CCIE-EIGRP经典实验(1)

taike

http://www.tklab.cn

CCIE-EIGRP经典实验(1)

ccie培训需求:按照如下拓扑图配置好接口地址和EIGRP100(R1到R5五个路由器都启用环回lo0，R1o0:1.1.1.1/24R2o0:2.2.2.2/24以此类推)

1:在R4做DHCP服务，要求R1和R3的f0/0地址要自动获取

2:R2的S1/1的带宽改为700K，修改R2的S1/0接口的hello-time为20S,R2的Lo不能收发任何EIGRP路由更新

3:必须确保R2的EIGRP在S1/1能使用到最少70K的带宽

4:为了安全起见，R1和R2之间不允许用组播建立邻居且启用EIGRP的MD5认证(keychain=ccie,key-string=cisco)

5:R3启用loopback1:200.200.200.1/24,不通告进EIGRP100进程去但是要求全网都能访问这个R3环回L1(R1,R2,R4,R5是显示D*0.0.0.0[90/XXX])

6:用最小的命令行在R4增加七个interface地址,地址为172.16.1.1/24---172.16.7.1/24(且这7条路由在R5显示DEX)

7:R1，R2，R3，R5只能收到R4的七个interface地址的一条汇总路由

8:R5为EIGRPstub,只通告直连

9:要求从R2telnet到R5的5.5.5.5环回，登陆进去CCIE培训的时候却是登陆到了R4上

10:要求从R2到R4形成非等价负载均衡

配置解析:

1:基本的由配置将不再给出,这里，我们来看一下DHCP的配置：

R2的配置:

R1#shrunintf0/0

Buildingconfiguration...

Currentconfiguration:63bytes

!

interfaceFastEthernet0/0

ipaddressdhcp

duplexhalf

end

R1#shipintbri

InterfaceIP-AddressOK?MethodStatusProtocol

FastEthernet0/0134.1.1.1YESDHCPupup

R3的配置:

R3#shrunintf0/0

Buildingconfiguration...

Currentconfiguration:63bytes

!

interfaceFastEthernet0/0

ipaddressdhcp

duplexhalf

end

R3#shipintbri

InterfaceIP-AddressOK?MethodStatusProtocol

FastEthernet0/0134.1.1.2YESDHCPupup

R4的配置:

R4#shrun

Buildingconfiguration...

!

noipdomainlookup

noipdhcpconflictlogging

ipdhcpexcluded-address134.1.1.4

!

ipdhcppoolccie

network134.1.1.0255.255.255.0

default-router134.1.1.4

dns-server202.96.128.68

lease10

!

interfaceFastEthernet0/0

ipaddress134.1.1.4255.255.255.0

duplexhalf

R4#shipintbri

InterfaceIP-AddressOK?MethodStatusProtocol

FastEthernet0/0134.1.1.4YESmanualupup

2:修改带宽和Hello-time时间并不难，ccie但是要注意，这里修改了Hello-time时间，要把hold-time时间也要修改过来，保持3倍的关系,L0口不能收发任何的路由CCIE培训更新，也就是要将这个口设置成passive-interface.

R2的配置:

R2#shrunints1/0

Buildingconfiguration...

Currentconfiguration:145bytes

!

interfaceSerial1/0

ipaddress12.1.1.2255.255.255.0

iphello-intervaleigrp10020

iphold-timeeigrp10060

serialrestart-delay0

end

R2#shrunints1/1

Buildingconfiguration...

Currentconfiguration:101bytes

!

interfaceSerial1/1

bandwidth700

ipaddress23.1.1.2255.255.255.0

serialrestart-delay0

end

R2#shrun|bre

routereigrp100

passive-interfaceLoopback0

network2.2.2.20.0.0.0

network12.1.1.20.0.0.0

network23.1.1.20.0.0.0

noauto-summary

3:在上一个需求中，我们已将R2的s1/1口的带修改为700K，在使用命令时，已设置成10%

R2的配置:

R2#shrunints1/1

Buildingconfiguration...

Currentconfiguration:136bytes

!

interfaceSerial1/1

bandwidth700

ipaddress23.1.1.2255.255.255.0

ipbandwidth-percenteigrp10010

serialrestart-delay0

end

4:在EIGRP环境中，是使用组播地址为224.0.0.1进行路由的更新的，要进行单播更新，就要使用命令neighbor来进行指定邻居.对于MD5的认证，ccie可以参见前面的一些配置案例。

R1的配置:

R1#shrun

Buildingconfiguration...

!

keychainccie

key1

key-string70822455D0A16

R1#shrunints1/1

Buildingconfiguration...

Currentconfiguration:168bytes

!

interfaceSerial1/1

ipaddress12.1.1.1255.255.255.0

ipauthenticationmodeeigrp100md5

ipauthenticationkey-chaineigrp100ccie

serialrestart-delay0

end

R1#shrun|bre

routereigrp100

network1.1.1.10.0.0.0

network12.1.1.10.0.0.0

network134.1.1.00.0.0.255

neighbor12.1.1.2Serial1/1

noauto-summary

R2的配置:

R2#shrun

Buildingconfiguration...

!

keychainccie

key1

key-string7060506324F41

R2#shrunints1/0

Buildingconfiguration...

Currentconfiguration:227bytes

!

interfaceSerial1/0

ipaddress12.1.1.2255.255.255.0

iphello-intervaleigrp10020

iphold-timeeigrp10060

ipauthenticationmodeeigrp100md5

ipauthenticationkey-chaineigrp100ccie

serialrestart-delay0

end

R2#shrun|bre

routereigrp100

passive-interfaceLoopback0

network2.2.2.20.0.0.0

network12.1.1.20.0.0.0

network23.1.1.20.0.0.0

neighbor12.1.1.1Serial1/0

noauto-summary

这时，我们来看一看在R1上的debug信息:

R1#debeipacup

EIGRPPacketsdebuggingison

(UPDATE)

R1#

*Nov117:00:02.067:EIGRP:receivedpacketwithMD5authentication,keyid=1

*Nov117:00:02.067:EIGRP:ReceivedUPDATEonSerial1/1nbr12.1.1.2

*Nov117:00:02.067:AS100,Flags0x9,Seq46/0idbQ0/0

R1#

*Nov117:00:05.067:EIGRP:receivedpacketwithMD5authentication,keyid=1

*Nov117:00:05.067:EIGRP:ReceivedUPDATEonSerial1/1nbr12.1.1.2

*Nov117:00:05.067:AS100,Flags0x9,Seq46/0idbQ0/0

R1#shipeinei

IP-EIGRPneighborsforprocess100

HAddressInterfaceHoldUptimeSRTTRTOQSeq

(sec)(ms)CntNum

012.1.1.2Se1/14600:06:2413385000047

2134.1.1.4Fa0/01100:36:4878468024

1134.1.1.2Fa0/01100:37:28108648045

5:在进行路由通告的时候有五种方法，每一种方法路由表CCIE培训的显示都是不一样的，这里我们采用汇总地址进行通告

R3的配置:

R3#shrunints1/0

Buildingconfiguration...

Currentconfiguration:134bytes

!

interfaceSerial1/0

ipaddress23.1.1.3255.255.255.0

ipsummary-addresseigrp1000.0.0.00.0.0.05

serialrestart-delay0

end
欢迎大家继续关注CCIE培训的网站，希望大家能从泰克的网站学到更多的知识。