實驗原理:

實驗要求:
1.保障更新安全,全網可達;
2.R3和R4分别有兩個環回接口;
3.R1的環回不能被宣告;
4.實作非等開銷負載均衡;
5.減少路由條目。
實驗配置:
R1配置:
key chain eigrp
key 1
key-string cisco123
interface Loopback0
ip address 1.1.1.1 255.255.255.0
interface Ethernet0/1
ip address 172.16.0.1 255.255.255.248
ip authentication mode eigrp 90 md5
ip authentication key-chain eigrp 90 eigrp
ip summary-address eigrp 90 0.0.0.0 0.0.0.0
router eigrp 90
network 172.16.0.0 0.0.0.255
R2配置:
key chain eigrp
key 1
key-string cisco123
key chain s
key 1
key-string cisco
interface Loopback0
ip address 172.16.2.1 255.255.255.0
interface Ethernet0/0
ip address 172.16.0.2 255.255.255.248
ip authentication mode eigrp 90 md5
ip authentication key-chain eigrp 90 eigrp
interface Serial1/1
ip address 172.16.0.9 255.255.255.252
ip authentication mode eigrp 90 md5
ip authentication key-chain eigrp 90 s
router eigrp 90
network 172.16.0.0
passive-interface Loopback0
R3配置:
key chain eigrp
key 1
key-string cisco123
key chain s
key 1
key-string cisco
interface Loopback0
ip address 172.16.3.1 255.255.255.128
interface Loopback1
ip address 172.16.3.129 255.255.255.128
interface Ethernet0/0
ip address 172.16.0.3 255.255.255.248
ip authentication mode eigrp 90 md5
ip authentication key-chain eigrp 90 eigrp
ip summary-address eigrp 90 172.16.3.0 255.255.255.0
interface Serial1/1
ip address 172.16.0.10 255.255.255.252
ip authentication mode eigrp 90 md5
ip authentication key-chain eigrp 90 s
ip summary-address eigrp 90 172.16.3.0 255.255.255.0
interface Serial1/2
ip address 172.16.0.13 255.255.255.252
ip authentication mode eigrp 90 md5
ip authentication key-chain eigrp 90 s
ip summary-address eigrp 90 172.16.3.0 255.255.255.0
router eigrp 90
variance 6 //注釋
network 172.16.0.0
passive-interface Loopback0
passive-interface Loopback1
R4配置:
key chain eigrp
key 1
key-string cisco123
key chain s
key 1
key-string cisco
interface Loopback0
ip address 172.16.4.1 255.255.255.128
interface Loopback1
ip address 172.16.4.129 255.255.255.128
interface Ethernet0/0
ip address 172.16.0.4 255.255.255.248
ip authentication mode eigrp 90 md5
ip authentication key-chain eigrp 90 eigrp
ip summary-address eigrp 90 172.16.4.0 255.255.255.0
interface Serial1/2
ip address 172.16.0.14 255.255.255.252
ip authentication mode eigrp 90 md5
ip authentication key-chain eigrp 90 s
ip summary-address eigrp 90 172.16.4.0 255.255.255.0
router eigrp 90
network 172.16.0.0
passive-interface Loopback0
passive-interface Loopback1
實驗結果測試:
檢視R1路由表
R1#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is 0.0.0.0 to network 0.0.0.0
D* 0.0.0.0/0 is a summary, 00:24:59, Null0
1.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 1.1.1.0/24 is directly connected, Loopback0
L 1.1.1.1/32 is directly connected, Loopback0
172.16.0.0/16 is variably subnetted, 7 subnets, 4 masks
C 172.16.0.0/29 is directly connected, Ethernet0/1
L 172.16.0.1/32 is directly connected, Ethernet0/1
D 172.16.0.8/30 [90/2195456] via 172.16.0.3, 00:26:10, Ethernet0/1
[90/2195456] via 172.16.0.2, 00:26:10, Ethernet0/1
D 172.16.0.12/30 [90/2195456] via 172.16.0.4, 00:26:10, Ethernet0/1
[90/2195456] via 172.16.0.3, 00:26:10, Ethernet0/1
