CCNA实验总结（三）—动态路由EIGRP

系统管理员 2022-04-05 09:12 225阅读 0赞

实验原理：

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxOTU1NjUz_size_16_color_FFFFFF_t_70][]

实验要求：

1.保障更新安全，全网可达;

2.R3和R4分别有两个环回接口;

3.R1的环回不能被宣告;

4.实现非等开销负载均衡;

5.减少路由条目。

实验配置：

R1配置：

key chain eigrp
     key 1    
      key-string cisco123
           
    interface Loopback0
     ip address 1.1.1.1 255.255.255.0
                   
    interface Ethernet0/1
     ip address 172.16.0.1 255.255.255.248
     ip authentication mode eigrp 90 md5
     ip authentication key-chain eigrp 90 eigrp
     ip summary-address eigrp 90 0.0.0.0 0.0.0.0
             
    router eigrp 90
     network 172.16.0.0 0.0.0.255

R2配置：

key chain eigrp
     key 1    
      key-string cisco123
    key chain s
     key 1    
      key-string cisco
             
    interface Loopback0
     ip address 172.16.2.1 255.255.255.0
             
    interface Ethernet0/0
     ip address 172.16.0.2 255.255.255.248
     ip authentication mode eigrp 90 md5
     ip authentication key-chain eigrp 90 eigrp
            
    interface Serial1/1
     ip address 172.16.0.9 255.255.255.252
     ip authentication mode eigrp 90 md5
     ip authentication key-chain eigrp 90 s
            
    router eigrp 90
     network 172.16.0.0
     passive-interface Loopback0

R3配置：

key chain eigrp
     key 1    
      key-string cisco123
    key chain s
     key 1    
      key-string cisco
             
    interface Loopback0
     ip address 172.16.3.1 255.255.255.128
             
    interface Loopback1
     ip address 172.16.3.129 255.255.255.128
             
    interface Ethernet0/0
     ip address 172.16.0.3 255.255.255.248
     ip authentication mode eigrp 90 md5
     ip authentication key-chain eigrp 90 eigrp
     ip summary-address eigrp 90 172.16.3.0 255.255.255.0
    
    interface Serial1/1
     ip address 172.16.0.10 255.255.255.252
     ip authentication mode eigrp 90 md5
     ip authentication key-chain eigrp 90 s
     ip summary-address eigrp 90 172.16.3.0 255.255.255.0
            
    interface Serial1/2
     ip address 172.16.0.13 255.255.255.252
     ip authentication mode eigrp 90 md5
     ip authentication key-chain eigrp 90 s
     ip summary-address eigrp 90 172.16.3.0 255.255.255.0
    
    router eigrp 90
     variance 6 //注释
     network 172.16.0.0
     passive-interface Loopback0
     passive-interface Loopback1

R4配置：

key chain eigrp
     key 1    
      key-string cisco123
    key chain s
     key 1    
      key-string cisco
             
    interface Loopback0
     ip address 172.16.4.1 255.255.255.128
             
    interface Loopback1
     ip address 172.16.4.129 255.255.255.128
           
    interface Ethernet0/0
     ip address 172.16.0.4 255.255.255.248
     ip authentication mode eigrp 90 md5
     ip authentication key-chain eigrp 90 eigrp
     ip summary-address eigrp 90 172.16.4.0 255.255.255.0
            
    interface Serial1/2
     ip address 172.16.0.14 255.255.255.252
     ip authentication mode eigrp 90 md5
     ip authentication key-chain eigrp 90 s
     ip summary-address eigrp 90 172.16.4.0 255.255.255.0
           
    router eigrp 90
     network 172.16.0.0
     passive-interface Loopback0
     passive-interface Loopback1

实验结果测试：

查看R1路由表
    R1#show ip route
    Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
           D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area 
           N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
           E1 - OSPF external type 1, E2 - OSPF external type 2
           i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
           ia - IS-IS inter area, * - candidate default, U - per-user static route
           o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
           + - replicated route, % - next hop override
    
    Gateway of last resort is 0.0.0.0 to network 0.0.0.0
    
    D*    0.0.0.0/0 is a summary, 00:24:59, Null0
          1.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
    C        1.1.1.0/24 is directly connected, Loopback0
    L        1.1.1.1/32 is directly connected, Loopback0
          172.16.0.0/16 is variably subnetted, 7 subnets, 4 masks
    C        172.16.0.0/29 is directly connected, Ethernet0/1
    L        172.16.0.1/32 is directly connected, Ethernet0/1
    D        172.16.0.8/30 [90/2195456] via 172.16.0.3, 00:26:10, Ethernet0/1
                           [90/2195456] via 172.16.0.2, 00:26:10, Ethernet0/1
    D        172.16.0.12/30 [90/2195456] via 172.16.0.4, 00:26:10, Ethernet0/1
                            [90/2195456] via 172.16.0.3, 00:26:10, Ethernet0/1
    D        172.16.2.0/24 [90/409600] via 172.16.0.2, 00:26:15, Ethernet0/1
    D        172.16.3.0/24 [90/409600] via 172.16.0.3, 00:26:10, Ethernet0/1
    D        172.16.4.0/24 [90/409600] via 172.16.0.4, 00:26:13, Ethernet0/1
    查看R2路由表
    
