需求:按照如下拓扑图配置好接口地址和EIGRP100(R1到R5五个路由器都启用环回lo0，R1:Lo0:1.1.1.1/24R2:Lo0:2.2.2.2/24以此类推)
1:在R4做DHCP服务，要求R1和R3的f0/0地址要自动获取
2:R2的S1/1的带宽改为700K，修改R2的S1/0接口的hello-time为20S,R2的Lo不能收发任何EIGRP路由更新
3:必须确保R2的EIGRP在S1/1能使用到最少70K的带宽
4:为了安全起见，R1和R2之间不允许用组播建立邻居且启用EIGRP的MD5认证(keychain=ccie,key-string=cisco)
5:R3启用loopback1:200.200.200.1/24,不通告进EIGRP100进程去但是要求全网都能访问这个R3环回L1(R1,R2,R4,R5是显示D*0.0.0.0[90/XXX])
6:用最小的命令行在R4增加七个interface地址,地址为172.16.1.1/24---172.16.7.1/24(且这7条路由在R5显示DEX)
7:R1，R2，R3，R5只能收到R4的七个interface地址的一条汇总路由
8:R5为EIGRPstub,只通告直连
9:要求从R2telnet到R5的5.5.5.5环回，登陆进去的时候却是登陆到了R4上
10:要求从R2到R4形成非等价负载均衡
配置解析:
1:基本的由配置将不再给出,这里，我们来看一下DHCP的配置：
R2的配置:
R1#shrunintf0/0
Buildingconfiguration...
Currentconfiguration:63bytes
!
interfaceFastEthernet0/0
ipaddressdhcp
duplexhalf
end
R1#shipintbri
InterfaceIP-AddressOK?MethodStatusProtocol
FastEthernet0/0134.1.1.1YESDHCPupup
R3的配置:
R3#shrunintf0/0
Buildingconfiguration...
Currentconfiguration:63bytes
!
interfaceFastEthernet0/0
ipaddressdhcp
duplexhalf
end
R3#shipintbri
InterfaceIP-AddressOK?MethodStatusProtocol
FastEthernet0/0134.1.1.2YESDHCPupup
R4的配置:
R4#shrun
Buildingconfiguration...
!
noipdomainlookup
noipdhcpconflictlogging
ipdhcpexcluded-address134.1.1.4
!
ipdhcppoolccie
network134.1.1.0255.255.255.0
default-router134.1.1.4
dns-server202.96.128.68
lease10
!
interfaceFastEthernet0/0
ipaddress134.1.1.4255.255.255.0
duplexhalf
R4#shipintbri
InterfaceIP-AddressOK?MethodStatusProtocol
FastEthernet0/0134.1.1.4YESmanualupup
2:修改带宽和Hello-time时间并不难，但是要注意，这里修改了Hello-time时间，要把hold-time时间也要修改过来，保持3倍的关系,L0口不能收发任何的路由更新，也就是要将这个口设置成passive-interface.
R2的配置:
R2#shrunints1/0
Buildingconfiguration...
Currentconfiguration:145bytes
!
interfaceSerial1/0
ipaddress12.1.1.2255.255.255.0
iphello-intervaleigrp10020
iphold-timeeigrp10060
serialrestart-delay0
end
R2#shrunints1/1
Buildingconfiguration...
Currentconfiguration:101bytes
!
interfaceSerial1/1
bandwidth700
ipaddress23.1.1.2255.255.255.0
serialrestart-delay0
end
R2#shrun|bre
routereigrp100
passive-interfaceLoopback0
network2.2.2.20.0.0.0
network12.1.1.20.0.0.0
network23.1.1.20.0.0.0
noauto-summary
3:在上一个需求中，我们已将R2的s1/1口的带修改为700K，在使用命令时，已设置成10%
R2的配置:
R2#shrunints1/1
Buildingconfiguration...
Currentconfiguration:136bytes
!
interfaceSerial1/1
bandwidth700
ipaddress23.1.1.2255.255.255.0
ipbandwidth-percenteigrp10010
serialrestart-delay0
end
4:在EIGRP环境中，是使用组播地址为224.0.0.1进行路由的更新的，要进行单播更新，就要使用命令neighbor来进行指定邻居.对于MD5的认证，可以参见前面的一些配置案例。
R1的配置:
R1#shrun
Buildingconfiguration...
