EIGRP综合实验2
配置要点
帧中继交换机以及PVC的配置
帧中继多点子接口配置
帧中继点对点子接口配置
EIGRP基本配置（包括静态邻居的配置）
NTP配置
EIGRP认证配置
实验拓扑
配置概述
在FRSW上配置帧中继交换机，PVC的设计如下：
R41--S1/0--S1/0.12------412------S1/0--FRSW--S1/1------421------S1/0--R42；
R41--S1/0--S1/0.12------415------S1/0--FRSW--S1/3------451------S1/0--R45；
R41--S1/0--S1/0.14------414------S1/0--FRSW--S1/2------441------S1/0--R44；
l各站点的IP地址设计如下：
nR41--S1/0--S1/0.12--172.14.12.41/24------172.14.12.42/24--S1/0--R42；
n ------172.14.12.45/24--S1/0--R45；
nR41--S1/0--S1/0.14--172.14.14.41/24------172.14.14.44/24--S1/0--R44；
lEIGRP的基本配置，包括静态邻居的配置；
lNTP的配置：
n把R41配置为NTP的服务器；
n把R42、R45和R44配置为NTP的客户端
l以R41为中心与其他各个站点（R42、R45和R44）配置EIGRP认证。
配置步骤
配置帧中继交换机
首先配置帧中继交换机
Router(config)#host FRSW3 FRSW3(config)#frame-relay switching //全局启动帧中继交换 FRSW3(config)#int s 1/0 FRSW3(config-if)#cl ra 128000 FRSW3(config-if)#encap frame-relay ietf FRSW3(config-if)#frame lmi-type q933a FRSW3(config-if)#frame intf-type dce FRSW3(config-if)#frame route 412 int s 1/1 421 FRSW3(config-if)#frame route 415 int s 1/3 451 FRSW3(config-if)#frame route 414 int s 1/2 441 FRSW3(config-if)#no sh FRSW3(config-if)#int s 1/1 FRSW3(config-if)#clock rate 128000 FRSW3(config-if)#encap frame ietf FRSW3(config-if)#frame lmi-type q933a FRSW3(config-if)#frame intf-type dce FRSW3(config-if)#frame route 421 int s 1/0 412 FRSW3(config-if)#no sh FRSW3(config-if)#int s 1/3 FRSW3(config-if)#cl ra 128000 FRSW3(config-if)#encap frame ietf FRSW3(config-if)#frame lmi-type q933a FRSW3(config-if)#frame intf-type dce FRSW3(config-if)#frame route 451 int s 1/0 415 FRSW3(config-if)#no sh FRSW3(config-if)#int s 1/2 FRSW3(config-if)#cl ra 128000 FRSW3(config-if)#encap frame ietf FRSW3(config-if)#frame lmi-type q933a FRSW3(config-if)#frame intf-type dce FRSW3(config-if)#frame route 441 int s 1/0 414 FRSW3(config-if)#no sh FRSW3(config-if)#^Z FRSW3# |
配完之后看看接口
FRSW3#sh ip int br Interface IP-Address OK? Method Status Protocol Ethernet0/0 unassigned YES unset administratively down down Serial0/0 unassigned YES unset administratively down down Ethernet0/1 unassigned YES unset administratively down down Serial1/0 unassigned YES unset down down Serial1/1 unassigned YES unset down down Serial1/2 unassigned YES unset down down Serial1/3 unassigned YES unset down down |
唉！现在都是Down的！因为站点的路由器都还没有配置呢。
中心和分支站点的配置
中心R41的配置
Router(config)#host R41 R41(config-line)#int e 0/0 R41(config-if)#ip add 192.168.41.1 255.255.255.0 R41(config-if)#no sh R41(config-if)#int s 1/0 R41(config-if)#encap frame ietf R41(config-if)#frame lmi-type q933a R41(config-if)#exit R41(config)#int s 1/0.12 ? multipoint Treat as a multipoint link point-to-point Treat as a point-to-point link R41(config)#int s 1/0.12 multipoint //多点子接口 R41(config-subif)#ip add 172.14.12.41 255.255.255.0 R41(config-subif)#frame map ip 172.14.12.42 412 R41(config-subif)#frame map ip 172.14.12.45 415 R41(config-subif)#no sh R41(config-subif)#exit R41(config)# |
