CCIE-EIGRP經(jīng)典實驗
需求:按照如下拓?fù)鋱D配置好接口地址和EIGRP100(R1到R5五個路由器都啟用環(huán)回lo0，R1:Lo0:1.1.1.1/24R2:Lo0:2.2.2.2/24以此類推)
1:在R4做DHCP服務(wù)，要求R1和R3的f0/0地址要自動獲取
2:R2的S1/1的帶寬改為700K，修改R2的S1/0接口的hello-time為20S,R2的Lo不能收發(fā)任何EIGRP路由更新
3:必須確保R2的EIGRP在S1/1能使用到最少70K的帶寬
4:為了安全起見，R1和R2之間不允許用組播建立鄰居且啟用EIGRP的MD5認(rèn)證(keychain=ccie,key-string=cisco)
5:R3啟用loopback1:200.200.200.1/24,不通告進(jìn)EIGRP100進(jìn)程去但是要求全網(wǎng)都能訪問這個R3環(huán)回L1(R1,R2,R4,R5是顯示D*0.0.0.0[90/XXX])
6:用最小的命令行在R4增加七個interface地址,地址為172.16.1.1/24---172.16.7.1/24(且這7條路由在R5顯示DEX)
7:R1，R2，R3，R5只能收到R4的七個interface地址的一條匯總路由
8:R5為EIGRPstub,只通告直連
9:要求從R2telnet到R5的5.5.5.5環(huán)回，登陸進(jìn)去的時候卻是登陸到了R4上
10:要求從R2到R4形成非等價負(fù)載均衡
配置解析:
1:基本的由配置將不再給出,這里，我們來看一下DHCP的配置：
R2的配置:
R1#shrunintf0/0
Buildingconfiguration...
Currentconfiguration:63bytes
!
interfaceFastEthernet0/0
ipaddressdhcp
duplexhalf
end
R1#shipintbri
InterfaceIP-AddressOK?MethodStatusProtocol
FastEthernet0/0134.1.1.1YESDHCPupup
R3的配置:
R3#shrunintf0/0
Buildingconfiguration...
Currentconfiguration:63bytes
!
interfaceFastEthernet0/0
ipaddressdhcp
duplexhalf
end
R3#shipintbri
InterfaceIP-AddressOK?MethodStatusProtocol
FastEthernet0/0134.1.1.2YESDHCPupup
R4的配置:
R4#shrun
Buildingconfiguration...
!
noipdomainlookup
noipdhcpconflictlogging
ipdhcpexcluded-address134.1.1.4
!
ipdhcppoolccie
network134.1.1.0255.255.255.0
default-router134.1.1.4
dns-server202.96.128.68
lease10
!
interfaceFastEthernet0/0
ipaddress134.1.1.4255.255.255.0
duplexhalf
R4#shipintbri
InterfaceIP-AddressOK?MethodStatusProtocol
FastEthernet0/0134.1.1.4YESmanualupup
2:修改帶寬和Hello-time時間并不難，但是要注意，這里修改了Hello-time時間，要把hold-time時間也要修改過來，保持3倍的關(guān)系,L0口不能收發(fā)任何的路由更新，也就是要將這個口設(shè)置成passive-interface.
R2的配置:
R2#shrunints1/0
Buildingconfiguration...
Currentconfiguration:145bytes
!
interfaceSerial1/0
ipaddress12.1.1.2255.255.255.0
iphello-intervaleigrp10020
iphold-timeeigrp10060
serialrestart-delay0
end
R2#shrunints1/1
Buildingconfiguration...
Currentconfiguration:101bytes
!
interfaceSerial1/1
bandwidth700
ipaddress23.1.1.2255.255.255.0
serialrestart-delay0
end
R2#shrun|bre
routereigrp100
passive-interfaceLoopback0
network2.2.2.20.0.0.0
network12.1.1.20.0.0.0
network23.1.1.20.0.0.0
noauto-summary
3:在上一個需求中，我們已將R2的s1/1口的帶修改為700K，在使用命令時，已設(shè)置成10%
R2的配置:
R2#shrunints1/1
Buildingconfiguration...
Currentconfiguration:136bytes
!
interfaceSerial1/1
bandwidth700
ipaddress23.1.1.2255.255.255.0
ipbandwidth-percenteigrp10010
serialrestart-delay0
end
4:在EIGRP環(huán)境中，是使用組播地址為224.0.0.1進(jìn)行路由的更新的，要進(jìn)行單播更新，就要使用命令neighbor來進(jìn)行指定鄰居.對于MD5的認(rèn)證，可以參見前面的一些配置案例。
R1的配置:
R1#shrun
Buildingconfiguration...