D 172.16.2.0/24 [90/409600] via 172.16.0.2, 00:26:15, Ethernet0/1
D 172.16.3.0/24 [90/409600] via 172.16.0.3, 00:26:10, Ethernet0/1
D 172.16.4.0/24 [90/409600] via 172.16.0.4, 00:26:13, Ethernet0/1
檢視R2路由表
D* 0.0.0.0/0 [90/307200] via 172.16.0.1, 00:18:00, Ethernet0/0
172.16.0.0/16 is variably subnetted, 9 subnets, 4 masks
C 172.16.0.0/29 is directly connected, Ethernet0/0
L 172.16.0.2/32 is directly connected, Ethernet0/0
C 172.16.0.8/30 is directly connected, Serial1/1
L 172.16.0.9/32 is directly connected, Serial1/1
D 172.16.0.12/30 [90/2195456] via 172.16.0.4, 00:18:00, Ethernet0/0
[90/2195456] via 172.16.0.3, 00:18:00, Ethernet0/0
C 172.16.2.0/24 is directly connected, Loopback0
L 172.16.2.1/32 is directly connected, Loopback0
D 172.16.3.0/24 [90/409600] via 172.16.0.3, 00:18:00, Ethernet0/0
D 172.16.4.0/24 [90/409600] via 172.16.0.4, 00:18:00, Ethernet0/0
檢視R3路由表
D* 0.0.0.0/0 [90/307200] via 172.16.0.1, 00:19:04, Ethernet0/0
172.16.0.0/16 is variably subnetted, 13 subnets, 5 masks
C 172.16.0.0/29 is directly connected, Ethernet0/0
L 172.16.0.3/32 is directly connected, Ethernet0/0
C 172.16.0.8/30 is directly connected, Serial1/1
L 172.16.0.10/32 is directly connected, Serial1/1
C 172.16.0.12/30 is directly connected, Serial1/2
L 172.16.0.13/32 is directly connected, Serial1/2
D 172.16.2.0/24 [90/2323456] via 172.16.0.14, 00:19:04, Serial1/2
[90/2297856] via 172.16.0.9, 00:19:04, Serial1/1
[90/409600] via 172.16.0.2, 00:19:04, Ethernet0/0
D 172.16.3.0/24 is a summary, 00:19:04, Null0
C 172.16.3.0/25 is directly connected, Loopback0
L 172.16.3.1/32 is directly connected, Loopback0
C 172.16.3.128/25 is directly connected, Loopback1
L 172.16.3.129/32 is directly connected, Loopback1
D 172.16.4.0/24 [90/2297856] via 172.16.0.14, 00:19:04, Serial1/2
[90/2323456] via 172.16.0.9, 00:19:04, Serial1/1
[90/409600] via 172.16.0.4, 00:19:04, Ethernet0/0
檢視R4路由表
D* 0.0.0.0/0 [90/307200] via 172.16.0.1, 00:21:49, Ethernet0/0
172.16.0.0/16 is variably subnetted, 12 subnets, 5 masks
C 172.16.0.0/29 is directly connected, Ethernet0/0
L 172.16.0.4/32 is directly connected, Ethernet0/0
D 172.16.0.8/30 [90/2681856] via 172.16.0.13, 00:21:49, Serial1/2
[90/2195456] via 172.16.0.3, 00:21:49, Ethernet0/0
[90/2195456] via 172.16.0.2, 00:21:49, Ethernet0/0
C 172.16.0.12/30 is directly connected, Serial1/2
L 172.16.0.14/32 is directly connected, Serial1/2
D 172.16.2.0/24 [90/409600] via 172.16.0.2, 00:21:49, Ethernet0/0
D 172.16.3.0/24 [90/409600] via 172.16.0.3, 00:21:49, Ethernet0/0
D 172.16.4.0/24 is a summary, 00:21:49, Null0
C 172.16.4.0/25 is directly connected, Loopback0
L 172.16.4.1/32 is directly connected, Loopback0
C 172.16.4.128/25 is directly connected, Loopback1
L 172.16.4.129/32 is directly connected, Loopback1
實驗總結:
這個實驗産生預設路由的方法為在路由器的出接口進入内網區域進行彙總産生預設;減少路由條目數量的方法為合理規劃IP位址以及進行路由彙總;負載均衡需要進行度量的計算以及對比,給出合理的負載均衡比值.metric的計算公式為:
計算度量時,存在權重值:( K1 = 1,K2 = 0,K3 = 1,K4 = 0,K5 = 0):
當K5為0:
公制= [K1 * BW +((K2 * BW)/( 256 - 負載))+ K3 *延遲]
當K5大于0:
公制= [K1 * BW +((K2 * BW)/(256 - 負載))+ K3 *延遲] * [K5 /(可靠性+ K4)]
修改variance後的參數即可,通過檢視EIGRP的拓撲可以檢視主備份metric的值,通過計算向上取整得到這參數即可。
認證為本地生成一個秘鑰庫,在鍊路接口上調用這個秘鑰庫來保證鍊路安全,其中秘鑰庫名可以不一樣,但秘鑰庫中的秘鑰要保持一緻,否則無法認證成功。