CCNP之BSCI实验6：EIGRP验证
实验的目的：
1. 掌握EIGRP验证的配置。
实验拓扑：
实验步骤：
1． 按给出的拓扑图配置路由器的IP
2． 配置好EIGRP，自治号为1.
3． 分别在配置验证前后查看邻居和路由表
4． 先在R1上配置EIGRP验证，完后看看R1,R2的邻接关系，及EIGRP的情况。
5． 在R2上配置EIGRP验证，看看R1,R2的邻接关系，及EIGRP的情况。
r1(config)#int loo 1
r1(config-if)#ip add
*Mar 1 00:02:39.031: %LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback1, changed state to up
r1(config-if)#ip add 1.1.1.1 255.255.255.0
r1(config-if)#exit
r1(config)#do sh contr s0/0
M4T: show controller:
PAS unit 0, subunit 0, f/w version 1-45, rev ID 0x2800001, version 1
idb = 0x6414B118, ds = 0x6414C1E0, ssb=0x6414C59C
Clock mux=0x0, ucmd_ctrl=0x0, port_status=0x7B
Serial config=0x8, line config=0x200
maxdgram=1608, bufpool=78Kb, 120 particles
DCD=up DSR=up DTR=up RTS=up CTS=up
line state: down
cable type : V.11 (X.21) DCE cable, received clockrate 2015232
base0 registers=0x3C000000, base1 registers=0x3C002000
mxt_ds=0x64666130, rx ring entries=78, tx ring entries=128
rxring=0x7B237A0, rxr shadow=0x64152BF8, rx_head=9
txring=0x7B23A60, txr shadow=0x64152FD4, tx_head=9, tx_tail=9, tx_count=0
throttled=0, enabled=0
halted=0, last halt reason=0
Microcode fatal errors=0
rx_no_eop_err=0, rx_no_stp_err=0, rx_no_eop_stp_err=0
rx_no_buf=0, rx_soft_overrun_err=0, dump_err= 0, bogus=0, mxt_flags=0x0
tx_underrun_err=0, tx_soft_underrun_err=0, tx_limited=1(2)
tx_fullring=0, tx_started=9, mxt_flush_count=1
rx_int_count=9, tx_int_count=11
r1(config)#int s0/0
r1(config-if)#clo r 64000
r1(config-if)#ip add 172.16.1.1 255.255.255.0
r1(config-if)#no sh
r1(config-if)#
*Mar 1 00:03:50.579: %LINK-3-UPDOWN: Interface Serial0/0, changed state to up
*Mar 1 00:03:51.579: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0, changed state to up
r1(config-if)#
*Mar 1 00:04:15.179: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0, changed state to down
r1(config-if)#
*Mar 1 00:04:45.175: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0, changed state to up
r1(config-if)#exit
r1(config)#router eigrp 1
r1(config-router)#no au
r1(config-router)#net 1.1.1.0
r1(config-router)#net 172.16.0.0
r1(config-router)#
*Mar 1 00:05:06.859: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 1: Neighbor 172.16.1.2 (Serial0/0) is up: new adjacency
r1(config-router)#do sh ip eigrp nei
IP-EIGRP neighbors for process 1
H Address Interface Hold Uptime SRTT RTO Q Seq
(sec) (ms) Cnt Num
0 172.16.1.2 Se0/0 11 00:00:16 78 702 0 3
r1(config-router)#do sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is not set
1.0.0.0/24 is subnetted, 1 subnets
C 1.1.1.0 is directly connected, Loopback1
2.0.0.0/24 is subnetted, 1 subnets
D 2.2.2.0 [90/2297856] via 172.16.1.2, 00:00:33, Serial0/0
172.16.0.0/24 is subnetted, 1 subnets
C 172.16.1.0 is directly connected, Serial0/0配置EIGRP验证前，有到2.2.2.0这个网络的路由
r1(config-router)#exit
r1(config)#key chain hao 创建密钥
r1(config-keychain)#key 1 创建密钥1
r1(config-keychain-key)#key-string cisco 验证的密码
r1(config-keychain-key)#end
r1#conf t
*Mar 1 00:06:53.931: %SYS-5-CONFIG_I: Configured from console by console
r1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
r1(config)#int s0/0
r1(config-if)#ip authentication key-chain eigrp 1 hao 设置使用那个密钥组来做验证
r1(config-if)#ip
*Mar 1 00:07:23.479: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 1: Neighbor 172.16.1.2 (Serial0/0) is down: keychain changed
*Mar 1 00:07:24.215: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 1: Neighbor 172.16.1.2 (Serial0/0) is up: new adjacency
r1(config-if)#ip authentication mode eigrp 1 md5 设置验证方式MD5
r1(config-if)#
