CCNP-4 EIGRP试验4

实验拓扑：

试验要求：1-R1,R2,R3起EIGRP路由协议，R1与R2之间配置MD5验证；
          2-把R3配置成为stub区域。
试验目的：掌握EIGRP的MD5验证方法和过程，并会配置；理解STUB区域的含义和EIGRP几种stub区域的区别，掌握EIGRP几种stub区域的配置方法。

实验配置：
R1：
interface Serial1/0
 ip address 199.99.1.1 255.255.255.0
 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 ccnp

 serial restart-delay 0
!
router eigrp 100
 network 199.99.1.0
 auto-summary

 

R2：
interface Serial1/0
 ip address 199.99.1.2 255.255.255.0
 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 ccnp

 serial restart-delay 0
 clock rate 64000
!
router eigrp 100
 network 199.99.1.0
 network 199.99.2.0
 auto-summary

 

R3：
interface Serial1/0
 ip address 199.99.2.1 255.255.255.0
 serial restart-delay 0
!
router eigrp 100
 network 172.16.1.0 0.0.0.255
 network 199.99.2.0
 no auto-summary
基本配置完成，下面在R1上debug eigrp packets查看：
R1#debug eigrp packets
EIGRP Packets debugging is on
    (UPDATE, REQUEST, QUERY, REPLY, HELLO, IPXSAP, PROBE, ACK, STUB, SIAQUERY, SIAREPLY)
R1#
*Mar  1 00:03:40.575: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 199.99.1.2 (Serial1/0) is up: new adjacency
*Mar  1 00:03:45.247: EIGRP: Sending HELLO on Serial1/0
*Mar  1 00:03:45.247:   AS 100, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0
*Mar  1 00:03:45.539: EIGRP: received packet with MD5 authentication, key id = 1

*Mar  1 00:03:45.543: EIGRP: Received HELLO on Serial1/0 nbr 199.99.1.2
*Mar  1 00:03:45.543:   AS 100, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 peerQ un/rely 0/0
*Mar  1 00:03:50.003: EIGRP: received packet with MD5 authentication, key id = 1

*Mar  1 00:03:50.007: EIGRP: Received HELLO on Serial1/0 nbr 199.99.1.2
*Mar  1 00:03:50.007:   AS 100, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 peerQ un/rely 0/0
*Mar  1 00:03:50.199: EIGRP: Sending HELLO on Serial1/0
*Mar  1 00:03:50.199:   AS 100, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0
发现收到MD5加密的Hello数据包，并且通过本地验证，成功成为邻居关系。
下面我们在R3上起Loopback接口进行eigrp stub测试：
interface Loopback0
 ip address 172.16.1.1 255.255.255.0
!
ip route 192.168.1.0 255.255.255.0 172.16.1.2
并且用EIGRP通告出去，然后在R1上show ip route：
R1#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

 

Gateway of last resort is not set

 

     172.16.0.0/24 is subnetted, 1 subnets
D       172.16.1.0 [90/2809856] via 199.99.1.2, 00:00:01, Serial1/0

D    199.99.2.0/24 [90/2681856] via 199.99.1.2, 00:00:30, Serial1/0
D EX 192.168.1.0/24 [170/2809856] via 199.99.1.2, 00:00:02, Serial1/0

C    199.99.1.0/24 is directly connected, Serial1/0
学到了172.16.1.0的路由，下面在R3上进行如下配置：
R3(config-router)#eigrp stub receive-only

R3(config-router)#redistribute static

配置完成后，在R2上会出现如下提示信息：
R2#
*Mar  1 00:06:17.959: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 199.99.2.1 (Serial1/1) is down: Interface Goodbye received
*Mar  1 00:06:19.351: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 199.99.2.1 (Serial1/1) is up: new adjacency
然后在R1上show ip route查看路由：
R1#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

 

Gateway of last resort is not set

 

D    199.99.2.0/24 [90/2681856] via 199.99.1.2, 00:00:04, Serial1/0

C    199.99.1.0/24 is directly connected, Serial1/0
没有了到172.16.1.0的路由了，第二中stub配置如下：
R3(config-router)#eigrp stub connected

再到R1上show ip route：
R1#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

 

Gateway of last resort is not set

 

     172.16.0.0/24 is subnetted, 1 subnets
D       172.16.1.0 [90/2809856] via 199.99.1.2, 00:00:18, Serial1/0

D    199.99.2.0/24 [90/2681856] via 199.99.1.2, 00:01:50, Serial1/0

C    199.99.1.0/24 is directly connected, Serial1/0
又发现缺少了到192.168.1.0的路由，第三种EIGRP stub配置方法：
R3(config-router)#eigrp stub static
然后在R1上show ip route：
R1#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

 

Gateway of last resort is not set

 

D    199.99.2.0/24 [90/2681856] via 199.99.1.2, 00:05:07, Serial1/0
C    199.99.1.0/24 is directly connected, Serial1/0
D EX 192.168.1.0/24 [170/2809856] via 199.99.1.2, 00:00:02, Serial1/0

OK，我们发现有了一条D EX的路由到192.168.1.0/24，是作为外部路由被通告的。


实验总结：掌握EIGRP MD5验证的基本配置与不同stub区域区别与配置方法。