    D*    0.0.0.0/0 [90/307200] via 172.16.0.1, 00:18:00, Ethernet0/0
          172.16.0.0/16 is variably subnetted, 9 subnets, 4 masks
    C        172.16.0.0/29 is directly connected, Ethernet0/0
    L        172.16.0.2/32 is directly connected, Ethernet0/0
    C        172.16.0.8/30 is directly connected, Serial1/1
    L        172.16.0.9/32 is directly connected, Serial1/1
    D        172.16.0.12/30 [90/2195456] via 172.16.0.4, 00:18:00, Ethernet0/0
                            [90/2195456] via 172.16.0.3, 00:18:00, Ethernet0/0
    C        172.16.2.0/24 is directly connected, Loopback0
    L        172.16.2.1/32 is directly connected, Loopback0
    D        172.16.3.0/24 [90/409600] via 172.16.0.3, 00:18:00, Ethernet0/0
    D        172.16.4.0/24 [90/409600] via 172.16.0.4, 00:18:00, Ethernet0/0
    查看R3路由表
    D*    0.0.0.0/0 [90/307200] via 172.16.0.1, 00:19:04, Ethernet0/0
          172.16.0.0/16 is variably subnetted, 13 subnets, 5 masks
    C        172.16.0.0/29 is directly connected, Ethernet0/0
    L        172.16.0.3/32 is directly connected, Ethernet0/0
    C        172.16.0.8/30 is directly connected, Serial1/1
    L        172.16.0.10/32 is directly connected, Serial1/1
    C        172.16.0.12/30 is directly connected, Serial1/2
    L        172.16.0.13/32 is directly connected, Serial1/2
    D        172.16.2.0/24 [90/2323456] via 172.16.0.14, 00:19:04, Serial1/2
                           [90/2297856] via 172.16.0.9, 00:19:04, Serial1/1
                           [90/409600] via 172.16.0.2, 00:19:04, Ethernet0/0
    D        172.16.3.0/24 is a summary, 00:19:04, Null0
    C        172.16.3.0/25 is directly connected, Loopback0
    L        172.16.3.1/32 is directly connected, Loopback0
    C        172.16.3.128/25 is directly connected, Loopback1
    L        172.16.3.129/32 is directly connected, Loopback1
    D        172.16.4.0/24 [90/2297856] via 172.16.0.14, 00:19:04, Serial1/2
                           [90/2323456] via 172.16.0.9, 00:19:04, Serial1/1
                           [90/409600] via 172.16.0.4, 00:19:04, Ethernet0/0
    查看R4路由表
    
    D*    0.0.0.0/0 [90/307200] via 172.16.0.1, 00:21:49, Ethernet0/0
          172.16.0.0/16 is variably subnetted, 12 subnets, 5 masks
    C        172.16.0.0/29 is directly connected, Ethernet0/0
    L        172.16.0.4/32 is directly connected, Ethernet0/0
    D        172.16.0.8/30 [90/2681856] via 172.16.0.13, 00:21:49, Serial1/2
                           [90/2195456] via 172.16.0.3, 00:21:49, Ethernet0/0
                           [90/2195456] via 172.16.0.2, 00:21:49, Ethernet0/0
    C        172.16.0.12/30 is directly connected, Serial1/2
    L        172.16.0.14/32 is directly connected, Serial1/2
    D        172.16.2.0/24 [90/409600] via 172.16.0.2, 00:21:49, Ethernet0/0
    D        172.16.3.0/24 [90/409600] via 172.16.0.3, 00:21:49, Ethernet0/0
    D        172.16.4.0/24 is a summary, 00:21:49, Null0
    C        172.16.4.0/25 is directly connected, Loopback0
    L        172.16.4.1/32 is directly connected, Loopback0
    C        172.16.4.128/25 is directly connected, Loopback1
    L        172.16.4.129/32 is directly connected, Loopback1

实验总结：

这个实验产生缺省路由的方法为在路由器的出接口进入内网区域进行汇总产生缺省;减少路由条目数量的方法为合理规划IP地址以及进行路由汇总;负载均衡需要进行度量的计算以及对比，给出合理的负载均衡比值.metric的计算公式为：

计算度量时，存在权重值:( K1 = 1，K2 = 0，K3 = 1，K4 = 0，K5 = 0）：  
当K5为0：  
公制= \[K1 \* BW +（（K2 \* BW）/（ 256 - 负载））+ K3 \*延迟\]   
当K5大于0：  
公制= \[K1 \* BW +（（K2 \* BW）/（256 - 负载））+ K3 \*延迟\] \* \[K5 /（可靠性+ K4）\]

修改variance后的参数即可，通过查看EIGRP的拓扑可以查看主备份metric的值，通过计算向上取整得到这参数即可。

认证为本地生成一个秘钥库，在链路接口上调用这个秘钥库来保证链路安全，其中秘钥库名可以不一样，但秘钥库中的秘钥要保持一致，否则无法认证成功。

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxOTU1NjUz_size_16_color_FFFFFF_t_70]: /images/20220405/c0f046aaf20843fa97d5a4b5cb2eae0e.png