拓扑图:
实验说明:采用三层架构,R1和R2为总部,R3和R4为区域,R5和R6为分支机构,R7模拟Internet路由器
R2和R3儿童s0/3连接,R1和R4用s0/1连接,上图有误
实验要求:
1.分支到达总部或者其他区域要使用R1做为主链路,R2成为备用链路
2.IP编址的层次化,要能实现路由汇总
3.把分支机构的路由器做为Stub节点,避免其他路由器向分支发送查询
4.将R7做为Internet路由器,由R2发送一条默认路由到其他分站点
5.在R1和R2之间完成验证
步骤:
1.配置IP地址以及EIGRP路由
2.在R6 扩展PING172.12.0.1
Reply to request 3 (56 ms). Received packet has options
Total option bytes= 40, padded length=40
Record route:
(172.13.36.6)
(172.13.0.3)
(172.12.0.1)
(172.13.0.1)
(172.13.36.3)
(172.13.36.6) <*>
(0.0.0.0)
(0.0.0.0)
(0.0.0.0)
End of list
Reply to request 4 (56 ms). Received packet has options
Total option bytes= 40, padded length=40
Record route:
(172.13.36.6)
(172.23.0.3)
(172.12.0.2)
(172.12.0.1)
(172.13.0.1)
(172.13.36.3)
(172.13.36.6) <*>
(0.0.0.0)
(0.0.0.0)
End of list
可以看到R6到172.12.0.0的网段负载均衡,分别走R1和R2到达
修改R2的s0/0 s0/3两条链路的带宽
看R3的路由
修改前的路由
R3#show ip route
172.12.0.0/24 is subnetted, 1 subnets
D 172.12.0.0 [90/2195456] via 172.23.0.2, 00:00:15, Serial0/3
[90/2195456] via 172.13.0.1, 00:00:15, Serial0/0
修改后的路由
R3#show ip route
172.12.0.0/24 is subnetted, 1 subnets
D 172.12.0.0 [90/2195456] via 172.13.0.1, 00:00:10, Serial0/0
在R6上再次实现扩展PING
Reply to request 0 (128 ms). Received packet has options
Total option bytes= 40, padded length=40
Record route:
(172.13.36.6)
(172.13.0.3)
(172.12.0.1)
(172.13.0.1)
(172.13.36.3)
(172.13.36.6) <*>
(0.0.0.0)
(0.0.0.0)
(0.0.0.0)
End of list
可以看到所有到172.12.0.0网段的数据都走R1而不会走R2
2.路由汇总
在R5和R6建立环回口,接口地址在56.1.0.0/16的网段
看R1的路由表
R1#show ip route
56.0.0.0/24 is subnetted, 4 subnets
D 56.1.1.0 [90/2809856] via 172.13.0.3, 00:00:57, Serial0/0
D 56.1.3.0 [90/2809856] via 172.13.0.3, 00:00:18, Serial0/0
D 56.1.2.0 [90/2809856] via 172.13.0.3, 00:00:57, Serial0/0
D 56.1.4.0 [90/2809856] via 172.13.0.3, 00:00:18, Serial0/0
在R3汇总56.1.0.0/16的路由
看R1的路由表
R1#show ip route
D 56.1.0.0 [90/2809856] via 172.13.0.3, 00:00:19, Serial0/0
R1#ping 56.1.4.6
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 56.1.4.6, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 68/94/120 ms
3.在此拓扑中,假设不把把R4设成stub,断开R1的e1/0
Mar 1 01:08:26.563: IP-EIGRP(Default-IP-Routing-Table:90): Processing incoming QUERY packet
*Mar 1 01:08:26.563: IP-EIGRP(Default-IP-Routing-Table:90): Int 172.12.0.0/24 M 4294967295 - 0 4294967295 SM 4294967295 - 0 4294967295
把R4设置成Stub,不会收到查询包了
R4#
*Mar 1 01:11:54.771: IP-EIGRP(Default-IP-Routing-Table:90): Processing incoming UPDATE packet
*Mar 1 01:11:54.775: IP-EIGRP(Default-IP-Routing-Table:90): Int 172.12.0.0/24 M 4121600 - 2560000 1561600 SM 3609600 - 2560000 1049600
4.默认路由
取消Stub配置
R2: ip route 0.0.0.0 0.0.0.0 200.1.1.7
R2(config)#router eigrp 90
R2(config-router)#redistribute static
看R6的路由表
R6#show ip route
D*EX 0.0.0.0/0 [170/2733056] via 172.13.36.3, 00:00:09, Serial0/2
5.在R1和R2之间配置验证
key chain cisco
key 1
key-string 123456
ip authentication mode eigrp 90 md5
ip authentication key-chain eigrp 90 cisco