Cisco IOS Cookbook 中文精简版 7-23 EIGRP

阅读更多

 

发表于:2007-3-13 14:20　 7.1.  配置EIGRP 提问 ONT-FAMILY: 宋体">配置网络使用EIGRP路由协议 回答 Router1#configure terminal Enter configuration commands, one per line.  End with CNTL/Z. Router1(config)#interface Ethernet0 Router1(config-if)#ip address 192.168.20.1 255.255.255.0 Router1(config-if)#exit Router1(config)#interface Serial0.1 point-to-point Router1(config-subif)#ip address 172.25.2.2 255.255.255.252 Router1(config-subif)#exit Router1(config)#router eigrp 55 Router1(config-router)#network 172.25.0.0 Router1(config-router)#network 192.168.20.0 Router1(config-router)#exit Router1(config)#end Router1# 注释 要确保启用此路由协议的所有路由器配置的EIGRP后面的进程号相同，可以使用show ip eigrp neighbors 来验证邻居关系。同时支持network 192.168.20.0 0.0.0.255 来定义发布的网络 7.2.  路由过滤 提问 对EIGRP学到或者宣告的路由进行过滤 回答 入方向过滤 Router2#configure terminal Enter configuration commands, one per line.  End with CNTL/Z. Router2(config)#access-list 34 deny 192.168.30.0 Router2(config)#access-list 34 permit any Router2(config)#router eigrp 55 Router2(config-router)#distribute-list 34 in Serial0.1 Router2(config-router)#exit Router2(config)#end Router2# 出方向过滤 Router1#configure terminal Enter configuration commands, one per line.  End with CNTL/Z. Router1(config)#access-list 57 permit 172.25.1.0 Router1(config)#access-list 57 deny any Router1(config)#router eigrp 55 Router1(config-router)#distribute-list 57 out Serial0/0.2 Router1(config-router)#exit Router1(config)#end Router1# 使用prefix方式过滤，并且支持gateway 选项 Router9#configure terminal Enter configuration commands, one per line.  End with CNTL/Z. Router9(config)#ip prefix-list ALLOWED-PREFIXES permit 10.0.0.0/8 le 32 Router9(config)#ip prefix-list ALLOWED-PREFIXES deny 0.0.0.0/0 le 32 Router9(config)#ip prefix-list ALLOWED-NEIGHBORS permit 172.18.19.1/32 Router9(config)#ip prefix-list ALLOWED-NEIGHBORS permit 172.18.19.4/32 Router9(config)#ip prefix-list ALLOWED-NEIGHBORS deny 0.0.0.0/0 le 32 Router9(config)#router eigrp 55 Router9(config-router)#distribute-list prefix ALLOWED-PREFIXES gateway ALLOWED-NEIGHBORS in Router9(config-router)#exit Router9(config)#end Router9# 注释 在路由过滤时推荐使用prefix方式而不用ACL形式。Gateway参数只能用于入方向控制，同时建议不用和interface混和使用 7.3.  再发布路由到EIGRP   提问 再发布其他方式学到的路由到EIGRP路由进程 回答 Router1#configure terminal Enter configuration commands, one per line.  End with CNTL/Z. Router1(config)#router eigrp 55 Router1(config-router)#redistribute rip Router1(config-router)#default-metric 1000 100 250 100 1500 Router1(config-router)#exit Router1(config)#end Router1# 注释 如果再发布的是静态路由可以不用配置default-metric命令，对于其他协议都必须配置此命令否则无法成功再发布。再发布之前也可以使用过滤列表进行路由过滤，从而只再发布特定路由 Router1(config)#router eigrp 55 Router1(config-router)#redistribute ospf 99 Router1(config-router)#distribute-list 7 out ospf 99 7.4.  使用Route Map方式来配置再发布 提问 使用控制粒度更好的Route Map方式来配置再发布 回答 Router1#configure terminal Enter configuration commands, one per line.  End with CNTL/Z. Router1(config)#ip route 192.168.10.0 255.255.255.0 172.22.1.4 Router1(config)#ip route 192.168.11.0 255.255.255.0 172.22.1.4 Router1(config)#ip route 192.168.12.0 255.255.255.0 172.22.1.4 Router1(config)#access-list 20 permit 192.168.10.0 Router1(config)#access-list 21 permit 192.168.11.0 Router1(config)#route-map STATIC permit 10 Router1(config-route-map)#match ip address 20 Router1(config-route-map)#set metric 56 100 255 1 1500 Router1(config-route-map)#set tag 2 Router1(config-route-map)#exit Router1(config)#route-map STATIC permit 20 Router1(config-route-map)#match ip address 21 Router1(config-route-map)#set metric 128 200 255 1 1500 Router1(config-route-map)#exit Router1(config)#route-map STATIC deny 30 Router1(config-route-map)#exit Router1(config)#router eigrp 55 Router1(config-router)#redistribute static route-map STATIC Router1(config-router)#exit Router1(config)#end Router1# 注释 此处配置和前面6.3的配置差不多，唯一需要注意的就是前面提到的必须要加上metric的设置 7.5.  