实验原理:

实验要求:
1.保障更新安全,全网可达;
2.R3和R4分别有两个环回接口;
3.R1的环回不能被宣告;
4.实现非等开销负载均衡;
5.减少路由条目。
实验配置:
R1配置:
key chain eigrp
key 1
key-string cisco123
interface Loopback0
ip address 1.1.1.1 255.255.255.0
interface Ethernet0/1
ip address 172.16.0.1 255.255.255.248
ip authentication mode eigrp 90 md5
ip authentication key-chain eigrp 90 eigrp
ip summary-address eigrp 90 0.0.0.0 0.0.0.0
router eigrp 90
network 172.16.0.0 0.0.0.255
R2配置:
key chain eigrp
key 1
key-string cisco123
key chain s
key 1
key-string cisco
interface Loopback0
ip address 172.16.2.1 255.255.255.0
interface Ethernet0/0
ip address 172.16.0.2 255.255.255.248
ip authentication mode eigrp 90 md5
ip authentication key-chain eigrp 90 eigrp
interface Serial1/1
ip address 172.16.0.9 255.255.255.252
ip authentication mode eigrp 90 md5
ip authentication key-chain eigrp 90 s
router eigrp 90
network 172.16.0.0
passive-interface Loopback0
R3配置:
key chain eigrp
key 1
key-string cisco123
key chain s
key 1
key-string cisco
interface Loopback0
ip address 172.16.3.1 255.255.255.128
interface Loopback1
ip address 172.16.3.129 255.255.255.128
interface Ethernet0/0
ip address 172.16.0.3 255.255.255.248
ip authentication mode eigrp 90 md5
ip authentication key-chain eigrp 90 eigrp
ip summary-address eigrp 90 172.16.3.0 255.255.255.0
interface Serial1/1
ip address 172.16.0.10 255.255.255.252
ip authentication mode eigrp 90 md5
ip authentication key-chain eigrp 90 s
ip summary-address eigrp 90 172.16.3.0 255.255.255.0
interface Serial1/2
ip address 172.16.0.13 255.255.255.252
ip authentication mode eigrp 90 md5
ip authentication key-chain eigrp 90 s
ip summary-address eigrp 90 172.16.3.0 255.255.255.0
router eigrp 90
variance 6 //注释
network 172.16.0.0
passive-interface Loopback0
passive-interface Loopback1
R4配置:
key chain eigrp
key 1
key-string cisco123
key chain s
key 1
key-string cisco
interface Loopback0
ip address 172.16.4.1 255.255.255.128
interface Loopback1
ip address 172.16.4.129 255.255.255.128
interface Ethernet0/0
ip address 172.16.0.4 255.255.255.248
ip authentication mode eigrp 90 md5
ip authentication key-chain eigrp 90 eigrp
ip summary-address eigrp 90 172.16.4.0 255.255.255.0
interface Serial1/2
ip address 172.16.0.14 255.255.255.252
ip authentication mode eigrp 90 md5
ip authentication key-chain eigrp 90 s
ip summary-address eigrp 90 172.16.4.0 255.255.255.0
router eigrp 90
network 172.16.0.0
passive-interface Loopback0
passive-interface Loopback1
实验结果测试:
查看R1路由表
R1#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is 0.0.0.0 to network 0.0.0.0
D* 0.0.0.0/0 is a summary, 00:24:59, Null0
1.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 1.1.1.0/24 is directly connected, Loopback0
L 1.1.1.1/32 is directly connected, Loopback0
172.16.0.0/16 is variably subnetted, 7 subnets, 4 masks
C 172.16.0.0/29 is directly connected, Ethernet0/1
L 172.16.0.1/32 is directly connected, Ethernet0/1
D 172.16.0.8/30 [90/2195456] via 172.16.0.3, 00:26:10, Ethernet0/1
[90/2195456] via 172.16.0.2, 00:26:10, Ethernet0/1
D 172.16.0.12/30 [90/2195456] via 172.16.0.4, 00:26:10, Ethernet0/1
[90/2195456] via 172.16.0.3, 00:26:10, Ethernet0/1
