最近看一个老师讲EIGRP,留了一个综合实验,感觉很有意思,给大家分享一下:
实验需求:
1:R1,2,3,5运行EIGRP100,且关闭自动汇总;
2:指定route-id为环回口;
3:R1不能从环回口接收和发送任何EIGRP信息;
4:运行EIGRP100的路由器,HOP count超过10,路由信息将无效;
5:R1,2,3hello时间10S。Dead时间30S;
6:帧中继网络中使用认证,key-chain=killccie key=10 password=killccie10;
7:当R2,3的以太网断掉,保证R2,3的环回口可以通信;
8:R1环回口down,发出query包,2分钟得不到回应就重置邻居关系;
9:R5,6串行链路封装PPP,CHAP认证,单播建立EIGRP 200邻居;
10:EIGRP关闭自动汇总,不可以出现32位路由;
11:R5在EIGRP200中只用bandwidth决定metric;
12:R6,5之间带宽修改为700K,EIGRP使用70K的带宽;
13:R5做EIGRP双向重分布;
14:R1的loopback14修改delay为100,要求R2,3看到一条汇总路由,验证metric为最小的 那个;
15:在R6环回口创建多地址,并通告进RIPV2;
16:在R5上看到DX的R6路由,R2,3只能看到D的路由;
17:R3启用环回口不通告进EIGRP100中,但要求全网能够访问,要求使用ip default-network;
18:在R6上,只允许R1的loopback100能telnetR6的6.6.6.6;
19:配置R6不接收任何EIGRP200的QUERY;
20:R6可以给EIGRP200的邻居发送直连,汇总,重分布的信息。
声明下我做的时候修改了EIGRP100为90,200为100,大家看下配置:
R1#show running-config
key chain killccie
key 10
key-string killccie10
interface Loopback10
ip address 1.1.1.1 255.255.255.0
delay 100
interface Loopback11
ip address 1.3.1.1 255.255.255.0
interface Loopback12
ip address 1.4.1.1 255.255.255.0
interface Loopback14
ip address 1.2.1.1 255.255.255.0
interface Loopback100
ip address 11.11.11.11 255.255.255.0
interface Serial1/2
ip address 123.1.1.1 255.255.255.0
ip hello-interval eigrp 90 10
ip hold-time eigrp 90 30
ip authentication mode eigrp 90 md5
ip authentication key-chain eigrp 90 killccie
encapsulation frame-relay
ip summary-address eigrp 90 1.0.0.0 255.0.0.0 5
serial restart-delay 0
router eigrp 90
timers active-time 2
passive-interface default
no passive-interface Serial1/2
network 1.1.1.1 0.0.0.0
network 1.2.1.0 0.0.0.255
network 1.3.1.1 0.0.0.0
network 1.4.1.1 0.0.0.0
network 11.11.11.11 0.0.0.0
network 123.1.1.0 0.0.0.255
metric maximum-hops 10
no auto-summary
eigrp router-id 1.1.1.1
R2#show running-config
key chain killccie
key 10
key-string killccie10
interface Loopback10
ip address 2.2.2.2 255.255.255.0
interface FastEthernet0/0
ip address 90.1.1.2 255.255.255.0
interface Serial1/2
ip address 123.1.1.2 255.255.255.0
ip hello-interval eigrp 90 10
ip hold-time eigrp 90 30
ip authentication mode eigrp 90 md5
ip authentication key-chain eigrp 90 killccie
encapsulation frame-relay
router eigrp 90
network 2.0.0.0
network 90.1.1.2 0.0.0.0
network 123.1.1.0 0.0.0.255
metric maximum-hops 10
no auto-summary
eigrp router-id 2.2.2.2
R3#show running-config
key chain killccie
key 10
key-string killccie10
interface Loopback10
ip address 3.3.3.3 255.255.255.0
interface Loopback20
ip address 33.33.33.33 255.255.255.0
interface FastEthernet0/0
ip address 90.1.1.3 255.255.255.0
interface Serial1/2
ip address 123.1.1.3 255.255.255.0
ip hello-interval eigrp 90 10
ip hold-time eigrp 90 30
ip authentication mode eigrp 90 md5
ip authentication key-chain eigrp 90 killccie
encapsulation frame-relay
router eigrp 90
network 3.0.0.0
network 90.1.1.3 0.0.0.0
network 123.1.1.0 0.0.0.255
network 123.0.0.0
network 0.0.0.0
metric maximum-hops 10
no auto-summary
eigrp router-id 3.3.3.3
ip default-network 0.0.0.0
ip route 0.0.0.0 0.0.0.0 Loopback10
R5#show running-config
username R6 password 0 ccie
interface Loopback10
ip address 5.5.5.5 255.255.255.0
interface FastEthernet0/0
ip address 90.1.1.5 255.255.255.0
ip summary-address eigrp 90 66.66.0.0 255.255.0.0 5
interface Serial1/1
bandwidth 700
ip address 56.1.1.5 255.255.255.0
ip bandwidth-percent eigrp 100 10
encapsulation ppp
no peer neighbor-route
serial restart-delay 0
ppp authentication chap
ppp chap hostname R5
ppp chap password 0 ccie
router eigrp 90
redistribute eigrp 100 metric 1544 20000 255 1 1500
network 90.1.1.5 0.0.0.0
no auto-summary
router eigrp 100
redistribute eigrp 90 metric 1544 20000 255 1 1500
network 5.5.5.5 0.0.0.0
network 5.5.5.0 0.0.0.255