特定接口禁止EIGRP 提问 禁止某个端口参与EIGRP 回答 Router1#configure terminal Enter configuration commands, one per line.  End with CNTL/Z. Router1(config)#router eigrp 55 Router1(config-router)#passive-interface Serial0/1 Router1(config-router)#exit Router1(config)#end Router1# 注释 这里的被动接口和RIP不同，由于结果是不能形成邻居在此接口所以使用该命令以后就不能发送也不能接收路由信息 7.6.  调整EIGRP度量值 提问 修改学到的EIGRP路由器度量值 回答 Router1#configure terminal Enter configuration commands, one per line.  End with CNTL/Z. Router1(config)#access-list 22 permit 192.168.30.0 Router1(config)#access-list 33 permit 192.168.30.0 Router1(config)#router eigrp 55 Router1(config-router)#offset-list 33 out 10000 Serial0.1 Router1(config-router)#offset-list 22 in 10000 Serial0.1 Router1(config-router)#exit Router1(config)#end Router1# 注释 7.7.  定时器调整 提问 调整定时器优化收敛 回答 Router1#configure terminal Enter configuration commands, one per line.  End with CNTL/Z. Router1(config)#interface Serial0.1 Router1(config-subif)#ip hello-interval eigrp 55 3 Router1(config-subif)#ip hold-time eigrp 55 9 Router1(config-subif)#exit Router1(config)#end Router1# 注释 EIGRP的一个特性就是定时器的调整可以基于端口，并且不用保持整个网络中所有设备的定时器设置一致，各个定时器都是独立的 7.8.  启用EIGRP认证 提问 增强路由信息安全性 回答 Router1#configure terminal Enter configuration commands, one per line.  End with CNTL/Z. Router1(config)#key chain ORA Router1(config-keychain)#key 1 Router1(config-keychain-key)#key-string oreilly Router1(config-keychain-key)#exit Router1(config-keychain)#exit Router1(config)#interface Serial0/1 Router1(config-if)#ip authentication mode eigrp 55 md5 Router1(config-if)#ip authentication key-chain eigrp 55 ORA Router1(config-if)#exit Router1(config)#end Router1# 注释 注意这里只是认证不是加密路由信息包。下面提供一种更改key方法，帮助网络平稳过渡到新的key Router1#configure terminal Enter configuration commands, one per line.  End with CNTL/Z. Router1(config)#key chain Mars Router1(config-keychain)#key 1 Router1(config-keychain-key)#key-string rocket Router1(config-keychain-key)#accept-lifetime 00:00:00 Jan 1 1993 00:15:00 Nov 1 2006 Router1(config-keychain-key)#send-lifetime 00:00:00 Jan 1 1993 00:00:00 Nov 1 2006 Router1(config-keychain-key)#key 2 Router1(config-keychain-key)#key-string martian Router1(config-keychain-key)#accept-lifetime 23:45:00 Oct 31 2006 infinite Router1(config-keychain-key)#send-lifetime 00:00:00 Nov 1 2006 infinite   Router1(config-keychain-key)#end Router1# 7.9.  配置EIGRP路由汇总 提问 通过路由汇总来减少路由表大小和增强稳定性 回答 Router1#configure terminal Enter configuration commands, one per line.  End with CNTL/Z. Router1(config)#interface Serial0/0.2 Router1(config-subif)#ip summary-address eigrp 55 172.25.0.0 255.255.0.0 Router1(config-subif)#exit Router1(config)#end Router1# 缺省会自动路由汇总，使用no auto-summary关闭（12.2(8)T后自动关闭） 同时可以配置汇总路由的同时，宣告部分子网路由 Router9# configure terminal Enter configuration commands, one per line.  End with CNTL/Z. Router9(config)#ip prefix-list 10.5.5/24 permit 10.5.5.0/24 Router9(config)#route-map LEAK10-5-5 permit 10 Router9(config-route-map)#match ip address prefix-list 10.5.5/24 Router9(config-route-map)#exit Router9(config)#interface Serial0/0 Router9(config-if)#ip summary-address eigrp 55 10.5.0.0 255.255.0.0 leak-map LEAK10-5-5 Router9(config-if)#exit Router9(config)#end Router9# 注释 路由汇总也是EIGRP的特性之一，可以配置在任意路由器的接口进行汇总，不象OSPF那样只能在ABR汇总。汇总路由的度量值和所汇总路由中的最好的子网路由的度量值一致。