继续点对点子接口的配置
R41(config)#int s 1/0.14 ? multipoint Treat as a multipoint link point-to-point Treat as a point-to-point link R41(config)#int s 1/0.14 point-to-point R41(config-subif)#ip add 172.14.14.41 255.255.255.0 R41(config-subif)#no sh R41(config-subif)#frame-relay interface-dlci 414 R41(config-fr-dlci)#no sh R41(config-subif)#^Z R41# |
分支站点R42的配置
Router(config)#host R42 R42(config)#int e 0/0 R42(config-if)#ip add 192.168.42.1 255.255.255.0 R42(config-if)#no sh R42(config-if)#int s 1/0 R42(config-if)#encap frame ietf R42(config-if)#frame lmi-type q933a R42(config-if)#ip add 172.14.12.42 255.255.255.0 R42(config-if)#no sh R42(config-if)#^Z R42# |
忙活半天了，这时可以看看接口
R42#sh ip int br Interface IP-Address OK? Method Status Protocol Ethernet0/0 192.168.42.1 YES manual up up Ethernet0/1 unassigned YES unset administratively down down Serial1/0 172.14.12.42 YES manual up up // 双UP啦！！！ Serial1/1 unassigned YES unset administratively down down Serial1/2 unassigned YES unset administratively down down Serial1/3 unassigned YES unset administratively down down R42# |
分支站点R45的配置
Router(config)#host R45 R45(config)#int e 0/0 R45(config-if)#ip add 192.168.45.1 255.255.255.0 R45(config-if)#no sh R45(config-if)#int s 1/0 R45(config-if)#encap frame ietf R45(config-if)#frame lmi-type q933a R45(config-if)#ip add 172.14.12.45 255.255.255.0 R45(config-if)#no sh R45(config-if)#^Z |
看看接口
R45#sh ip int brief Interface IP-Address OK? Method Status Protocol Ethernet0/0 192.168.45.1 YES manual up up Ethernet0/1 unassigned YES unset administratively down down Serial1/0 172.14.12.45 YES manual up up //双UP啦！！ Serial1/1 unassigned YES unset administratively down down Serial1/2 unassigned YES unset administratively down down Serial1/3 unassigned YES unset administratively down down R45# |
分支站点R44的配置
Router(config)#host R44 R44(config)#int e0/0 R44(config-if)#ip add 192.168.44.1 255.255.255.0 R44(config-if)#no sh R44(config-if)#int s 1/0 R44(config-if)#encap frame ietf R44(config-if)#frame lmi-type q933a R44(config-if)#ip add 172.14.14.44 255.255.255.0 R44(config-if)#no sh R44(config-if)#^Z |
看看接口
R44#sh ip int br Interface IP-Address OK? Method Status Protocol Ethernet0/0 192.168.44.1 YES manual up up Ethernet0/1 unassigned YES unset administratively down down Serial1/0 172.14.14.44 YES manual up up //双UP啦！！！ Serial1/1 unassigned YES unset administratively down down Serial1/2 unassigned YES unset administratively down down Serial1/3 unassigned YES unset administratively down down R44# |