!
keychainccie
key1
key-string70822455D0A16
R1#shrunints1/1
Buildingconfiguration...
Currentconfiguration:168bytes
!
interfaceSerial1/1
ipaddress12.1.1.1255.255.255.0
ipauthenticationmodeeigrp100md5
ipauthenticationkey-chaineigrp100ccie
serialrestart-delay0
end
R1#shrun|bre
routereigrp100
network1.1.1.10.0.0.0
network12.1.1.10.0.0.0
network134.1.1.00.0.0.255
neighbor12.1.1.2Serial1/1
noauto-summary
R2的配置:
R2#shrun
Buildingconfiguration...
!
keychainccie
key1
key-string7060506324F41
R2#shrunints1/0
Buildingconfiguration...
Currentconfiguration:227bytes
!
interfaceSerial1/0
ipaddress12.1.1.2255.255.255.0
iphello-intervaleigrp10020
iphold-timeeigrp10060
ipauthenticationmodeeigrp100md5
ipauthenticationkey-chaineigrp100ccie
serialrestart-delay0
end
R2#shrun|bre
routereigrp100
passive-interfaceLoopback0
network2.2.2.20.0.0.0
network12.1.1.20.0.0.0
network23.1.1.20.0.0.0
neighbor12.1.1.1Serial1/0
noauto-summary
这时，我们来看一看在R1上的debug信息:
R1#debeipacup
EIGRPPacketsdebuggingison
(UPDATE)
R1#
*Nov117:00:02.067:EIGRP:receivedpacketwithMD5authentication,keyid=1
*Nov117:00:02.067:EIGRP:ReceivedUPDATEonSerial1/1nbr12.1.1.2
*Nov117:00:02.067:AS100,Flags0x9,Seq46/0idbQ0/0
R1#
*Nov117:00:05.067:EIGRP:receivedpacketwithMD5authentication,keyid=1
*Nov117:00:05.067:EIGRP:ReceivedUPDATEonSerial1/1nbr12.1.1.2
*Nov117:00:05.067:AS100,Flags0x9,Seq46/0idbQ0/0
R1#shipeinei
IP-EIGRPneighborsforprocess100
HAddressInterfaceHoldUptimeSRTTRTOQSeq
(sec)(ms)CntNum
012.1.1.2Se1/14600:06:2413385000047
2134.1.1.4Fa0/01100:36:4878468024
1134.1.1.2Fa0/01100:37:28108648045
5:在进行路由通告的时候有五种方法，每一种方法路由表的显示都是不一样的，这里我们采用汇总地址进行通告
R3的配置:
R3#shrunints1/0
Buildingconfiguration...
Currentconfiguration:134bytes
!
interfaceSerial1/0
ipaddress23.1.1.3255.255.255.0
ipsummary-addresseigrp1000.0.0.00.0.0.05
serialrestart-delay0
end
#p#
我们来看一看R2和R5的路由表:
R2#shiproei
1.0.0.0/24issubnetted,1subnets
D1.1.1.0[90/2297856]via12.1.1.1,00:20:48,Serial1/0
3.0.0.0/24issubnetted,1subnets
D3.3.3.0[90/2300416]via12.1.1.1,00:00:26,Serial1/0
4.0.0.0/24issubnetted,1subnets
D4.4.4.0[90/2300416]via12.1.1.1,00:12:47,Serial1/0
5.0.0.0/24issubnetted,1subnets
D5.5.5.0[90/2812416]via12.1.1.1,00:12:28,Serial1/0
134.1.0.0/24issubnetted,1subnets
D134.1.1.0[90/2172416]via12.1.1.1,00:32:22,Serial1/0
45.0.0.0/24issubnetted,1subnets
D45.1.1.0[90/2684416]via12.1.1.1,00:12:47,Serial1/0
D*0.0.0.0/0[90/4171520]via23.1.1.3,00:00:31,Serial1/1
R5#shiproei
1.0.0.0/24issubnetted,1subnets
D1.1.1.0[90/2300416]via45.1.1.4,00:12:58,Serial1/0
2.0.0.0/24issubnetted,1subnets
D2.2.2.0[90/2812416]via45.1.1.4,00:12:58,Serial1/0
3.0.0.0/24issubnetted,1subnets
D3.3.3.0[90/2300416]via45.1.1.4,00:00:57,Serial1/0
4.0.0.0/24issubnetted,1subnets
D4.4.4.0[90/2297856]via45.1.1.4,00:12:58,Serial1/0
23.0.0.0/24issubnetted,1subnets
