CCNA实验总结（三）—动态路由EIGRP

实验原理：

实验要求：

1.保障更新安全，全网可达;

2.R3和R4分别有两个环回接口;

3.R1的环回不能被宣告;

4.实现非等开销负载均衡;

5.减少路由条目。

实验配置：

R1配置：

key chain eigrp
 key 1    
  key-string cisco123
       
interface Loopback0
 ip address 1.1.1.1 255.255.255.0
               
interface Ethernet0/1
 ip address 172.16.0.1 255.255.255.248
 ip authentication mode eigrp 90 md5
 ip authentication key-chain eigrp 90 eigrp
 ip summary-address eigrp 90 0.0.0.0 0.0.0.0
         
router eigrp 90
 network 172.16.0.0 0.0.0.255

R2配置：

key chain eigrp
 key 1    
  key-string cisco123
key chain s
 key 1    
  key-string cisco
         
interface Loopback0
 ip address 172.16.2.1 255.255.255.0
         
interface Ethernet0/0
 ip address 172.16.0.2 255.255.255.248
 ip authentication mode eigrp 90 md5
 ip authentication key-chain eigrp 90 eigrp
        
interface Serial1/1
 ip address 172.16.0.9 255.255.255.252
 ip authentication mode eigrp 90 md5
 ip authentication key-chain eigrp 90 s
        
router eigrp 90
 network 172.16.0.0
 passive-interface Loopback0

R3配置：

key chain eigrp
 key 1    
  key-string cisco123
key chain s
 key 1    
  key-string cisco
         
interface Loopback0
 ip address 172.16.3.1 255.255.255.128
         
interface Loopback1
 ip address 172.16.3.129 255.255.255.128
         
interface Ethernet0/0
 ip address 172.16.0.3 255.255.255.248
 ip authentication mode eigrp 90 md5
 ip authentication key-chain eigrp 90 eigrp
 ip summary-address eigrp 90 172.16.3.0 255.255.255.0

interface Serial1/1
 ip address 172.16.0.10 255.255.255.252
 ip authentication mode eigrp 90 md5
 ip authentication key-chain eigrp 90 s
 ip summary-address eigrp 90 172.16.3.0 255.255.255.0
        
interface Serial1/2
 ip address 172.16.0.13 255.255.255.252
 ip authentication mode eigrp 90 md5
 ip authentication key-chain eigrp 90 s
 ip summary-address eigrp 90 172.16.3.0 255.255.255.0

router eigrp 90
 variance 6 //注释
 network 172.16.0.0
 passive-interface Loopback0
 passive-interface Loopback1

R4配置：

key chain eigrp
 key 1    
  key-string cisco123
key chain s
 key 1    
  key-string cisco
         
interface Loopback0
 ip address 172.16.4.1 255.255.255.128
         
interface Loopback1
 ip address 172.16.4.129 255.255.255.128
       
interface Ethernet0/0
 ip address 172.16.0.4 255.255.255.248
 ip authentication mode eigrp 90 md5
 ip authentication key-chain eigrp 90 eigrp
 ip summary-address eigrp 90 172.16.4.0 255.255.255.0
        
interface Serial1/2
 ip address 172.16.0.14 255.255.255.252
 ip authentication mode eigrp 90 md5
 ip authentication key-chain eigrp 90 s
 ip summary-address eigrp 90 172.16.4.0 255.255.255.0
       
router eigrp 90
 network 172.16.0.0
 passive-interface Loopback0
 passive-interface Loopback1

实验结果测试：

查看R1路由表
R1#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area 
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
       + - replicated route, % - next hop override

Gateway of last resort is 0.0.0.0 to network 0.0.0.0

D*    0.0.0.0/0 is a summary, 00:24:59, Null0
      1.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C        1.1.1.0/24 is directly connected, Loopback0
L        1.1.1.1/32 is directly connected, Loopback0
      172.16.0.0/16 is variably subnetted, 7 subnets, 4 masks
C        172.16.0.0/29 is directly connected, Ethernet0/1
L        172.16.0.1/32 is directly connected, Ethernet0/1
D        172.16.0.8/30 [90/2195456] via 172.16.0.3, 00:26:10, Ethernet0/1
                       [90/2195456] via 172.16.0.2, 00:26:10, Ethernet0/1
D        172.16.0.12/30 [90/2195456] via 172.16.0.4, 00:26:10, Ethernet0/1
                        [90/2195456] via 172.16.0.3, 00:26:10, Ethernet0/1
D        172.16.2.0/24 [90/409600] via 172.16.0.2, 00:26:15, Ethernet0/1
D        172.16.3.0/24 [90/409600] via 172.16.0.3, 00:26:10, Ethernet0/1
D        172.16.4.0/24 [90/409600] via 172.16.0.4, 00:26:13, Ethernet0/1
查看R2路由表