!
keychainccie
key1
key-string70822455D0A16
R1#shrunints1/1
Buildingconfiguration...
Currentconfiguration:168bytes
!
interfaceSerial1/1
ipaddress12.1.1.1255.255.255.0
ipauthenticationmodeeigrp100md5
ipauthenticationkey-chaineigrp100ccie
serialrestart-delay0
end
R1#shrun|bre
routereigrp100
network1.1.1.10.0.0.0
network12.1.1.10.0.0.0
network134.1.1.00.0.0.255
neighbor12.1.1.2Serial1/1
noauto-summary
R2的配置:
R2#shrun
Buildingconfiguration...
!
keychainccie
key1
key-string7060506324F41
R2#shrunints1/0
Buildingconfiguration...
Currentconfiguration:227bytes
!
interfaceSerial1/0
ipaddress12.1.1.2255.255.255.0
iphello-intervaleigrp10020
iphold-timeeigrp10060
ipauthenticationmodeeigrp100md5
ipauthenticationkey-chaineigrp100ccie
serialrestart-delay0
end
R2#shrun|bre
routereigrp100
passive-interfaceLoopback0
network2.2.2.20.0.0.0
network12.1.1.20.0.0.0
network23.1.1.20.0.0.0
neighbor12.1.1.1Serial1/0
noauto-summary
這時，我們來看一看在R1上的debug信息:
R1#debeipacup
EIGRPPacketsdebuggingison
(UPDATE)
R1#
*Nov117:00:02.067:EIGRP:receivedpacketwithMD5authentication,keyid=1
*Nov117:00:02.067:EIGRP:ReceivedUPDATEonSerial1/1nbr12.1.1.2
*Nov117:00:02.067:AS100,Flags0x9,Seq46/0idbQ0/0
R1#
*Nov117:00:05.067:EIGRP:receivedpacketwithMD5authentication,keyid=1
*Nov117:00:05.067:EIGRP:ReceivedUPDATEonSerial1/1nbr12.1.1.2
*Nov117:00:05.067:AS100,Flags0x9,Seq46/0idbQ0/0
R1#shipeinei
IP-EIGRPneighborsforprocess100
HAddressInterfaceHoldUptimeSRTTRTOQSeq
(sec)(ms)CntNum
012.1.1.2Se1/14600:06:2413385000047
2134.1.1.4Fa0/01100:36:4878468024
1134.1.1.2Fa0/01100:37:28108648045
5:在進(jìn)行路由通告的時候有五種方法，每一種方法路由表的顯示都是不一樣的，這里我們采用匯總地址進(jìn)行通告
R3的配置:
R3#shrunints1/0
Buildingconfiguration...
Currentconfiguration:134bytes
!
interfaceSerial1/0
ipaddress23.1.1.3255.255.255.0
ipsummary-addresseigrp1000.0.0.00.0.0.05
serialrestart-delay0
end
#p#
我們來看一看R2和R5的路由表:
R2#shiproei
1.0.0.0/24issubnetted,1subnets
D1.1.1.0[90/2297856]via12.1.1.1,00:20:48,Serial1/0
3.0.0.0/24issubnetted,1subnets
D3.3.3.0[90/2300416]via12.1.1.1,00:00:26,Serial1/0
4.0.0.0/24issubnetted,1subnets
D4.4.4.0[90/2300416]via12.1.1.1,00:12:47,Serial1/0
5.0.0.0/24issubnetted,1subnets
D5.5.5.0[90/2812416]via12.1.1.1,00:12:28,Serial1/0
134.1.0.0/24issubnetted,1subnets
D134.1.1.0[90/2172416]via12.1.1.1,00:32:22,Serial1/0
45.0.0.0/24issubnetted,1subnets
D45.1.1.0[90/2684416]via12.1.1.1,00:12:47,Serial1/0
D*0.0.0.0/0[90/4171520]via23.1.1.3,00:00:31,Serial1/1
R5#shiproei
1.0.0.0/24issubnetted,1subnets
D1.1.1.0[90/2300416]via45.1.1.4,00:12:58,Serial1/0
2.0.0.0/24issubnetted,1subnets
D2.2.2.0[90/2812416]via45.1.1.4,00:12:58,Serial1/0
3.0.0.0/24issubnetted,1subnets
D3.3.3.0[90/2300416]via45.1.1.4,00:00:57,Serial1/0
4.0.0.0/24issubnetted,1subnets
D4.4.4.0[90/2297856]via45.1.1.4,00:12:58,Serial1/0
23.0.0.0/24issubnetted,1subnets
D23.1.1.0[90/2684416]via45.1.1.4,00:00:57,Serial1/0