完成中心和分支站点的配置之后，测试PVC之间的连通性，首先在中心站点R41上测试
R41#ping 172.14.12.42 //ping R42 !!!!! |
R41#ping 172.14.12.45 //ping R45 !!!!! |
R41#ping 172.14.14.44 //ping R44 !!!!! |
在分支站点上测试
R44#ping 172.14.14.41 //R44到R41 !!!!! |
R42#ping 172.14.12.41 //R42到R41 !!!!! |
R42#ping 172.14.12.45 //R42到R45 ….. //不通！！！ |
R45#ping 172.14.12.41 //R45到R41 !!!!! |
R45#ping 172.14.12.42 //R45到R42 ..... //不通！！！ |
在
分支站点R45和R42上接着配置
R45(config)#int s 1/0 R45(config-if)#frame map ip 172.14.12.42 451 R45(config-if)#^Z |
R42(config)#int s 1/0 R42(config-if)#frame map ip 172.14.12.45 421 R42(config-if)#^Z |
然后再测试
R42#ping 172.14.12.45 //R42到R45 !!!!! |
R45#ping 172.14.12.42 //R45到R42 !!!!! |
终于各站点之间，都通啦！！！呵呵，辛苦啦！
EIGRP的配置
各个站点的配置
R41(config)#router eigrp 100 R41(config-router)#no auto-summary R41(config-router)#net 192.168.41.0 R41(config-router)#net 172.14.12.0 0.0.0.255 //注意 R41(config-router)#passive-interface e 0/0 R41(config-router)#^Z |
R42(config)#router eigrp 100 R42(config-router)#pass e 0/0 R42(config-router)#no auto R42(config-router)#net 192.168.42.0 R42(config-router)#net 172.14.12.0 0.0.0.255 R42(config-router)#^Z |
R45(config)#router eigrp 100 R45(config-router)#no auto R45(config-router)#pass e 0/0 R45(config-router)#net 192.168.45.0 R45(config-router)#net 172.14.12.0 0.0.0.255 R45(config-router)#^Z |
R44(config)#router eigrp 100 R44(config-router)#no auto R44(config-router)#pass e 0/0 R44(config-router)#net 192.168.44.0 R44(config-router)#net 172.14.14.0 0.0.0.255 R44(config-router)#^Z |
在R41上看看路由表
R41#sh ip route Gateway of last resort is not set 172.14.0.0/24 is subnetted, 2 subnets C 172.14.14.0 is directly connected, Serial1/0.14 C 172.14.12.0 is directly connected, Serial1/0.12 C 192.168.41.0/24 is directly connected, Ethernet0/0 R41# |
OMG！全是C！！！故障排查吧。
在R41上看看邻居表
R41#sh ip eigrp nei IP-EIGRP neighbors for process 100 H Address Interface Hold Uptime SRTT RTO Q Seq (sec) (ms) Cnt Num 1 172.14.12.45 Se1/0.12 140 00:00:39 1 5000 1 0 0 172.14.12.42 Se1/0.12 168 00:02:00 1 5000 1 0 R41# |
有邻居！别着急，到别的路由器上看看在说！
在R44上看看路由表
R44#sh ip route Gateway of last resort is not set C 192.168.44.0/24 is directly connected, Ethernet0/0 172.14.0.0/24 is subnetted, 1 subnets C 172.14.14.0 is directly connected, Serial1/0 R44# |
OMG！还是C！！！
看看邻居表
R44#sh ip eigrp nei IP-EIGRP neighbors for process 100 R44# |
根本就没有邻居！
在看看R42的路由表
R42#sh ip route Gateway of last resort is not set C 192.168.42.0/24 is directly connected, Ethernet0/0 172.14.0.0/24 is subnetted, 1 subnets C 172.14.12.0 is directly connected, Serial1/0 R42# |
看看R42的邻居
R42#sh ip eigrp nei IP-EIGRP neighbors for process 100 R42# |
也没有邻居！
没有邻居，咱就手动建立邻居！