D23.1.1.0[90/2684416]via45.1.1.4,00:00:57,Serial1/0
12.0.0.0/24issubnetted,1subnets
D12.1.1.0[90/2684416]via45.1.1.4,00:12:58,Serial1/0
134.1.0.0/24issubnetted,1subnets
D134.1.1.0[90/2172416]via45.1.1.4,00:12:58,Serial1/0
D*0.0.0.0/0[90/5198080]via45.1.1.4,00:01:02,Serial1/0
R2#shipeito
IP-EIGRPTopologyTableforAS(100)/ID(2.2.2.2)
Codes:P-Passive,A-Active,U-Update,Q-Query,R-Reply,
r-replyStatus,s-siaStatus
P0.0.0.0/0,1successors,FDis2174976
via12.1.1.1(2174976/30720),Serial1/0
via23.1.1.3(4171520/28160),Serial1/1
P1.1.1.0/24,1successors,FDis2297856
via12.1.1.1(2297856/128256),Serial1/0
P2.2.2.0/24,1successors,FDis128256
viaConnected,Loopback0
P4.4.4.0/24,1successors,FDis2300416
via12.1.1.1(2300416/156160),Serial1/0
P5.5.5.0/24,1successors,FDis2812416
via12.1.1.1(2812416/2300416),Serial1/0
P12.1.1.0/24,1successors,FDis2169856
viaConnected,Serial1/0
P23.1.1.0/24,1successors,FDis4168960
viaConnected,Serial1/1
P45.1.1.0/24,1successors,FDis2684416
via12.1.1.1(2684416/2172416),Serial1/0
P134.1.1.0/24,1successors,FDis2172416
Codes:P-Passive,A-Active,U-Update,Q-Query,R-Reply,
r-replyStatus,s-siaStatus
via12.1.1.1(2172416/28160),Serial1/0
P172.16.0.0/21,1successors,FDis2300416
via12.1.1.1(2300416/156160),Serial1/0
这里，你会发现，R2到达5.5.5.0网络的路由没有出现负载均衡的情况，要出现可以在f0/0上做默认路由的重分发(这里要去掉R3的s1/0口的汇总)
R3的配置:
R3#shrunintf0/0
Buildingconfiguration...
Currentconfiguration:111bytes
!
interfaceFastEthernet0/0
ipaddressdhcp
ipsummary-addresseigrp1000.0.0.00.0.0.05
duplexhalf
end
R2#shipeito
IP-EIGRPTopologyTableforAS(100)/ID(2.2.2.2)
Codes:P-Passive,A-Active,U-Update,Q-Query,R-Reply,
r-replyStatus,s-siaStatus
P0.0.0.0/0,1successors,FDis2174976
via12.1.1.1(2174976/30720),Serial1/0
P1.1.1.0/24,1successors,FDis2297856
via12.1.1.1(2297856/128256),Serial1/0
via23.1.1.3(4299520/156160),Serial1/1
P2.2.2.0/24,1successors,FDis128256
viaConnected,Loopback0
P3.3.3.0/24,1successors,FDis2300416
via23.1.1.3(4296960/128256),Serial1/1
P4.4.4.0/24,1successors,FDis2300416
via12.1.1.1(2300416/156160),Serial1/0
via23.1.1.3(4299520/156160),Serial1/1
P5.5.5.0/24,1successors,FDis2812416
via12.1.1.1(2812416/2300416),Serial1/0
via23.1.1.3(4811520/2300416),Serial1/1
P12.1.1.0/24,1successors,FDis2169856
viaConnected,Serial1/0
P23.1.1.0/24,1successors,FDis4168960
Codes:P-Passive,A-Active,U-Update,Q-Query,R-Reply,
r-replyStatus,s-siaStatus
viaConnected,Serial1/1
P45.1.1.0/24,1successors,FDis2684416
via12.1.1.1(2684416/2172416),Serial1/0
via23.1.1.3(4683520/2172416),Serial1/1
P134.1.1.0/24,1successors,FDis2172416
via12.1.1.1(2172416/28160),Serial1/0
via23.1.1.3(4171520/28160),Serial1/1
P172.16.0.0/21,1successors,FDis2300416
via12.1.1.1(2300416/156160),Serial1/0
via23.1.1.3(4299520/156160),Seria
6:最小的命令增加地址用第二地址的命令来做，而要实现上述的重分发的需求，要使用重分发直连网络
R4#shrunintlo0
Buildingconfiguration...