12.0.0.0/24issubnetted,1subnets
D12.1.1.0[90/2684416]via45.1.1.4,00:12:58,Serial1/0
134.1.0.0/24issubnetted,1subnets
D134.1.1.0[90/2172416]via45.1.1.4,00:12:58,Serial1/0
D*0.0.0.0/0[90/5198080]via45.1.1.4,00:01:02,Serial1/0
R2#shipeito
IP-EIGRPTopologyTableforAS(100)/ID(2.2.2.2)
Codes:P-Passive,A-Active,U-Update,Q-Query,R-Reply,
r-replyStatus,s-siaStatus
P0.0.0.0/0,1successors,FDis2174976
via12.1.1.1(2174976/30720),Serial1/0
via23.1.1.3(4171520/28160),Serial1/1
P1.1.1.0/24,1successors,FDis2297856
via12.1.1.1(2297856/128256),Serial1/0
P2.2.2.0/24,1successors,FDis128256
viaConnected,Loopback0
P4.4.4.0/24,1successors,FDis2300416
via12.1.1.1(2300416/156160),Serial1/0
P5.5.5.0/24,1successors,FDis2812416
via12.1.1.1(2812416/2300416),Serial1/0
P12.1.1.0/24,1successors,FDis2169856
viaConnected,Serial1/0
P23.1.1.0/24,1successors,FDis4168960
viaConnected,Serial1/1
P45.1.1.0/24,1successors,FDis2684416
via12.1.1.1(2684416/2172416),Serial1/0
P134.1.1.0/24,1successors,FDis2172416
Codes:P-Passive,A-Active,U-Update,Q-Query,R-Reply,
r-replyStatus,s-siaStatus
via12.1.1.1(2172416/28160),Serial1/0
P172.16.0.0/21,1successors,FDis2300416
via12.1.1.1(2300416/156160),Serial1/0
這里，你會發(fā)現(xiàn)，R2到達(dá)5.5.5.0網(wǎng)絡(luò)的路由沒有出現(xiàn)負(fù)載均衡的情況，要出現(xiàn)可以在f0/0上做默認(rèn)路由的重分發(fā)(這里要去掉R3的s1/0口的匯總)
R3的配置:
R3#shrunintf0/0
Buildingconfiguration...
Currentconfiguration:111bytes
!
interfaceFastEthernet0/0
ipaddressdhcp
ipsummary-addresseigrp1000.0.0.00.0.0.05
duplexhalf
end
R2#shipeito
IP-EIGRPTopologyTableforAS(100)/ID(2.2.2.2)
Codes:P-Passive,A-Active,U-Update,Q-Query,R-Reply,
r-replyStatus,s-siaStatus
P0.0.0.0/0,1successors,FDis2174976
via12.1.1.1(2174976/30720),Serial1/0
P1.1.1.0/24,1successors,FDis2297856
via12.1.1.1(2297856/128256),Serial1/0
via23.1.1.3(4299520/156160),Serial1/1
P2.2.2.0/24,1successors,FDis128256
viaConnected,Loopback0
P3.3.3.0/24,1successors,FDis2300416
via23.1.1.3(4296960/128256),Serial1/1
P4.4.4.0/24,1successors,FDis2300416
via12.1.1.1(2300416/156160),Serial1/0
via23.1.1.3(4299520/156160),Serial1/1
P5.5.5.0/24,1successors,FDis2812416
via12.1.1.1(2812416/2300416),Serial1/0
via23.1.1.3(4811520/2300416),Serial1/1
P12.1.1.0/24,1successors,FDis2169856
viaConnected,Serial1/0
P23.1.1.0/24,1successors,FDis4168960
Codes:P-Passive,A-Active,U-Update,Q-Query,R-Reply,
r-replyStatus,s-siaStatus
viaConnected,Serial1/1
P45.1.1.0/24,1successors,FDis2684416
via12.1.1.1(2684416/2172416),Serial1/0
via23.1.1.3(4683520/2172416),Serial1/1
P134.1.1.0/24,1successors,FDis2172416
via12.1.1.1(2172416/28160),Serial1/0
via23.1.1.3(4171520/28160),Serial1/1
P172.16.0.0/21,1successors,FDis2300416
via12.1.1.1(2300416/156160),Serial1/0
via23.1.1.3(4299520/156160),Seria
6:最小的命令增加地址用第二地址的命令來做，而要實現(xiàn)上述的重分發(fā)的需求，要使用重分發(fā)直連網(wǎng)絡(luò)
R4#shrunintlo0
Buildingconfiguration...
