1、EIGRP 实验以企业网络为原型,进行实验学习.假设一个企业公司,有一个总公司上海,两个分公司北京和广州,通过电信的 frame-relay 专线互连到一块,然后内部部署了很多网段和 PC,需要通过 EIGRP 路由协议互连互通.拓扑如下:R2R3R4R51012.0/2410235.0/241056.0/241034.0/24S1/ .2S1/0 .3S1/ .S1/0 .4S1/2 .2S1/2 .3 S1/2 .5S1/ .5S1/0 .6Frame RelayArea 0Lopback 0 104. R6Lopback 0 106.EIGRP 10 上 海北 京 广 州Lopback
2、0 101.R第一步:为了方便实验,首先进行初始配置 .Routeren (进入特权模式)Router#configure terminal(进入全局配置模式 )Enter configuration commands, one per line. End with CNTL/Z.Router(config)#hostname R1 (指定主机名)r1(config)#no ip domain-lookup (关掉域名解析)r1(config)#line con 0 (进入 con 线路的配置模式)r1(config-line)#no exec-timeout(关闭发呆超时)r1(config
3、-line)#logging synchronous (打开日志同步)第二步:配置 IP 地址和 frame-relayr1(config)#interface loopback 0r1(config-if)#ip address 10.1.1.1 255.255.255.0 r1(config-if)#interface s1/1r1(config-if)#ip address 10.1.12.1 255.255.255.0r1(config-if)#no shur1(config-if)#*Feb 10 13:57:51.119: %LINK-3-UPDOWN: Interface Ser
4、ial1/1, changed state to upr1(config-if)#*Feb 10 13:57:52.123: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial1/1, changed state to upr1(config-if)#r2(config)#int s1/0r2(config-if)#ip address 10.1.12.2 255.255.255.0r2(config-if)#no shutdownr2(config-if)#*Feb 10 14:00:15.503: %LINK-3-UPDOWN: I
5、nterface Serial1/0, changed state to up*Feb 10 14:00:16.503: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial1/0, changed state to upr2(config-if)#int s1/2r2(config-if)#ip address 10.1.235.2 255.255.255.0r2(config-if)#encapsulation frame-relay(封状 FR)r2(config-if)#no frame-relay inverse-arp (关闭
6、反向动态 ARP 解析)r2(config-if)#no arp frame-relay (关闭 ARP 的内容解释)r2(config-if)#frame-relay map ip 10.1.235.3 203 broadcast(静态指定 FR 的影射)r2(config-if)#frame-relay map ip 10.1.235.5 205 broadcast r2(config-if)#frame-relay map ip 10.1.235.2 205 broadcast(ping 通本地接口)r2(config-if)#no shutdownr2(config-if)#*Feb
7、10 14:06:51.507: %LINK-3-UPDOWN: Interface Serial1/2, changed state to upr3(config)#int s1/2r3(config-if)#ip add 10.1.235.3 255.255.255.0r3(config-if)#encapsulation frame-relay (封状 FR)r3(config-if)#no frame-relay inverse-arp (关闭反向动态 ARP 解析)r3(config-if)#no arp frame-relay (关闭 ARP 的内容解释)r3(config-if)
8、#frame-relay map ip 10.1.235.2 302 broadcast (静态指定 FR 的影射)r3(config-if)#frame-relay map ip 10.1.235.5 302 broadcastr3(config-if)#no shur3(config-if)#*Feb 10 14:13:03.619: %LINK-3-UPDOWN: Interface Serial1/2, changed state to upr3(config-if)#*Feb 10 14:13:14.619: %LINEPROTO-5-UPDOWN: Line protocol on
9、 Interface Serial1/2, changed state to upr3(config-if)#r3(config-if)#int s1/1r3(config-if)#ip add 10.1.34.3 255.255.255.0r3(config-if)#no shutdownr4(config-line)#int s1/0r4(config-if)#ip add 10.1.34.4 255.255.255.0r4(config-if)#no shur4(config-if)#*Feb 10 14:20:47.363: %LINK-3-UPDOWN: Interface Seri