Leakmap特性在12.3(14)T后引入，可以在汇总路由的同时发布某些更匹配的路由 7.10.  记录邻居状态变化 提问 记录邻居状态变化 回答 Router1#configure terminal Enter configuration commands, one per line.  End with CNTL/Z. Router1(config)#router eigrp 55 Router1(config-router)#eigrp log-neighbor-changes Router1(config-router)#exit Router1(config)#end Router1# 注释 缺省开启 7.11.       限制EIGRP路由更新占用带宽 提问 限制EIGRP路由更新占用带宽的百分比 回答 Router1#configure terminal Enter configuration commands, one per line.  End with CNTL/Z. Router1(config)#interface Serial0.1 Router1(config-subif)#ip bandwidth-percent eigrp 55 40 Router1(config-subif)#exit Router1(config)#end Router1# 注释 这里的百分比可以大于100％，当我们人为的设定了某端口带宽用于计算度量值时 7.12.  EIGRP Stub路由 提问 向边缘网络发布较小的路由表 回答 Router1#configure terminal Enter configuration commands, one per line.  End with CNTL/Z. Router1(config)#router eigrp 55 Router1(config-router)#eigrp stub Router1(config-router)#exit Router1(config)#end Router1# 注释 7.13.  路由标签 提问 通过对特定路由进行标签，防止再分发时出现路由回环 回答 Router1#configure terminal Enter configuration commands, one per line.  End with CNTL/Z. Router1(config)#ip route 0.0.0.0 0.0.0.0 172.25.1.1 Router1(config)#access-list 7 permit 0.0.0.0 Router1(config)#route-map TAGGING permit 10 Router1(config-route-map)#match ip address 7 Router1(config-route-map)#set tag 5 Router1(config-route-map)#exit Router1(config)#router eigrp 55 Router1(config-router)#redistribute static route-map TAGGING Router1(config-router)#exit Router1(config)#end Router1# 注释 7.14.       查看EIGRP状态 提问 查看状态命令 回答 Router1#show ip protocols Router1#show ip route eigrp Router1#show ip eigrp neighbors Router1#show ip eigrp interfaces Router9#show ip eigrp accounting Router1#show ip eigrp topology 注释 12.3(14)T引入了show ip eigrp accounting Router9#show ip eigrp accounting IP-EIGRP accounting for AS(55)/ID(172.18.5.9) Total Prefix Count: 50  States: A-Adjacency, P-Pending, D-Down State Address/Source   Interface        Prefix   Restart  Restart/                                         Count     Count   Reset(s) A    172.20.10.1      Se0/0                 1        0        0 A    172.18.19.1      Fa0/0                39        0        0 A    172.18.19.4      Fa0/0                 1        0        0 A    172.18.19.6      Fa0/0                 6        0        0 Router9# Router1#show ip eigrp topology IP-EIGRP Topology Table for AS(55)/ID(172.25.25.1) Codes: P - Passive, A - Active, U - Update, Q - Query, R - Reply,        r - reply Status, s - sia Status P 0.0.0.0/0, 1 successors, FD is 28160, tag is 5          via Rstatic (28160/0)          via Summary (28160/0), Null0 P 10.2.2.0/24, 1 successors, FD is 156160          via 172.22.1.4 (156160/128256), FastEthernet0/1 P 10.1.1.0/30, 1 successors, FD is 3845120          via Connected, Serial0/1 P 192.168.10.0/24, 1 successors, FD is 28160, tag is 5          via Rstatic (28160/0) P 192.168.30.0/24, 1 successors, FD is 156160          via 172.22.1.4 (156160/128256), FastEthernet0/1 P 192.168.20.0/24, 1 successors, FD is 2195456          via 172.25.2.2 (2195456/281600), Serial0/0.2 P 172.25.25.6/32, 1 successors, FD is 156160          via 172.25.1.7 (156160/128256), FastEthernet0/0.1 P 172.25.25.1/32, 1 successors, FD is 128256          via Connected, Loopback0 P 172.25.25.2/32, 1 successors, FD is 2297856          via 172.25.2.2 (2297856/128256), Serial0/0.2 P 172.25.1.0/24, 1 successors, FD is 28160          via Connected, FastEthernet0/0.1 P 172.25.2.0/30, 1 successors, FD is 2169856          via Connected, Serial0/0.2 P 172.22.1.0/24, 1 successors, FD is 28160          via Connected, FastEthernet0/1 Router1#