D 172.16.2.0/24 [90/409600] via 172.16.0.2, 00:26:15, Ethernet0/1
D 172.16.3.0/24 [90/409600] via 172.16.0.3, 00:26:10, Ethernet0/1
D 172.16.4.0/24 [90/409600] via 172.16.0.4, 00:26:13, Ethernet0/1
查看R2路由表
D* 0.0.0.0/0 [90/307200] via 172.16.0.1, 00:18:00, Ethernet0/0
172.16.0.0/16 is variably subnetted, 9 subnets, 4 masks
C 172.16.0.0/29 is directly connected, Ethernet0/0
L 172.16.0.2/32 is directly connected, Ethernet0/0
C 172.16.0.8/30 is directly connected, Serial1/1
L 172.16.0.9/32 is directly connected, Serial1/1
D 172.16.0.12/30 [90/2195456] via 172.16.0.4, 00:18:00, Ethernet0/0
[90/2195456] via 172.16.0.3, 00:18:00, Ethernet0/0
C 172.16.2.0/24 is directly connected, Loopback0
L 172.16.2.1/32 is directly connected, Loopback0
D 172.16.3.0/24 [90/409600] via 172.16.0.3, 00:18:00, Ethernet0/0
D 172.16.4.0/24 [90/409600] via 172.16.0.4, 00:18:00, Ethernet0/0
查看R3路由表
D* 0.0.0.0/0 [90/307200] via 172.16.0.1, 00:19:04, Ethernet0/0
172.16.0.0/16 is variably subnetted, 13 subnets, 5 masks
C 172.16.0.0/29 is directly connected, Ethernet0/0
L 172.16.0.3/32 is directly connected, Ethernet0/0
C 172.16.0.8/30 is directly connected, Serial1/1
L 172.16.0.10/32 is directly connected, Serial1/1
C 172.16.0.12/30 is directly connected, Serial1/2
L 172.16.0.13/32 is directly connected, Serial1/2
D 172.16.2.0/24 [90/2323456] via 172.16.0.14, 00:19:04, Serial1/2
[90/2297856] via 172.16.0.9, 00:19:04, Serial1/1
[90/409600] via 172.16.0.2, 00:19:04, Ethernet0/0
D 172.16.3.0/24 is a summary, 00:19:04, Null0
C 172.16.3.0/25 is directly connected, Loopback0
L 172.16.3.1/32 is directly connected, Loopback0
C 172.16.3.128/25 is directly connected, Loopback1
L 172.16.3.129/32 is directly connected, Loopback1
D 172.16.4.0/24 [90/2297856] via 172.16.0.14, 00:19:04, Serial1/2
[90/2323456] via 172.16.0.9, 00:19:04, Serial1/1
[90/409600] via 172.16.0.4, 00:19:04, Ethernet0/0
查看R4路由表
D* 0.0.0.0/0 [90/307200] via 172.16.0.1, 00:21:49, Ethernet0/0
172.16.0.0/16 is variably subnetted, 12 subnets, 5 masks
C 172.16.0.0/29 is directly connected, Ethernet0/0
L 172.16.0.4/32 is directly connected, Ethernet0/0
D 172.16.0.8/30 [90/2681856] via 172.16.0.13, 00:21:49, Serial1/2
[90/2195456] via 172.16.0.3, 00:21:49, Ethernet0/0
[90/2195456] via 172.16.0.2, 00:21:49, Ethernet0/0
C 172.16.0.12/30 is directly connected, Serial1/2
L 172.16.0.14/32 is directly connected, Serial1/2
D 172.16.2.0/24 [90/409600] via 172.16.0.2, 00:21:49, Ethernet0/0
D 172.16.3.0/24 [90/409600] via 172.16.0.3, 00:21:49, Ethernet0/0
D 172.16.4.0/24 is a summary, 00:21:49, Null0
C 172.16.4.0/25 is directly connected, Loopback0
L 172.16.4.1/32 is directly connected, Loopback0
C 172.16.4.128/25 is directly connected, Loopback1
L 172.16.4.129/32 is directly connected, Loopback1
实验总结:
这个实验产生缺省路由的方法为在路由器的出接口进入内网区域进行汇总产生缺省;减少路由条目数量的方法为合理规划IP地址以及进行路由汇总;负载均衡需要进行度量的计算以及对比,给出合理的负载均衡比值.metric的计算公式为:
计算度量时,存在权重值:( K1 = 1,K2 = 0,K3 = 1,K4 = 0,K5 = 0):
当K5为0:
公制= [K1 * BW +((K2 * BW)/( 256 - 负载))+ K3 *延迟]
当K5大于0:
公制= [K1 * BW +((K2 * BW)/(256 - 负载))+ K3 *延迟] * [K5 /(可靠性+ K4)]
修改variance后的参数即可,通过查看EIGRP的拓扑可以查看主备份metric的值,通过计算向上取整得到这参数即可。
认证为本地生成一个秘钥库,在链路接口上调用这个秘钥库来保证链路安全,其中秘钥库名可以不一样,但秘钥库中的秘钥要保持一致,否则无法认证成功。