R41(config)#router eigrp 100 R41(config-router)#neighbor 172.14.12.42 serial 1/0.12 R41(config-router)#neighbor 172.14.12.45 serial 1/0.12 R41(config-router)#neighbor 172.14.14.44 serial 1/0.14 R41(config-router)#^Z R41# |
R42(config)#router eigrp 100 R42(config-router)#nei 172.14.12.41 s 1/0 R42(config-router)#nei 172.14.12.45 s 1/0 R42(config-router)#^Z |
R45(config)#router eigrp 100 R45(config-router)#neighbor 172.14.12.41 s 1/0 R45(config-router)#neighbor 172.14.12.42 s 1/0 R45(config-router)#^Z |
R44(config)#router eigrp 100 R44(config-router)#nei 172.14.14.41 s 1/0 R44(config-router)#^Z |
配置完静态邻居之后，再到R44上看看邻居表
R44#sh ip eigrp nei IP-EIGRP neighbors for process 100 R44# |
还是没有邻居！一定是哪里错啦！
在R44上产看运行配置文件
R44#sh run ! hostname R44 ! no ip domain lookup ! interface Ethernet0/0 ip address 192.168.44.1 255.255.255.0 half-duplex ! interface Serial1/0 ip address 172.14.14.44 255.255.255.0 encapsulation frame-relay IETF serial restart-delay 0 frame-relay lmi-type q933a ! router eigrp 100 passive-interface Ethernet0/0 network 172.14.14.0 0.0.0.255 network 192.168.44.0 neighbor 172.14.14.41 Serial1/0 no auto-summary ! |
没错！
在看看R41的运行配置文件
R41#sh run ! hostname R41 ! no ip domain lookup ! interface Ethernet0/0 ip address 192.168.41.1 255.255.255.0 half-duplex ! interface Serial1/0 no ip address encapsulation frame-relay IETF serial restart-delay 0 no dce-terminal-timing-enable frame-relay lmi-type q933a ! interface Serial1/0.12 multipoint ip address 172.14.12.41 255.255.255.0 frame-relay map ip 172.14.12.42 412 frame-relay map ip 172.14.12.45 415 ! interface Serial1/0.14 point-to-point ip address 172.14.14.41 255.255.255.0 frame-relay interface-dlci 414 ! router eigrp 100 passive-interface Ethernet0/0 network 172.14.12.0 0.0.0.255 network 192.168.41.0 no auto-summary neighbor 172.14.12.45 Serial1/0.12 neighbor 172.14.12.42 Serial1/0.12 ! |
看出错误了么？这是百密一疏啊！在eigrp 100中没有宣告网络172.14.14.0 0.0.0.255
改吧
R41(config)#router eigrp 100 R41(config-router)#net 172.14.14.0 0.0.0.255 |
再看邻居表和路由表
R41#sh ip eigrp nei IP-EIGRP neighbors for process 100 H Address Interface Hold Uptime SRTT RTO Q Seq (sec) (ms) Cnt Num 2 172.14.14.44 Se1/0.14 169 00:00:12 30 200 0 2 1 172.14.12.45 Se1/0.12 169 00:03:05 24 200 0 8 0 172.14.12.42 Se1/0.12 169 00:04:01 24 200 0 8 R41# |
R41#sh ip route Gateway of last resort is not set D 192.168.44.0/24 [90/2195456] via 172.14.14.44, 00:00:14, Serial1/0.14 D 192.168.45.0/24 [90/2195456] via 172.14.12.45, 00:03:09, Serial1/0.12 D 192.168.42.0/24 [90/2195456] via 172.14.12.42, 00:04:05, Serial1/0.12 172.14.0.0/24 is subnetted, 2 subnets C 172.14.14.0 is directly connected, Serial1/0.14 C 172.14.12.0 is directly connected, Serial1/0.12 C 192.168.41.0/24 is directly connected, Ethernet0/0 R41# |