Currentconfiguration:390bytes
!
interfaceLoopback0
ipaddress172.16.1.1255.255.255.0secondary
ipaddress172.16.2.1255.255.255.0secondary
ipaddress172.16.3.1255.255.255.0secondary
ipaddress172.16.4.1255.255.255.0secondary
ipaddress172.16.5.1255.255.255.0secondary
ipaddress172.16.6.1255.255.255.0secondary
ipaddress172.16.7.1255.255.255.0secondary
ipaddress4.4.4.4255.255.255.0
end
R4#shrun|bre
routereigrp100
redistributeconnected
network4.4.4.40.0.0.0
network45.1.1.40.0.0.0
network134.1.1.00.0.0.255
noauto-summary
我们来看一看R5的路由表:
R5#shiproei
1.0.0.0/24issubnetted,1subnets
D1.1.1.0[90/2300416]via45.1.1.4,00:48:07,Serial1/0
2.0.0.0/24issubnetted,1subnets
D2.2.2.0[90/2812416]via45.1.1.4,00:48:07,Serial1/0
4.0.0.0/24issubnetted,1subnets
D4.4.4.0[90/2297856]via45.1.1.4,00:01:59,Serial1/0
23.0.0.0/24issubnetted,1subnets
D23.1.1.0[90/5195520]via45.1.1.4,00:06:47,Serial1/0
172.16.0.0/24issubnetted,7subnets
DEX172.16.4.0[170/2297856]via45.1.1.4,00:01:14,Serial1/0
DEX172.16.5.0[170/2297856]via45.1.1.4,00:01:14,Serial1/0
DEX172.16.6.0[170/2297856]via45.1.1.4,00:01:14,Serial1/0
DEX172.16.7.0[170/2297856]via45.1.1.4,00:01:14,Serial1/0
DEX172.16.1.0[170/2297856]via45.1.1.4,00:01:14,Serial1/0
DEX172.16.2.0[170/2297856]via45.1.1.4,00:01:14,Serial1/0
DEX172.16.3.0[170/2297856]via45.1.1.4,00:01:14,Serial1/0
12.0.0.0/24issubnetted,1subnets
D12.1.1.0[90/2684416]via45.1.1.4,00:29:36,Serial1/0
134.1.0.0/24issubnetted,1subnets
D134.1.1.0[90/2172416]via45.1.1.4,00:48:07,Serial1/0
D*0.0.0.0/0[90/2174976]via45.1.1.4,00:06:41,Serial1/0
7:要在另外几台路由器看一条汇总路由，只要在R4的s1/1和f0/0两个接口做汇总即可。
R4的配置:
R4#shrunintf0/0
Buildingconfiguration...
Currentconfiguration:139bytes
!
interfaceFastEthernet0/0
ipaddress134.1.1.4255.255.255.0
ipsummary-addresseigrp100172.16.0.0255.255.248.05
duplexhalf
end
R4#shrunints1/1
Buildingconfiguration...
Currentconfiguration:143bytes
!
