最近看一個老師講EIGRP,留了一個綜合實驗,感覺很有意思,給大家分享一下:
實驗需求:
1:R1,2,3,5運行EIGRP100,且關閉自動彙總;
2:指定route-id爲環回口;
3:R1不能從環回口接收和發送任何EIGRP信息;
4:運行EIGRP100的路由器,HOP count超過10,路由信息將無效;
5:R1,2,3hello時間10S。Dead時間30S;
6:幀中繼網絡中使用認證,key-chain=killccie key=10 password=killccie10;
7:當R2,3的以太網斷掉,保證R2,3的環回口可以通信;
8:R1環回口down,發出query包,2分鐘得不到迴應就重置鄰居關係;
9:R5,6串行鏈路封裝PPP,CHAP認證,單播建立EIGRP 200鄰居;
10:EIGRP關閉自動彙總,不可以出現32位路由;
11:R5在EIGRP200中只用bandwidth決定metric;
12:R6,5之間帶寬修改爲700K,EIGRP使用70K的帶寬;
13:R5做EIGRP雙向重分佈;
14:R1的loopback14修改delay爲100,要求R2,3看到一條彙總路由,驗證metric爲最小的 那個;
15:在R6環回口創建多地址,並通告進RIPV2;
16:在R5上看到DX的R6路由,R2,3只能看到D的路由;
17:R3啓用環回口不通告進EIGRP100中,但要求全網能夠訪問,要求使用ip default-network;
18:在R6上,只允許R1的loopback100能telnetR6的6.6.6.6;
19:配置R6不接收任何EIGRP200的QUERY;
20:R6可以給EIGRP200的鄰居發送直連,彙總,重分佈的信息。
聲明下我做的時候修改了EIGRP100爲90,200爲100,大家看下配置:
R1#show running-config
key chain killccie
key 10
key-string killccie10
interface Loopback10
ip address 1.1.1.1 255.255.255.0
delay 100
interface Loopback11
ip address 1.3.1.1 255.255.255.0
interface Loopback12
ip address 1.4.1.1 255.255.255.0
interface Loopback14
ip address 1.2.1.1 255.255.255.0
interface Loopback100
ip address 11.11.11.11 255.255.255.0
interface Serial1/2
ip address 123.1.1.1 255.255.255.0
ip hello-interval eigrp 90 10
ip hold-time eigrp 90 30
ip authentication mode eigrp 90 md5
ip authentication key-chain eigrp 90 killccie
encapsulation frame-relay
ip summary-address eigrp 90 1.0.0.0 255.0.0.0 5
serial restart-delay 0
router eigrp 90
timers active-time 2
passive-interface default
no passive-interface Serial1/2
network 1.1.1.1 0.0.0.0
network 1.2.1.0 0.0.0.255
network 1.3.1.1 0.0.0.0
network 1.4.1.1 0.0.0.0
network 11.11.11.11 0.0.0.0
network 123.1.1.0 0.0.0.255
metric maximum-hops 10
no auto-summary
eigrp router-id 1.1.1.1
R2#show running-config
key chain killccie
key 10
key-string killccie10
interface Loopback10
ip address 2.2.2.2 255.255.255.0
interface FastEthernet0/0
ip address 90.1.1.2 255.255.255.0
interface Serial1/2
ip address 123.1.1.2 255.255.255.0
ip hello-interval eigrp 90 10
ip hold-time eigrp 90 30
ip authentication mode eigrp 90 md5
ip authentication key-chain eigrp 90 killccie
encapsulation frame-relay
router eigrp 90
network 2.0.0.0
network 90.1.1.2 0.0.0.0
network 123.1.1.0 0.0.0.255
metric maximum-hops 10
no auto-summary
eigrp router-id 2.2.2.2
R3#show running-config
key chain killccie
key 10
key-string killccie10
interface Loopback10
ip address 3.3.3.3 255.255.255.0
interface Loopback20
ip address 33.33.33.33 255.255.255.0
interface FastEthernet0/0
ip address 90.1.1.3 255.255.255.0
interface Serial1/2
ip address 123.1.1.3 255.255.255.0
ip hello-interval eigrp 90 10
ip hold-time eigrp 90 30
ip authentication mode eigrp 90 md5
ip authentication key-chain eigrp 90 killccie
encapsulation frame-relay
router eigrp 90
network 3.0.0.0
network 90.1.1.3 0.0.0.0
network 123.1.1.0 0.0.0.255
network 123.0.0.0
network 0.0.0.0
metric maximum-hops 10
no auto-summary
eigrp router-id 3.3.3.3
ip default-network 0.0.0.0
ip route 0.0.0.0 0.0.0.0 Loopback10
R5#show running-config
username R6 password 0 ccie
interface Loopback10
ip address 5.5.5.5 255.255.255.0
interface FastEthernet0/0
ip address 90.1.1.5 255.255.255.0
ip summary-address eigrp 90 66.66.0.0 255.255.0.0 5
interface Serial1/1
bandwidth 700
ip address 56.1.1.5 255.255.255.0
ip bandwidth-percent eigrp 100 10
encapsulation ppp
no peer neighbor-route
serial restart-delay 0
ppp authentication chap
ppp chap hostname R5
ppp chap password 0 ccie
router eigrp 90
redistribute eigrp 100 metric 1544 20000 255 1 1500
network 90.1.1.5 0.0.0.0
no auto-summary
router eigrp 100
redistribute eigrp 90 metric 1544 20000 255 1 1500
network 5.5.5.5 0.0.0.0
network 5.5.5.0 0.0.0.255