终于正常啦！
NTP的配置
在R41上看看系统时间
R41#sh clock *09:23:21.363 UTC Thu Aug 18 2011 R41# |
时间不对！
我们来修改系统时间，还记得学CCNA时候的clock set命令吗？并且把R41配置为NTP服务器。
R41#clock set 20:00:00 22 aug 2011 R41# |
R41#sh clock 20:00:05.763 UTC Mon Aug 22 2011 R41# |
R41#conf t R41(config)#ntp master 10 R41(config)#^Z |
在R42上配置NTP客户机
R42#conf t R42(config)#ntp server 172.14.12.41 R42(config)#^Z R42#sh clock *09:25:00.715 UTC Thu Aug 18 2011 //错误的时间 R42#sh clock *09:25:03.179 UTC Thu Aug 18 2011 R42#sh clock *09:25:05.707 UTC Thu Aug 18 2011 R42#sh clock .20:00:58.610 UTC Mon Aug 22 2011 //同步之后的时间 R42# |
把其他几个站点也配置为NTP客户端
R45(config)#ntp server 172.14.12.41 R45(config)#^Z |
R44(config)#ntp server 172.14.14.41 R44(config)#^Z |
通过show clock命令来确认时间同步。
EIGRP认证的配置
在R44上配置
R44(config)#key chain R44CHAIN //创建密钥环 R44(config-keychain)#key 1 //第一个key R44(config-keychain-key)#key-string TechNow //密码 R44(config-keychain-key)#send 20:00:00 22 aug 2011 in //发送时间 R44(config-keychain-key)#accept 20:00:00 22 aug 2011 in //接受时间 R44(config-keychain-key)#exit R44(config-keychain)#exit R44(config)#int s 1/0 //进入接口 R44(config-if)#ip authentication mode eigrp 100 md5 //认证方式 R44(config-if)#ip authen key-chain eigrp 100 R44CHAIN //启用密钥环 R44(config-if)#^Z |
配完认证之后，看看邻居表
R44#sh ip eigrp nei IP-EIGRP neighbors for process 100 R44# |
这次邻居没了！
再到R41上配置认证
R41(config)#key chain R41CHAIN //创建密钥环 R41(config-keychain)#key 1 //第一个key R41(config-keychain-key)#key-string TechNow //密码 R41(config-keychain-key)#send 20:00:00 22 aug 2011 in //发送时间 R41(config-keychain-key)#accept 20:00:00 22 aug 2011 in //接受时间 R41(config-keychain-key)#exit R41(config-keychain)#exit R41(config)#int s 1/0.14 //进入接口 R41(config-subif)#ip authen mode eigrp 100 md5 //认证方式 R41(config-subif)#ip authentication key eigrp 100 R41CHAIN //启用密钥环 R41(config-subif)#^Z |
等一会儿，在R41（或者R44）上看看邻居
R41#sh ip eigrp nei IP-EIGRP neighbors for process 100 H Address Interface Hold Uptime SRTT RTO Q Seq (sec) (ms) Cnt Num 2 172.14.14.44 Se1/0.14 167 00:00:12 160 960 0 6 1 172.14.12.42 Se1/0.12 167 00:00:47 28 200 0 16 0 172.14.12.45 Se1/0.12 167 00:00:47 28 200 0 16 R41# |
这次我们试着把密码改成不一样的
R41(config)#key chain R41CHAIN R41(config-keychain)#key 1 R41(config-keychain-key)#key-string cisco //注意，改了，原来是TechNow R41(config-keychain-key)#^Z R41# |
再看看邻居
R41#sh ip eigrp nei IP-EIGRP neighbors for process 100 H Address Interface Hold Uptime SRTT RTO Q Seq (sec) (ms) Cnt Num 1 172.14.12.42 Se1/0.12 178 00:01:50 26 200 0 17 0 172.14.12.45 Se1/0.12 165 00:01:50 27 200 0 17 R41# |
果然少了一个！
我们再改回来
R41(config)#key chain R41CHAIN R41(config-keychain)#key 1 R41(config-keychain-key)#key-string TechNow //又改成TechNow了 R41(config-keychain-key)#^Z |
再看看邻居表