interfaceSerial1/1
ipaddress45.1.1.4255.255.255.0
ipsummary-addresseigrp100172.16.0.0255.255.248.05
serialrestart-delay0
end
我们再来看一看R2和R5的路由表:
R2#shiproei
1.0.0.0/24issubnetted,1subnets
D1.1.1.0[90/2297856]via12.1.1.1,00:08:27,Serial1/0
4.0.0.0/24issubnetted,1subnets
D4.4.4.0[90/2300416]via12.1.1.1,00:00:26,Serial1/0
5.0.0.0/24issubnetted,1subnets
D5.5.5.0[90/2812416]via12.1.1.1,00:00:06,Serial1/0
172.16.0.0/21issubnetted,1subnets
D172.16.0.0[90/2300416]via12.1.1.1,00:00:26,Serial1/0
134.1.0.0/24issubnetted,1subnets
D134.1.1.0[90/2172416]via12.1.1.1,00:20:01,Serial1/0
45.0.0.0/24issubnetted,1subnets
D45.1.1.0[90/2684416]via12.1.1.1,00:00:26,Serial1/0
D*0.0.0.0/0[90/2174976]via12.1.1.1,00:08:10,Serial1/0
R5#shiproei
1.0.0.0/24issubnetted,1subnets
D1.1.1.0[90/2300416]via45.1.1.4,00:00:11,Serial1/0
2.0.0.0/24issubnetted,1subnets
D2.2.2.0[90/2812416]via45.1.1.4,00:00:11,Serial1/0
4.0.0.0/24issubnetted,1subnets
D4.4.4.0[90/2297856]via45.1.1.4,00:00:11,Serial1/0
23.0.0.0/24issubnetted,1subnets
D23.1.1.0[90/5195520]via45.1.1.4,00:00:11,Serial1/0
172.16.0.0/21issubnetted,1subnets
D172.16.0.0[90/2297856]via45.1.1.4,00:00:11,Serial1/0
12.0.0.0/24issubnetted,1subnets
D12.1.1.0[90/2684416]via45.1.1.4,00:00:11,Serial1/0
134.1.0.0/24issubnetted,1subnets
D134.1.1.0[90/2172416]via45.1.1.4,00:00:11,Serial1/0
D*0.0.0.0/0[90/2174976]via45.1.1.4,00:00:11,Serial1/0
8:配置Stub比较简单，不在多说！
R5的配置:
R5#shrun|bre
routereigrp100
network5.5.5.50.0.0.0
network45.1.1.50.0.0.0
noauto-summary
eigrpstubconnected
9:要实现这个需求，可以有多种方法，在此，我使用NAT来实现:
R4的配置:
R4#shrunintf0/0
Buildingconfiguration...
Currentconfiguration:155bytes
!
interfaceFastEthernet0/0
ipaddress134.1.1.4255.255.255.0
ipnatoutside
ipsummary-addresseigrp100172.16.0.0255.255.248.05
duplexhalf
end
R4#shrunints1/1
Buildingconfiguration...
Currentconfiguration:158bytes
!
interfaceSerial1/1
ipaddress45.1.1.4255.255.255.0
ipnatinside
ipsummary-addresseigrp100172.16.0.0255.255.248.05
serialrestart-delay0
end
R4#shrun|bre
routereigrp100
redistributeconnected
network4.4.4.40.0.0.0
network45.1.1.40.0.0.0
network134.1.1.00.0.0.255
noauto-summary
!
ipnatinsidesourcestatic4.4.4.45.5.5.5
我们来在R2上telnet到R5：
R2#telnet5.5.5.5/source-interfaceloopback0
Trying5.5.5.5...Open
UserAccessVerification
Password:
R4#
10:配置不在多说，参见前面的配置案例
R2的配置:
R2#shrun|bre
routereigrp100
variance15
passive-interfaceLoopback0
network2.2.2.20.0.0.0
network12.1.1.20.0.0.0
network23.1.1.20.0.0.0
neighbor12.1.1.1Serial1/0
noauto-summary
我们再来看一看R2到达R4的路由:
R2#shipro4.4.4.0255.255.255.0
Routingentryfor4.4.4.0/24
Knownvia"eigrp100",distance90,metric2300416,typeinternal
Redistributingviaeigrp100
Lastupdatefrom23.1.1.3onSerial1/1,00:01:54ago
RoutingDescriptorBlocks:
*12.1.1.1,from12.1.1.1,00:01:54ago,viaSerial1/0
Routemetricis2300416,trafficsharecountis15
Totaldelayis25100microseconds,minimumbandwidthis1544Kbit
Reliability255/255,minimumMTU1500bytes
Loading1/255,Hops2
23.1.1.3,from23.1.1.3,00:01:54ago,viaSerial1/1
Routemetricis4299520,trafficsharecountis8
Totaldelayis25100microseconds,minimumbandwidthis700Kbit
Reliability255/255,minimumMTU1500bytes
Loading1/255,Hops2
R2#shiproei
4.0.0.0/24issubnetted,1subnets
D4.4.4.0[90/2300416]via12.1.1.1,00:02:17,Serial1/0
[90/4299520]via23.1.1.3,00:02:17,Serial1/1
【编辑推荐】