Currentconfiguration:390bytes
!
interfaceLoopback0
ipaddress172.16.1.1255.255.255.0secondary
ipaddress172.16.2.1255.255.255.0secondary
ipaddress172.16.3.1255.255.255.0secondary
ipaddress172.16.4.1255.255.255.0secondary
ipaddress172.16.5.1255.255.255.0secondary
ipaddress172.16.6.1255.255.255.0secondary
ipaddress172.16.7.1255.255.255.0secondary
ipaddress4.4.4.4255.255.255.0
end
R4#shrun|bre
routereigrp100
redistributeconnected
network4.4.4.40.0.0.0
network45.1.1.40.0.0.0
network134.1.1.00.0.0.255
noauto-summary
我們來看一看R5的路由表:
R5#shiproei
1.0.0.0/24issubnetted,1subnets
D1.1.1.0[90/2300416]via45.1.1.4,00:48:07,Serial1/0
2.0.0.0/24issubnetted,1subnets
D2.2.2.0[90/2812416]via45.1.1.4,00:48:07,Serial1/0
4.0.0.0/24issubnetted,1subnets
D4.4.4.0[90/2297856]via45.1.1.4,00:01:59,Serial1/0
23.0.0.0/24issubnetted,1subnets
D23.1.1.0[90/5195520]via45.1.1.4,00:06:47,Serial1/0
172.16.0.0/24issubnetted,7subnets
DEX172.16.4.0[170/2297856]via45.1.1.4,00:01:14,Serial1/0
DEX172.16.5.0[170/2297856]via45.1.1.4,00:01:14,Serial1/0
DEX172.16.6.0[170/2297856]via45.1.1.4,00:01:14,Serial1/0
DEX172.16.7.0[170/2297856]via45.1.1.4,00:01:14,Serial1/0
DEX172.16.1.0[170/2297856]via45.1.1.4,00:01:14,Serial1/0
DEX172.16.2.0[170/2297856]via45.1.1.4,00:01:14,Serial1/0
DEX172.16.3.0[170/2297856]via45.1.1.4,00:01:14,Serial1/0
12.0.0.0/24issubnetted,1subnets
D12.1.1.0[90/2684416]via45.1.1.4,00:29:36,Serial1/0
134.1.0.0/24issubnetted,1subnets
D134.1.1.0[90/2172416]via45.1.1.4,00:48:07,Serial1/0
D*0.0.0.0/0[90/2174976]via45.1.1.4,00:06:41,Serial1/0
7:要在另外幾臺路由器看一條匯總路由，只要在R4的s1/1和f0/0兩個接口做匯總即可。
R4的配置:
R4#shrunintf0/0
Buildingconfiguration...
Currentconfiguration:139bytes
!
interfaceFastEthernet0/0
ipaddress134.1.1.4255.255.255.0
ipsummary-addresseigrp100172.16.0.0255.255.248.05
duplexhalf
end
R4#shrunints1/1
Buildingconfiguration...
Currentconfiguration:143bytes
!