D*    0.0.0.0/0 [90/307200] via 172.16.0.1, 00:18:00, Ethernet0/0
      172.16.0.0/16 is variably subnetted, 9 subnets, 4 masks
C        172.16.0.0/29 is directly connected, Ethernet0/0
L        172.16.0.2/32 is directly connected, Ethernet0/0
C        172.16.0.8/30 is directly connected, Serial1/1
L        172.16.0.9/32 is directly connected, Serial1/1
D        172.16.0.12/30 [90/2195456] via 172.16.0.4, 00:18:00, Ethernet0/0
                        [90/2195456] via 172.16.0.3, 00:18:00, Ethernet0/0
C        172.16.2.0/24 is directly connected, Loopback0
L        172.16.2.1/32 is directly connected, Loopback0
D        172.16.3.0/24 [90/409600] via 172.16.0.3, 00:18:00, Ethernet0/0
D        172.16.4.0/24 [90/409600] via 172.16.0.4, 00:18:00, Ethernet0/0
查看R3路由表
D*    0.0.0.0/0 [90/307200] via 172.16.0.1, 00:19:04, Ethernet0/0
      172.16.0.0/16 is variably subnetted, 13 subnets, 5 masks
C        172.16.0.0/29 is directly connected, Ethernet0/0
L        172.16.0.3/32 is directly connected, Ethernet0/0
C        172.16.0.8/30 is directly connected, Serial1/1
L        172.16.0.10/32 is directly connected, Serial1/1
C        172.16.0.12/30 is directly connected, Serial1/2
L        172.16.0.13/32 is directly connected, Serial1/2
D        172.16.2.0/24 [90/2323456] via 172.16.0.14, 00:19:04, Serial1/2
                       [90/2297856] via 172.16.0.9, 00:19:04, Serial1/1
                       [90/409600] via 172.16.0.2, 00:19:04, Ethernet0/0
D        172.16.3.0/24 is a summary, 00:19:04, Null0
C        172.16.3.0/25 is directly connected, Loopback0
L        172.16.3.1/32 is directly connected, Loopback0
C        172.16.3.128/25 is directly connected, Loopback1
L        172.16.3.129/32 is directly connected, Loopback1
D        172.16.4.0/24 [90/2297856] via 172.16.0.14, 00:19:04, Serial1/2
                       [90/2323456] via 172.16.0.9, 00:19:04, Serial1/1
                       [90/409600] via 172.16.0.4, 00:19:04, Ethernet0/0
查看R4路由表

D*    0.0.0.0/0 [90/307200] via 172.16.0.1, 00:21:49, Ethernet0/0
      172.16.0.0/16 is variably subnetted, 12 subnets, 5 masks
C        172.16.0.0/29 is directly connected, Ethernet0/0
L        172.16.0.4/32 is directly connected, Ethernet0/0
D        172.16.0.8/30 [90/2681856] via 172.16.0.13, 00:21:49, Serial1/2
                       [90/2195456] via 172.16.0.3, 00:21:49, Ethernet0/0
                       [90/2195456] via 172.16.0.2, 00:21:49, Ethernet0/0
C        172.16.0.12/30 is directly connected, Serial1/2
L        172.16.0.14/32 is directly connected, Serial1/2
D        172.16.2.0/24 [90/409600] via 172.16.0.2, 00:21:49, Ethernet0/0
D        172.16.3.0/24 [90/409600] via 172.16.0.3, 00:21:49, Ethernet0/0
D        172.16.4.0/24 is a summary, 00:21:49, Null0
C        172.16.4.0/25 is directly connected, Loopback0
L        172.16.4.1/32 is directly connected, Loopback0
C        172.16.4.128/25 is directly connected, Loopback1
L        172.16.4.129/32 is directly connected, Loopback1

实验总结：

这个实验产生缺省路由的方法为在路由器的出接口进入内网区域进行汇总产生缺省;减少路由条目数量的方法为合理规划IP地址以及进行路由汇总;负载均衡需要进行度量的计算以及对比，给出合理的负载均衡比值.metric的计算公式为：

计算度量时，存在权重值:( K1 = 1，K2 = 0，K3 = 1，K4 = 0，K5 = 0）：
当K5为0：
公制= [K1 * BW +（（K2 * BW）/（ 256 - 负载））+ K3 *延迟]
当K5大于0：
公制= [K1 * BW +（（K2 * BW）/（256 - 负载））+ K3 *延迟] * [K5 /（可靠性+ K4）]

修改variance后的参数即可，通过查看EIGRP的拓扑可以查看主备份metric的值，通过计算向上取整得到这参数即可。

认证为本地生成一个秘钥库，在链路接口上调用这个秘钥库来保证链路安全，其中秘钥库名可以不一样，但秘钥库中的秘钥要保持一致，否则无法认证成功。

CCNA实验总结（三）—动态路由EIGRP

猜你喜欢