*Mar 1 00:07:48.495: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 1: Neighbor 172.16.1.2 (Serial0/0) is down: authentication mode changed
r1(config-if)#do sh ip eigrp nei
IP-EIGRP neighbors for process 1 未在R2上配置验证前，R1,R2邻居关系丢了
r1(config-if)#
*Mar 1 00:10:18.555: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 1: Neighbor 172.16.1.2 (Serial0/0) is up: new adjacency
r1(config-if)#do sh ip eigrp nei R1,R2都配置验证后，邻居关系正常
IP-EIGRP neighbors for process 1
H Address Interface Hold Uptime SRTT RTO Q Seq
(sec) (ms) Cnt Num
0 172.16.1.2 Se0/0 10 00:00:36 80 480 0 12
r1(config-if)#do sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is not set
1.0.0.0/24 is subnetted, 1 subnets
C 1.1.1.0 is directly connected, Loopback1
2.0.0.0/24 is subnetted, 1 subnets
D 2.2.2.0 [90/2297856] via 172.16.1.2, 00:00:40, Serial0/0
172.16.0.0/24 is subnetted, 1 subnets
C 172.16.1.0 is directly connected, Serial0/0 路由也正常
r1(config-if)#do wr
r2(config)#int loo 1
r2(config-if)#ip add 2.2.
*Mar 1 00:04:07.815: %LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback1, changed state to up
r2(config-if)#ip add 2.2.2.2 255.255.255.0
r2(config-if)#exit
r2(config)#int s0/0
r2(config-if)#ip add 172.16.1.2 255.255.255.0
r2(config-if)#no sh
r2(config-if)#exit
r2(config)#router e
*Mar 1 00:04:29.303: %LINK-3-UPDOWN: Interface Serial0/0, changed state to up
*Mar 1 00:04:30.303: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0, changed state to up
r2(config)#router eigrp 1
r2(config-router)#no au
r2(config-router)#net 2.2.2.0
r2(config-router)#net 172.16.0.0
r2(config-router)#
*Mar 1 00:05:06.423: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 1: Neighbor 172.16.1.1 (Serial0/0) is up: new adjacency
r2(config-router)#do sh ip eigrp nei
IP-EIGRP neighbors for process 1
H Address Interface Hold Uptime SRTT RTO Q Seq
(sec) (ms) Cnt Num
0 172.16.1.1 Se0/0 11 00:00:27 116 696 0 3
r2(config-router)#do sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is not set
1.0.0.0/24 is subnetted, 1 subnets
D 1.1.1.0 [90/2297856] via 172.16.1.1, 00:00:49, Serial0/0
2.0.0.0/24 is subnetted, 1 subnets
C 2.2.2.0 is directly connected, Loopback1
172.16.0.0/24 is subnetted, 1 subnets
C 172.16.1.0 is directly connected, Serial0/0
r2(config-router)#
*Mar 1 00:07:23.115: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 1: Neighbor 172.16.1.1 (Serial0/0) is down: Interface Goodbye received
*Mar 1 00:07:23.903: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 1: Neighbor 172.16.1.1 (Serial0/0) is up: new adjacency
r2(config-router)#
*Mar 1 00:07:48.131: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 1: Neighbor 172.16.1.1 (Serial0/0) is down: Auth failure
r2(config-router)#do sh ip eigrp nei
IP-EIGRP neighbors for process 1
r2(config-router)#exit
r2(config)#key chain hao
r2(config-keychain)#key 1
r2(config-keychain-key)#key-string cisco
r2(config-keychain-key)#exit
r2(config-keychain)#exit
r2(config)#int s0/0
r2(config-if)#ip authencation key-chain eigrp 1 hao
^
% Invalid input detected at '^' marker.
r2(config-if)#ip authentication key-chain eigrp 1 hao
r2(config-if)#ip authentication mod eigrp 1 md5
r2(config-if)#
*Mar 1 00:10:18.107: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 1: Neighbor 172.16.1.1 (Serial0/0) is up: new adjacency
r2(config-if)#
r2(config-if)#do sh ip eigrp nei
IP-EIGRP neighbors for process 1
H Address Interface Hold Uptime SRTT RTO Q Seq
(sec) (ms) Cnt Num
0 172.16.1.1 Se0/0 10 00:00:23 99 594 0 12
r2(config-if)#do wr
本文转自gauyanm 51CTO博客，原文链接：http://blog.51cto.com/gauyanm/288506，如需转载请自行联系原作者