R41#sh ip eigrp nei IP-EIGRP neighbors for process 100 H Address Interface Hold Uptime SRTT RTO Q Seq (sec) (ms) Cnt Num 2 172.14.14.44 Se1/0.14 179 00:00:00 1 2000 1 0 //又回来了 1 172.14.12.42 Se1/0.12 137 00:04:22 26 200 0 17 0 172.14.12.45 Se1/0.12 139 00:04:22 27 200 0 17 R41# |
R41和R44之间的认证连玩儿带做完成了，现在把R41和R42、R45之间的认证配完！
R41(config)#int s 1/0.12 R41(config-subif)#ip authentication mode eigrp 100 md5 R41(config-subif)#ip authentication key-chain eigrp 100 R41CHAIN R41(config-subif)#^Z |
R42(config)#key chain R42CHAIN R42(config-keychain)#key 1 R42(config-keychain-key)#key-string TechNow R42(config-keychain-key)#send 20:00:00 22 aug 2011 in R42(config-keychain-key)#accept 20:00:00 22 aug 2011 in R42(config-keychain-key)#exit R42(config-keychain)#exit R42(config)#int s 1/0 R42(config-if)#ip authen mode eigrp 100 md5 R42(config-if)#ip authen key eigrp 100 R42CHAIN R42(config-if)#^Z |
R45(config)#key chain R45CHAIN R45(config-keychain)#key 1 R45(config-keychain-key)# key-string TechNow R45(config-keychain-key)#send 20:00:00 22 aug 2011 infinite R45(config-keychain-key)#accept 20:00:00 22 aug 2011 infinite R45(config-keychain-key)#exit R45(config-keychain)#exit R45(config)#int s 1/0 R45(config-if)#ip authen mode eigrp 100 md5 R45(config-if)#ip authen key eigrp 100 R45CHAIN R45(config-if)#^Z |
再看看R45的邻居表
R45#sh ip eigrp nei IP-EIGRP neighbors for process 100 H Address Interface Hold Uptime SRTT RTO Q Seq (sec) (ms) Cnt Num 1 172.14.12.42 Se1/0 139 00:00:41 70 420 0 26 0 172.14.12.41 Se1/0 139 00:00:41 42 252 0 45 R45# |
邻居关系正常！
在R45上看看路由表
R45#sh ip route Gateway of last resort is not set D 192.168.44.0/24 [90/2707456] via 172.14.12.41, 00:00:47, Serial1/0 C 192.168.45.0/24 is directly connected, Ethernet0/0 D 192.168.42.0/24 [90/2195456] via 172.14.12.42, 00:00:46, Serial1/0 172.14.0.0/24 is subnetted, 2 subnets D 172.14.14.0 [90/2681856] via 172.14.12.41, 00:00:47, Serial1/0 C 172.14.12.0 is directly connected, Serial1/0 D 192.168.41.0/24 [90/2195456] via 172.14.12.41, 00:00:47, Serial1/0 R45# |
一切正常！
怎么着？再玩一次？
在R41上
R41(config)#key chain R41CHAIN R41(config-keychain)#key 1 R41(config-keychain-key)#key-string cisco //原来是TechNow R41(config-keychain-key)#^Z |
在R41上看看邻居
R41#sh ip eigrp nei IP-EIGRP neighbors for process 100 R41# |
邻居没了！
在R41上再把密码改正确
R41(config)#key chain R41CHAIN R41(config-keychain)#key 1 R41(config-keychain-key)#key-string TechNow //密码改成正确的了 R41(config-keychain-key)#^Z |
稍等一会儿，再看看邻居表
R41#sh ip eigrp nei IP-EIGRP neighbors for process 100 H Address Interface Hold Uptime SRTT RTO Q Seq (sec) (ms) Cnt Num 2 172.14.14.44 Se1/0.14 179 00:00:02 40 240 0 13 1 172.14.12.42 Se1/0.12 179 00:00:57 831 4986 0 32 0 172.14.12.45 Se1/0.12 179 00:00:57 31 200 0 32 R41# |
至此，实验完成！