10、al1/0, changed state to up*Feb 10 14:20:48.363: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial1/0, changed state to upr4(config-if)#interface loopback 0 r4(config-if)#ip add 10.1.4.4 255.255.255.0r5(config)#int s1/2r5(config-if)#ip add 10.1.235.5 255.255.255.0r5(config-if)#encapsulation fram
11、e-relayr5(config-if)#no frame-relay inverse-arpr5(config-if)#no arp frame-relayr5(config-if)#frame map ip 10.1.235.2 502 broadcastr5(config-if)#frame map ip 10.1.235.3 502 broadcastr5(config-if)#no shur5(config-if)#*Feb 10 14:23:13.227: %LINK-3-UPDOWN: Interface Serial1/2, changed state to upr5(conf
12、ig-if)#*Feb 10 14:23:24.227: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial1/2, changed state to upr5(config-if)#int s1/1r5(config-if)#ip add 10.1.56.5 255.255.255.0r5(config-if)#no shur6(config)#int s1/0r6(config-if)#ip add 10.1.56.6 255.255.255.0r6(config-if)#no shur6(config-if)#*Feb 10 14
13、:26:31.915: %LINK-3-UPDOWN: Interface Serial1/0, changed state to upr6(config-if)#*Feb 10 14:26:32.919: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial1/0, changed state to upr6(config-if)#int loopback 0r6(config-if)#ip add 10.1.6.6 255.255.255.0测试直连的连同性r2#ping 10.1.12.1Type escape sequence t
14、o abort.Sending 5, 100-byte ICMP Echos to 10.1.12.1, timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 72/326/1248 msr2#ping 10.1.235.3Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 10.1.235.3, timeout is 2 seconds:!Success rate is 100 percent (5/5),
15、round-trip min/avg/max = 72/93/144 msr2#ping 10.1.235.5Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 10.1.235.5, timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 48/67/72 msr2#r3#ping 10.1.34.4Type escape sequence to abort.Sending 5, 100-byte ICMP E
16、chos to 10.1.34.4, timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 68/88/120 msr5#ping 10.1.56.6Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 10.1.56.6, timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 48/82/120 msr
17、5#第三步配置 EIGRP,r1(config)#router eigrp 100(建立 EIGRP 进程,并指定所在自治系统)r1(config-router)#no auto-summary (关闭自动路由汇总)r1(config-router)#network 10.1.1.0 0.0.0.255 (启动接口 EIGRP 动态路由协议功能 ,宣告此接口所在网段路由)r1(config-router)#network 10.1.12.0 0.0.0.255r2(config)#router eigrp 100r2(config-router)#no autor2(config-router
18、)#net 10.1.12.0 0.0.0.255r2(config-router)#net 10.1.235.0 0.0.0.255r2(config-router)#*Feb 10 14:55:36.959: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 10.1.12.1 (Serial1/0) is up: new adjacency (邻接建立的提示信息)r3(config)#router eigrp 100r3(config-router)#no autor3(config-router)#net 10.1.235.0 0.0.0.255
19、r3(config-router)#net 10.1.34.0 0.0.0.255 r4(config)#router eigrp 100r4(config-router)#no autor4(config-router)#net 10.1.34.0 0.0.0.255r4(config-router)#net 10.1.4.0 0.0.0.255r5(config)#router eigrp 100r5(config-router)#no autor5(config-router)#net 10.1.235.0 0.0.0.255 r5(config-router)#net 10.1.56.
