CCIE-EIGRP经典实验(1)
http://www.tklab.cn
CCIE-EIGRP经典实验(1)
ccie培训需求:按照如下拓扑图配置好接口地址和EIGRP100(R1到R5五个路由器都启用环回lo0，R1:Lo0:1.1.1.1/24R2:Lo0:2.2.2.2/24以此类推)1:在R4做DHCP服务，要求R1和R3的f0/0地址要自动获取2:R2的S1/1的带宽改为700K，修改R2的S1/0接口的hello-time为20S,R2的Lo不能收发任何EIGRP路由更新3:必须确保R2的EIGRP在S1/1能使用到最少70K的带宽4:为了安全起见，R1和R2之间不允许用组播建立邻居且启用EIGRP的MD5认证(keychain=ccie,key-string=cisco)5:R3启用loopback1:200.200.200.1/24,不通告进EIGRP100进程去但是要求全网都能访问这个R3环回L1(R1,R2,R4,R5是显示D*0.0.0.0)6:用最小的命令行在R4增加七个interface地址,地址为172.16.1.1/24---172.16.7.1/24(且这7条路由在R5显示DEX)7:R1，R2，R3，R5只能收到R4的七个interface地址的一条汇总路由8:R5为EIGRPstub,只通告直连9:要求从R2telnet到R5的5.5.5.5环回，登陆进去CCIE培训的时候却是登陆到了R4上10:要求从R2到R4形成非等价负载均衡配置解析:1:基本的由配置将不再给出,这里，我们来看一下DHCP的配置：R2的配置:R1#shrunintf0/0Buildingconfiguration...Currentconfiguration:63bytes!interfaceFastEthernet0/0ipaddressdhcpduplexhalfendR1#shipintbriInterfaceIP-AddressOK?MethodStatusProtocolFastEthernet0/0134.1.1.1YESDHCPupupR3的配置:R3#shrunintf0/0Buildingconfiguration...Currentconfiguration:63bytes!interfaceFastEthernet0/0ipaddressdhcpduplexhalfendR3#shipintbriInterfaceIP-AddressOK?MethodStatusProtocolFastEthernet0/0134.1.1.2YESDHCPupupR4的配置:R4#shrunBuildingconfiguration...!noipdomainlookupnoipdhcpconflictloggingipdhcpexcluded-address134.1.1.4!ipdhcppoolccienetwork134.1.1.0255.255.255.0default-router134.1.1.4dns-server202.96.128.68lease10!interfaceFastEthernet0/0ipaddress134.1.1.4255.255.255.0duplexhalfR4#shipintbriInterfaceIP-AddressOK?MethodStatusProtocolFastEthernet0/0134.1.1.4YESmanualupup2:修改带宽和Hello-time时间并不难，ccie但是要注意，这里修改了Hello-time时间，要把hold-time时间也要修改过来，保持3倍的关系,L0口不能收发任何的路由CCIE培训更新，也就是要将这个口设置成passive-interface.R2的配置:R2#shrunints1/0Buildingconfiguration...Currentconfiguration:145bytes!interfaceSerial1/0ipaddress12.1.1.2255.255.255.0iphello-intervaleigrp10020iphold-timeeigrp10060serialrestart-delay0endR2#shrunints1/1Buildingconfiguration...Currentconfiguration:101bytes!interfaceSerial1/1bandwidth700ipaddress23.1.1.2255.255.255.0serialrestart-delay0endR2#shrun|breroutereigrp100passive-interfaceLoopback0network2.2.2.20.0.0.0network12.1.1.20.0.0.0network23.1.1.20.0.0.0noauto-summary3:在上一个需求中，我们已将R2的s1/1口的带修改为700K，在使用命令时，已设置成10%R2的配置:R2#shrunints1/1Buildingconfiguration...Currentconfiguration:136bytes!interfaceSerial1/1bandwidth700ipaddress23.1.1.2255.255.255.0ipbandwidth-percenteigrp10010serialrestart-delay0end4:在EIGRP环境中，是使用组播地址为224.0.0.1进行路由的更新的，要进行单播更新，就要使用命令neighbor来进行指定邻居.对于MD5的认证，ccie可以参见前面的一些配置案例。R1的配置:R1#shrunBuildingconfiguration...!keychaincciekey1key-string70822455D0A16R1#shrunints1/1Buildingconfiguration...Currentconfiguration:168bytes!interfaceSerial1/1ipaddress12.1.1.1255.255.255.0ipauthenticationmodeeigrp100md5ipauthenticationkey-chaineigrp100ccieserialrestart-delay0endR1#shrun|breroutereigrp100network1.1.1.10.0.0.0network12.1.1.10.0.0.0network134.1.1.00.0.0.255neighbor12.1.1.2Serial1/1noauto-summaryR2的配置:R2#shrunBuildingconfiguration...!keychaincciekey1key-string7060506324F41R2#shrunints1/0Buildingconfiguration...Currentconfiguration:227bytes!interfaceSerial1/0ipaddress12.1.1.2255.255.255.0iphello-intervaleigrp10020iphold-timeeigrp10060ipauthenticationmodeeigrp100md5ipauthenticationkey-chaineigrp100ccieserialrestart-delay0endR2#shrun|breroutereigrp100passive-interfaceLoopback0network2.2.2.20.0.0.0network12.1.1.20.0.0.0network23.1.1.20.0.0.0neighbor12.1.1.1Serial1/0noauto-summary这时，我们来看一看在R1上的debug信息:R1#debeipacupEIGRPPacketsdebuggingison(UPDATE)R1#*Nov117:00:02.067:EIGRP:receivedpacketwithMD5authentication,keyid=1*Nov117:00:02.067:EIGRP:ReceivedUPDATEonSerial1/1nbr12.1.1.2*Nov117:00:02.067:AS100,Flags0x9,Seq46/0idbQ0/0R1#*Nov117:00:05.067:EIGRP:receivedpacketwithMD5authentication,keyid=1*Nov117:00:05.067:EIGRP:ReceivedUPDATEonSerial1/1nbr12.1.1.2*Nov117:00:05.067:AS100,Flags0x9,Seq46/0idbQ0/0R1#shipeineiIP-EIGRPneighborsforprocess100HAddressInterfaceHoldUptimeSRTTRTOQSeq(sec)(ms)CntNum012.1.1.2Se1/14600:06:24133850000472134.1.1.4Fa0/01100:36:48784680241134.1.1.2Fa0/01100:37:281086480455:在进行路由通告的时候有五种方法，每一种方法路由表CCIE培训的显示都是不一样的，这里我们采用汇总地址进行通告R3的配置:R3#shrunints1/0Buildingconfiguration...Currentconfiguration:134bytes!interfaceSerial1/0ipaddress23.1.1.3255.255.255.0ipsummary-addresseigrp1000.0.0.00.0.0.05serialrestart-delay0end
欢迎大家继续关注CCIE培训的网站，希望大家能从泰克的网站学到更多的知识。
页:
[1]