network 56.1.1.5 0.0.0.0
metric weights 0 1 0 0 0 0
no auto-summary
R6#show running-config
enable secret 5 $1$K7fP$XVk0Ioiaw5bV.bFCoi62Y0
username R5 password 0 ccie
interface Loopback10
ip address 6.6.6.6 255.255.255.0
interface Loopback11
ip address 66.66.66.66 255.255.255.0
interface Loopback12
ip address 66.66.77.66 255.255.255.0
interface Loopback13
ip address 66.66.88.66 255.255.255.0
interface Loopback100
ip address 60.60.60.60 255.255.255.0
interface Serial1/0
bandwidth 700
ip address 56.1.1.6 255.255.255.0
ip access-group 100 in
ip bandwidth-percent eigrp 100 10
encapsulation ppp
no peer neighbor-route
serial restart-delay 0
ppp authentication chap
ppp chap hostname R6
ppp chap password 0 ccie
router eigrp 100
redistribute rip metric 1544 20000 255 1 1500
network 6.6.6.6 0.0.0.0
network 56.1.1.6 0.0.0.0
network 60.60.60.60 0.0.0.0
metric weights 0 1 0 0 0 0
no auto-summary
eigrp stub redistributed
router rip
version 2
network 66.0.0.0
no auto-summary
access-list 100 permit tcp host 11.11.11.11 any eq telnet
access-list 100 deny tcp any any eq telnet
access-list 100 permit ip any any
line vty 0 4
password ccie
Login
看下最後的路由表:
R6#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is 56.1.1.5 to network 0.0.0.0
D EX 1.0.0.0/8 [170/3656960] via 56.1.1.5, 00:17:24, Serial1/0
2.0.0.0/24 is subnetted, 1 subnets
D EX 2.2.2.0 [170/3656960] via 56.1.1.5, 00:17:24, Serial1/0
33.0.0.0/24 is subnetted, 1 subnets
D EX 33.33.33.0 [170/3656960] via 56.1.1.5, 00:17:24, Serial1/0
3.0.0.0/24 is subnetted, 1 subnets
D EX 3.3.3.0 [170/3656960] via 56.1.1.5, 00:17:24, Serial1/0
5.0.0.0/24 is subnetted, 1 subnets
D 5.5.5.0 [90/3656960] via 56.1.1.5, 00:17:24, Serial1/0
66.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
D EX 66.66.0.0/16 [170/3656960] via 56.1.1.5, 00:17:23, Serial1/0
C 66.66.66.0/24 is directly connected, Loopback11
C 66.66.77.0/24 is directly connected, Loopback12
C 66.66.88.0/24 is directly connected, Loopback13
6.0.0.0/24 is subnetted, 1 subnets
C 6.6.6.0 is directly connected, Loopback10
56.0.0.0/24 is subnetted, 1 subnets
C 56.1.1.0 is directly connected, Serial1/0
11.0.0.0/24 is subnetted, 1 subnets
D EX 11.11.11.0 [170/3656960] via 56.1.1.5, 00:17:24, Serial1/0
123.0.0.0/24 is subnetted, 1 subnets
D EX 123.1.1.0 [170/3656960] via 56.1.1.5, 00:17:24, Serial1/0
90.0.0.0/24 is subnetted, 1 subnets
D EX 90.1.1.0 [170/3656960] via 56.1.1.5, 00:17:24, Serial1/0
60.0.0.0/24 is subnetted, 1 subnets
C 60.60.60.0 is directly connected, Loopback100
D*EX 0.0.0.0/0 [170/3656960] via 56.1.1.5, 00:17:24, Serial1/0
R3#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is 0.0.0.0 to network 0.0.0.0
D 1.0.0.0/8 [90/2195456] via 123.1.1.1, 00:34:11, Serial1/2
2.0.0.0/24 is subnetted, 1 subnets
D 2.2.2.0 [90/156160] via 90.1.1.2, 00:45:39, FastEthernet0/0
33.0.0.0/24 is subnetted, 1 subnets
C 33.33.33.0 is directly connected, Loopback20
3.0.0.0/24 is subnetted, 1 subnets
C 3.3.3.0 is directly connected, Loopback10
5.0.0.0/24 is subnetted, 1 subnets
D EX 5.5.5.0 [170/6780416] via 90.1.1.5, 00:45:39, FastEthernet0/0
66.0.0.0/16 is subnetted, 1 subnets
D 66.66.0.0 [90/6780416] via 90.1.1.5, 00:17:37, FastEthernet0/0
56.0.0.0/24 is subnetted, 1 subnets
D EX 56.1.1.0 [170/6780416] via 90.1.1.5, 00:45:40, FastEthernet0/0
11.0.0.0/24 is subnetted, 1 subnets
D 11.11.11.0 [90/2297856] via 123.1.1.1, 00:24:53, Serial1/2
123.0.0.0/24 is subnetted, 1 subnets
C 123.1.1.0 is directly connected, Serial1/2
90.0.0.0/24 is subnetted, 1 subnets
C 90.1.1.0 is directly connected, FastEthernet0/0
S* 0.0.0.0/0 is directly connected, Loopback10
總結一下,個人感覺該實驗沒什麼特別難點,有幾個重點還是需要注意一下的:
1:telnet源接口,這個用的應該會很多;
2:EIGRP中route-id的作用。
個人感覺這個主要是用來重分佈之後做標記,可以防止環路。有待考究,呵呵。