network 56.1.1.5 0.0.0.0
metric weights 0 1 0 0 0 0
no auto-summary
R6#show running-config
enable secret 5 $1$K7fP$XVk0Ioiaw5bV.bFCoi62Y0
username R5 password 0 ccie
interface Loopback10
ip address 6.6.6.6 255.255.255.0
interface Loopback11
ip address 66.66.66.66 255.255.255.0
interface Loopback12
ip address 66.66.77.66 255.255.255.0
interface Loopback13
ip address 66.66.88.66 255.255.255.0
interface Loopback100
ip address 60.60.60.60 255.255.255.0
interface Serial1/0
bandwidth 700
ip address 56.1.1.6 255.255.255.0
ip access-group 100 in
ip bandwidth-percent eigrp 100 10
encapsulation ppp
no peer neighbor-route
serial restart-delay 0
ppp authentication chap
ppp chap hostname R6
ppp chap password 0 ccie
router eigrp 100
redistribute rip metric 1544 20000 255 1 1500
network 6.6.6.6 0.0.0.0
network 56.1.1.6 0.0.0.0
network 60.60.60.60 0.0.0.0
metric weights 0 1 0 0 0 0
no auto-summary
eigrp stub redistributed
router rip
version 2
network 66.0.0.0
no auto-summary
access-list 100 permit tcp host 11.11.11.11 any eq telnet
access-list 100 deny tcp any any eq telnet
access-list 100 permit ip any any
line vty 0 4
password ccie
Login
看下最后的路由表:
R6#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is 56.1.1.5 to network 0.0.0.0
D EX 1.0.0.0/8 [170/3656960] via 56.1.1.5, 00:17:24, Serial1/0
2.0.0.0/24 is subnetted, 1 subnets
D EX 2.2.2.0 [170/3656960] via 56.1.1.5, 00:17:24, Serial1/0
33.0.0.0/24 is subnetted, 1 subnets
D EX 33.33.33.0 [170/3656960] via 56.1.1.5, 00:17:24, Serial1/0
3.0.0.0/24 is subnetted, 1 subnets
D EX 3.3.3.0 [170/3656960] via 56.1.1.5, 00:17:24, Serial1/0
5.0.0.0/24 is subnetted, 1 subnets
D 5.5.5.0 [90/3656960] via 56.1.1.5, 00:17:24, Serial1/0
66.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
D EX 66.66.0.0/16 [170/3656960] via 56.1.1.5, 00:17:23, Serial1/0
C 66.66.66.0/24 is directly connected, Loopback11
C 66.66.77.0/24 is directly connected, Loopback12
C 66.66.88.0/24 is directly connected, Loopback13
6.0.0.0/24 is subnetted, 1 subnets
C 6.6.6.0 is directly connected, Loopback10
56.0.0.0/24 is subnetted, 1 subnets
C 56.1.1.0 is directly connected, Serial1/0
11.0.0.0/24 is subnetted, 1 subnets
D EX 11.11.11.0 [170/3656960] via 56.1.1.5, 00:17:24, Serial1/0
123.0.0.0/24 is subnetted, 1 subnets
D EX 123.1.1.0 [170/3656960] via 56.1.1.5, 00:17:24, Serial1/0
90.0.0.0/24 is subnetted, 1 subnets
D EX 90.1.1.0 [170/3656960] via 56.1.1.5, 00:17:24, Serial1/0
60.0.0.0/24 is subnetted, 1 subnets
C 60.60.60.0 is directly connected, Loopback100
D*EX 0.0.0.0/0 [170/3656960] via 56.1.1.5, 00:17:24, Serial1/0
R3#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is 0.0.0.0 to network 0.0.0.0
D 1.0.0.0/8 [90/2195456] via 123.1.1.1, 00:34:11, Serial1/2
2.0.0.0/24 is subnetted, 1 subnets
D 2.2.2.0 [90/156160] via 90.1.1.2, 00:45:39, FastEthernet0/0
33.0.0.0/24 is subnetted, 1 subnets
C 33.33.33.0 is directly connected, Loopback20
3.0.0.0/24 is subnetted, 1 subnets
C 3.3.3.0 is directly connected, Loopback10
5.0.0.0/24 is subnetted, 1 subnets
D EX 5.5.5.0 [170/6780416] via 90.1.1.5, 00:45:39, FastEthernet0/0
66.0.0.0/16 is subnetted, 1 subnets
D 66.66.0.0 [90/6780416] via 90.1.1.5, 00:17:37, FastEthernet0/0
56.0.0.0/24 is subnetted, 1 subnets
D EX 56.1.1.0 [170/6780416] via 90.1.1.5, 00:45:40, FastEthernet0/0
11.0.0.0/24 is subnetted, 1 subnets
D 11.11.11.0 [90/2297856] via 123.1.1.1, 00:24:53, Serial1/2
123.0.0.0/24 is subnetted, 1 subnets
C 123.1.1.0 is directly connected, Serial1/2
90.0.0.0/24 is subnetted, 1 subnets
C 90.1.1.0 is directly connected, FastEthernet0/0
S* 0.0.0.0/0 is directly connected, Loopback10
总结一下,个人感觉该实验没什么特别难点,有几个重点还是需要注意一下的:
1:telnet源接口,这个用的应该会很多;
2:EIGRP中route-id的作用。
个人感觉这个主要是用来重分布之后做标记,可以防止环路。有待考究,呵呵。