA - OSPF inter area
N1 - OSPF
NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF
external type 1, E2 - OSPF external type 2
i - IS-IS,
su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS
inter area, * - candidate default, U - per-user static route
o - ODR, P
- periodic downloaded static route

Gateway of last resort is not set

172.16.0.0/24
is subnetted, 1 subnets
D
172.16.1.0 [90/2809856] via 199.99.1.2, 00:00:18, Serial1/0
D
199.99.2.0/24 [90/2681856] via 199.99.1.2, 00:01:50, Serial1/0
C 199.99.1.0/24
is directly connected, Serial1/0
又发现缺少了到192.168.1.0的路由，第三种EIGRP stub配置方法：
R3(config-router)#eigrp stub static
然后在R1上show ip route：
R1#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B
- BGP
D - EIGRP,
EX - EIGRP external, O - OSPF,
IA - OSPF inter area
N1 - OSPF
NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF
external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS
level-1, L2 - IS-IS level-2
ia - IS-IS
inter area, * - candidate default, U - per-user static route
o - ODR, P
- periodic downloaded static route

Gateway of last resort is not set

D 199.99.2.0/24
[90/2681856] via 199.99.1.2, 00:05:07, Serial1/0
C 199.99.1.0/24
is directly connected, Serial1/0
D EX 192.168.1.0/24 [170/2809856] via
199.99.1.2, 00:00:02, Serial1/0
OK，我们发现有了一条D EX的路由到192.168.1.0/24，是作为外部路由被通告的。

实验总结：掌握EIGRP MD5验证的基本配置与不同stub区域区别与配置方法。

本文出自 “★Beckham~23” 博客，请务必保留此出处http://loveme23.blog.51cto.com/7891/45738