20、0 0.0.0.255r6(config)#router eigrp 100r6(config-router)#no autor6(config-router)#net 10.1.56.0 0.0.0.255 r6(config-router)#net 10.1.6.0 0.0.0.255r1#sh ip routeGateway of last resort is not set10.0.0.0/24 is subnetted, 7 subnetsC 10.1.12.0 is directly connected, Serial1/1C 10.1.1.0 is directly connec
21、ted, Loopback0D 10.1.6.0 90/3321856 via 10.1.12.2, 00:03:41, Serial1/1D 10.1.4.0 90/3321856 via 10.1.12.2, 00:04:17, Serial1/1D 10.1.34.0 90/3193856 via 10.1.12.2, 00:04:17, Serial1/1D 10.1.56.0 90/3193856 via 10.1.12.2, 00:04:03, Serial1/1D 10.1.235.0 90/2681856 via 10.1.12.2, 00:06:01, Serial1/1r2
22、(config-router)#do show ip routeGateway of last resort is not set10.0.0.0/24 is subnetted, 7 subnetsC 10.1.12.0 is directly connected, Serial1/0D 10.1.1.0 90/2297856 via 10.1.12.1, 00:08:07, Serial1/0D 10.1.6.0 90/2809856 via 10.1.235.5, 00:05:47, Serial1/2D 10.1.4.0 90/2809856 via 10.1.235.3, 00:06
23、:23, Serial1/2D 10.1.34.0 90/2681856 via 10.1.235.3, 00:06:23, Serial1/2D 10.1.56.0 90/2681856 via 10.1.235.5, 00:06:08, Serial1/2C 10.1.235.0 is directly connected, Serial1/2r3#sh ip routeGateway of last resort is not set10.0.0.0/24 is subnetted, 5 subnetsD 10.1.12.0 90/2681856 via 10.1.235.2, 00:0
24、9:14, Serial1/2D 10.1.1.0 90/2809856 via 10.1.235.2, 00:09:14, Serial1/2D 10.1.4.0 90/2297856 via 10.1.34.4, 00:09:34, Serial1/1C 10.1.34.0 is directly connected, Serial1/1C 10.1.235.0 is directly connected, Serial1/2目前北京看不到广州的路由,广州看不到北京,因为 EIGRP 为距离矢量,有水平分割的限制,所以需要关闭 R2 中心点接口的水平分割功能 .r2(config-rout
25、er)#int s1/2r2(config-if)#no ip split-horizon eigrp 100然后才可以达到真正的全网可见.Gateway of last resort is not set10.0.0.0/24 is subnetted, 7 subnetsD 10.1.12.0 90/2681856 via 10.1.235.2, 00:04:32, Serial1/2D 10.1.1.0 90/2809856 via 10.1.235.2, 00:04:32, Serial1/2D 10.1.6.0 90/3321856 via 10.1.235.2, 00:04:32,
26、 Serial1/2D 10.1.4.0 90/2297856 via 10.1.34.4, 00:04:32, Serial1/1C 10.1.34.0 is directly connected, Serial1/1D 10.1.56.0 90/3193856 via 10.1.235.2, 00:04:32, Serial1/2C 10.1.235.0 is directly connected, Serial1/2第四步 手动路由汇总r1(config)#int lo 1r1(config-if)#ip add 1.1.0.1 255.255.255.0r1(config-if)#in
27、t lo 2r1(config-if)#ip add 1.1.1.1 255.255.255.0r1(config-if)#int lo 3 r1(config-if)#ip add 1.1.2.1 255.255.255.0r1(config-if)#int lo 4 r1(config-if)#ip add 1.1.3.1 255.255.255.0r1(config-if)#router eigrp 100r1(config-router)#net 1.1.0.0 0.0.255.255r1(config-router)#r2#sh ip route eigrp 1.0.0.0/24 i
28、s subnetted, 4 subnetsD 1.1.0.0 90/2297856 via 10.1.12.1, 00:02:11, Serial1/0D 1.1.1.0 90/2297856 via 10.1.12.1, 00:02:11, Serial1/0D 1.1.2.0 90/2297856 via 10.1.12.1, 00:02:11, Serial1/0D 1.1.3.0 90/2297856 via 10.1.12.1, 00:02:11, Serial1/010.0.0.0/24 is subnetted, 7 subnetsD 10.1.1.0 90/2297856 v
29、ia 10.1.12.1, 00:46:12, Serial1/0D 10.1.6.0 90/2809856 via 10.1.235.5, 00:32:47, Serial1/2D 10.1.4.0 90/2809856 via 10.1.235.3, 00:32:47, Serial1/2D 10.1.34.0 90/2681856 via 10.1.235.3, 00:32:47, Serial1/2D 10.1.56.0 90/2681856 via 10.1.235.5, 00:32:47, Serial1/2r1(config)#int s1/1r1(config-if)#ip s
