CCNP-4 EIGRP试验4(BSCI)
CCNP-4 EIGRP试验4
实验拓扑：
试验要求：
1-R1,R2,R3
起
EIGRP
路由协议，
R1
与
R2
之间配置
MD5
验证；
2-
把
R3
配置成为
stub
区域。
试验目的：掌握
EIGRP
的
MD5
验证方法和过程，并会配置；理解
STUB
区域的含义和
EIGRP
几种
stub
区域的区别，掌握
EIGRP
几种
stub
区域的配置方法。
实验配置：
R1
：
interface Serial1/0
ip address 199.99.1.1 255.255.255.0
ip authentication mode eigrp 100 md5
ip authentication key-chain eigrp 100 ccnp
serial restart-delay 0
!
router eigrp 100
network 199.99.1.0
auto-summary
R2
：
interface Serial1/0
ip address 199.99.1.2 255.255.255.0
ip authentication mode eigrp 100 md5
ip authentication key-chain eigrp 100 ccnp
serial restart-delay 0
clock rate 64000
!
router eigrp 100
network 199.99.1.0
network 199.99.2.0
auto-summary
R3
：
interface Serial1/0
ip address 199.99.2.1 255.255.255.0
serial restart-delay 0
!
router eigrp 100
network 172.16.1.0 0.0.0 .255
network 199.99.2.0
no auto-summary
基本配置完成，下面在
R1
上
debug eigrp packets
查看：
R1#debug eigrp packets
EIGRP Packets debugging is on
(UPDATE, REQUEST, QUERY, REPLY, HELLO, IPXSAP, PROBE, ACK, STUB, SIAQUERY, SIAREPLY)
R1#
*Mar 1 00:03:40.575: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 199.99.1.2 (Serial1/0) is up: new adjacency
*Mar 1 00:03:45.247: EIGRP: Sending HELLO on Serial1/0
*Mar 1 00:03:45.247: AS 100, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0
*Mar 1 00:03:45.539: EIGRP: received packet with MD5 authentication, key id = 1
*Mar 1 00:03:45.543: EIGRP: Received HELLO on Serial1/0 nbr 199.99.1.2
*Mar 1 00:03:45.543: AS 100, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 peerQ un/rely 0/0
*Mar 1 00:03:50.003: EIGRP: received packet with MD5 authentication, key id = 1
*Mar 1 00:03:50.007: EIGRP: Received HELLO on Serial1/0 nbr 199.99.1.2
*Mar 1 00:03:50.007: AS 100, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 peerQ un/rely 0/0
*Mar 1 00:03:50.199: EIGRP: Sending HELLO on Serial1/0
*Mar 1 00:03:50.199: AS 100, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0
发现收到
MD5
加密的
Hello
数据包，并且通过本地验证，成功成为邻居关系。
下面我们在
R3
上起
Loopback
接口进行
eigrp stub
测试：
interface Loopback0
ip address 172.16.1.1 255.255.255.0
!
ip route 192.168.1.0 255.255.255.0 172.16.1.2
并且用
EIGRP
通告出去，然后在
R1
上
show ip route
：
R1#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF , IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is not set
172.16.0.0/24 is subnetted, 1 subnets
D 172.16.1.0 [90/2809856] via 199.99.1.2, 00:00:01, Serial1/0
D 199.99.2.0/24 [90/2681856] via 199.99.1.2, 00:00:30, Serial1/0
D EX 192.168.1.0/24 [170/2809856] via 199.99.1.2, 00:00:02, Serial1/0
C 199.99.1.0/24 is directly connected, Serial1/0
学到了
172.16.1.0
的路由，下面在
R3
上进行如下配置：
R3(config-router)#eigrp stub receive-only
R3(config-router)#redistribute static
配置完成后，在
R2
上会出现如下提示信息：
R2#
*Mar 1 00:06:17.959: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 199.99.2.1 (Serial1/1) is down: Interface Goodbye received
*Mar 1 00:06:19.351: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 199.99.2.1 (Serial1/1) is up: new adjacency
然后在
R1
上
show ip route
查看路由：
R1#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF , IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is not set
D 199.99.2.0/24 [90/2681856] via 199.99.1.2, 00:00:04, Serial1/0
C 199.99.1.0/24 is directly connected, Serial1/0
没有了到
172.16.1.0
的路由了，第二中
stub
配置如下：
R3(config-router)#eigrp stub connected
再到
R1
上
show ip route
：
R1#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF , IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is not set
172.16.0.0/24 is subnetted, 1 subnets
D 172.16.1.0 [90/2809856] via 199.99.1.2, 00:00:18, Serial1/0
D 199.99.2.0/24 [90/2681856] via 199.99.1.2, 00:01:50, Serial1/0
C 199.99.1.0/24 is directly connected, Serial1/0
又发现缺少了到
192.168.1.0
的路由，第三种
EIGRP stub
配置方法：
R3(config-router)#eigrp stub static
然后在
R1
上
show ip route
：
R1#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF , IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is not set
D 199.99.2.0/24 [90/2681856] via 199.99.1.2, 00:05:07, Serial1/0
C 199.99.1.0/24 is directly connected, Serial1/0
D EX 192.168.1.0/24 [170/2809856] via 199.99.1.2, 00:00:02, Serial1/0
OK
，我们发现有了一条
D EX
的路由到
192.168.1.0/24
，是作为外部路由被通告的。
实验总结：掌握
EIGRP MD5
验证的基本配置与不同
stub
区域区别与配置方法。