interfaceSerial1/1
ipaddress45.1.1.4255.255.255.0
ipsummary-addresseigrp100172.16.0.0255.255.248.05
serialrestart-delay0
end
我們再來看一看R2和R5的路由表:
R2#shiproei
1.0.0.0/24issubnetted,1subnets
D1.1.1.0[90/2297856]via12.1.1.1,00:08:27,Serial1/0
4.0.0.0/24issubnetted,1subnets
D4.4.4.0[90/2300416]via12.1.1.1,00:00:26,Serial1/0
5.0.0.0/24issubnetted,1subnets
D5.5.5.0[90/2812416]via12.1.1.1,00:00:06,Serial1/0
172.16.0.0/21issubnetted,1subnets
D172.16.0.0[90/2300416]via12.1.1.1,00:00:26,Serial1/0
134.1.0.0/24issubnetted,1subnets
D134.1.1.0[90/2172416]via12.1.1.1,00:20:01,Serial1/0
45.0.0.0/24issubnetted,1subnets
D45.1.1.0[90/2684416]via12.1.1.1,00:00:26,Serial1/0
D*0.0.0.0/0[90/2174976]via12.1.1.1,00:08:10,Serial1/0
R5#shiproei
1.0.0.0/24issubnetted,1subnets
D1.1.1.0[90/2300416]via45.1.1.4,00:00:11,Serial1/0
2.0.0.0/24issubnetted,1subnets
D2.2.2.0[90/2812416]via45.1.1.4,00:00:11,Serial1/0
4.0.0.0/24issubnetted,1subnets
D4.4.4.0[90/2297856]via45.1.1.4,00:00:11,Serial1/0
23.0.0.0/24issubnetted,1subnets
D23.1.1.0[90/5195520]via45.1.1.4,00:00:11,Serial1/0
172.16.0.0/21issubnetted,1subnets
D172.16.0.0[90/2297856]via45.1.1.4,00:00:11,Serial1/0
12.0.0.0/24issubnetted,1subnets
D12.1.1.0[90/2684416]via45.1.1.4,00:00:11,Serial1/0
134.1.0.0/24issubnetted,1subnets
D134.1.1.0[90/2172416]via45.1.1.4,00:00:11,Serial1/0
D*0.0.0.0/0[90/2174976]via45.1.1.4,00:00:11,Serial1/0
8:配置Stub比較簡單，不在多說！
R5的配置:
R5#shrun|bre
routereigrp100
network5.5.5.50.0.0.0
network45.1.1.50.0.0.0
noauto-summary
eigrpstubconnected
9:要實現(xiàn)這個需求，可以有多種方法，在此，我使用NAT來實現(xiàn):
R4的配置:
R4#shrunintf0/0
Buildingconfiguration...
Currentconfiguration:155bytes
!
interfaceFastEthernet0/0
ipaddress134.1.1.4255.255.255.0
ipnatoutside
ipsummary-addresseigrp100172.16.0.0255.255.248.05
duplexhalf
end
R4#shrunints1/1
Buildingconfiguration...
Currentconfiguration:158bytes
!
interfaceSerial1/1
ipaddress45.1.1.4255.255.255.0
ipnatinside
ipsummary-addresseigrp100172.16.0.0255.255.248.05
serialrestart-delay0
end
R4#shrun|bre
routereigrp100
redistributeconnected
network4.4.4.40.0.0.0
network45.1.1.40.0.0.0
network134.1.1.00.0.0.255
noauto-summary
!
ipnatinsidesourcestatic4.4.4.45.5.5.5
我們來在R2上telnet到R5：
R2#telnet5.5.5.5/source-interfaceloopback0
Trying5.5.5.5...Open
UserAccessVerification
Password:
R4#
10:配置不在多說，參見前面的配置案例
R2的配置:
R2#shrun|bre
routereigrp100
variance15
passive-interfaceLoopback0
network2.2.2.20.0.0.0
network12.1.1.20.0.0.0
network23.1.1.20.0.0.0
neighbor12.1.1.1Serial1/0
noauto-summary
我們再來看一看R2到達(dá)R4的路由:
R2#shipro4.4.4.0255.255.255.0
Routingentryfor4.4.4.0/24
Knownvia"eigrp100",distance90,metric2300416,typeinternal
Redistributingviaeigrp100
Lastupdatefrom23.1.1.3onSerial1/1,00:01:54ago
RoutingDescriptorBlocks:
*12.1.1.1,from12.1.1.1,00:01:54ago,viaSerial1/0
Routemetricis2300416,trafficsharecountis15
Totaldelayis25100microseconds,minimumbandwidthis1544Kbit
Reliability255/255,minimumMTU1500bytes
Loading1/255,Hops2
23.1.1.3,from23.1.1.3,00:01:54ago,viaSerial1/1
Routemetricis4299520,trafficsharecountis8
Totaldelayis25100microseconds,minimumbandwidthis700Kbit
Reliability255/255,minimumMTU1500bytes
Loading1/255,Hops2
R2#shiproei
4.0.0.0/24issubnetted,1subnets
D4.4.4.0[90/2300416]via12.1.1.1,00:02:17,Serial1/0
[90/4299520]via23.1.1.3,00:02:17,Serial1/1
【編輯推薦】