30、ummary-address eigrp 100 1.1.0.0 255.255.252.0r1(config-if)#*Feb 10 15:49:32.127: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 10.1.12.2 (Serial1/1) is down: summary configuredr1(config-if)#*Feb 10 15:49:33.211: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 10.1.12.2 (Serial1/1) is up: new adjacencyr
31、2#sh ip route eigrp 1.0.0.0/22 is subnetted, 1 subnetsD 1.1.0.0 90/2297856 via 10.1.12.1, 00:00:32, Serial1/0 汇总后的路由条目10.0.0.0/24 is subnetted, 7 subnetsD 10.1.1.0 90/2297856 via 10.1.12.1, 00:00:32, Serial1/0D 10.1.6.0 90/2809856 via 10.1.235.5, 00:41:52, Serial1/2D 10.1.4.0 90/2809856 via 10.1.235
32、.3, 00:41:52, Serial1/2D 10.1.34.0 90/2681856 via 10.1.235.3, 00:41:52, Serial1/2D 10.1.56.0 90/2681856 via 10.1.235.5, 00:41:52, Serial1/2第五补负载均衡假设 r4 和 r6 都连接到了一个新的部门,研发部.10.1.46.0/24r4(config)#int lo 1r4(config-if)#ip add 10.1.46.4 255.255.255.0r4(config-if)#router eigrp 100r4(config-router)#netw
33、ork 10.1.46.0 0.0.0.255r6(config)#int lo 1r6(config-if)#ip add 10.1.46.6 255.255.255.0r6(config-if)#router eigrp 100r6(config-router)#net 10.1.46.0 0.0.0.255r6(config-router)#查看路由表,负载均衡路由r2#sh ip route eigrp 1.0.0.0/22 is subnetted, 1 subnetsD 1.1.0.0 90/2297856 via 10.1.12.1, 00:08:01, Serial1/010.
34、0.0.0/24 is subnetted, 8 subnetsD 10.1.1.0 90/2297856 via 10.1.12.1, 00:08:01, Serial1/0D 10.1.6.0 90/2809856 via 10.1.235.5, 00:49:20, Serial1/2D 10.1.4.0 90/2809856 via 10.1.235.3, 00:49:20, Serial1/2D 10.1.46.0 90/2809856 via 10.1.235.3, 00:01:40, Serial1/290/2809856 via 10.1.235.5, 00:01:40, Ser
35、ial1/2D 10.1.34.0 90/2681856 via 10.1.235.3, 00:49:20, Serial1/2D 10.1.56.0 90/2681856 via 10.1.235.5, 00:49:20, Serial1/2第六步:修改 EIGRP 占用带宽百分比r2(config)#int s1/2r2(config-if)#ip bandwidth-percent eigrp 100 5第七步:邻居间的认证R2 r3 r5 之间是电信的骨干网络 ,有出现欺骗攻击的可能，所以启动认证技术防止路由欺骗.r2(config-keychain)#key 1r2(config-k
36、eychain-key)#key-string ciscor2(config-keychain-key)#exitr2(config-keychain)#exir2(config)#int s1/2r2(config-if)#ip authentication mode eigrp 100 md5*Feb 10 16:36:35.039: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 10.1.235.3 (Serial1/2) is down: authentication mode changed (启动认证后邻居会暂时 down 掉)*Feb
37、10 16:36:35.047: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 10.1.235.5 (Serial1/2) is down: authentication mode changedr2(config-if)#ip authentication key-chain eigrp 100 dfr3(config-keychain)#key 1r3(config-keychain-key)#key-string ciscor3(config-keychain-key)#exitr3(config-keychain)#exir3(config
38、)#int s1/2r3(config-if)#ip authentication mode eigrp 100 md5r3(config-if)#ip authentication key-chain eigrp 100 dfr5(config-keychain)#key 1r5(config-keychain-key)#key-string ciscor5(config-keychain-key)#exitr5(config-keychain)#exir5(config)#int s1/2r5(config-if)#ip authentication mode eigrp 100 md5r5(config-if)#ip authentication key-chain eigrp 100 df第八步:进行 EIGRP 路由查询优化r4(config-if)#router eigrp 100r4(config-router)#eigrp stubr6(config-if)#router eigrp 100r6(config-router)#eigrp stub
