ccnp瀛︿範璧勬枡 (ccnp璇曢獙)

关注WOLFLAB网络实验室,了解更多CCNP相关技术!

ccnp瀛︿範瑙嗛,ccnp瀹為獙鏁欑▼

一、 地址描述

1. R1-R5都有一个loopback0 IP ADD = 10.10.X.X/24,X=ROUTER NUMBER,比如R1 的LO0 =10.10.1.1/24。

2. R1-R3以太口地址为:1.1.123.X/27,X=ROUTER NUMBER。

3. R3-R4接口地址为:1.1.34.X/29,X=ROUTER NUMBER。

4. R2-R4接口地址为:1.1.24.X/29,X=ROUTER NUMBER。

5. R4-R5接口地址为:1.1.45.X/24,X=ROUTER NUMBER。

二、 BRIDGE

1. 如图所示, 配置R1-R3的以太口地址。

2. 如图所示, 配置R2-R4之间物理接口的IP ADDRESS,R3-R4之间物理接口的IP ADDRESS。

3. 如果所示,配置R4-R5之间的链路为PPP的封装,并配置相应的接口地址。

4. 配置R1-R5的loopback0。

5. 配置完成后,测试各直连链路应能正常通讯。

R1(config)#int loo

R1(config)#int loopback 0

R1(config-if)#ip add

R1(config-if)#ip address 10.10.1.1 255.255.255.0

R1(config-if)#exit

R1(config-if)#exit

R1(config)#int f0/0

R1(config-if)#no shutdown

R1(config-if)#ip address 1.1.123.1 255.255.255.224

R1(config-if)#end

R1#en

R1#

R1#show ip r

R1#show ip rpu

R1#show ip ro

R1#show ip route

Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2

i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

ia - IS-IS inter area, * - candidate default, U - per-user static route

o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

1.0.0.0/27 is subnetted, 1 subnets

C 1.1.123.0 is directly connected, FastEthernet0/0

10.0.0.0/24 is subnetted, 1 subnets

C 10.10.1.0 is directly connected, Loopback0

R1#show ip rou

R1#show ip route

Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2

i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

ia - IS-IS inter area, * - candidate default, U - per-user static route

o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

1.0.0.0/27 is subnetted, 1 subnets

C 1.1.123.0 is directly connected, FastEthernet0/0

10.0.0.0/24 is subnetted, 1 subnets

C 10.10.1.0 is directly connected, Loopback0

R1#show ip int

R1#show ip interface bri

R1#show ip interface brief

Interface IP-Address OK? Method Status Protocol

FastEthernet0/0 1.1.123.1 YES manual up up

FastEthernet0/1 unassigned YES unset administratively down down

Serial1/0 unassigned YES unset administratively down down

Serial1/1 unassigned YES unset administratively down down

Serial1/2 unassigned YES unset administratively down down

Serial1/3 unassigned YES unset administratively down down

Loopback0 10.10.1.1 YES manual up

ccnp瀛︿範瑙嗛,ccnp瀹為獙鏁欑▼

R2(config)#int loopback 0

R2(config-if)#ip addd

R2(config-if)#ip add

R2(config-if)#ip address 10.10.2.2 255.255.255.0

R2(config-if)#exit

R2(config)#int f0/0

R2(config-if)#no shu

R2(config-if)#no shutdown

R2(config-if)#ip add

R2(config-if)#ip address

R2(config-if)#ip address 1.1.123.2 255.255.255.224

R2(config-if)#exit

R2(config)#

R2(config)#int s1/0

R2(config-if)#no shut

R2(config-if)#no shutdown

R2(config-if)#ip add

R2(config-if)#ip address

R2(config-if)#ip address 1.1.24.2 255.255.255.248

R2(config-if)#

*Nov 3 19:31:24.299: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial1/0, changed state to up

R2(config-if)#exit

R2(config)#end

R2#show ip int bri

Interface IP-Address OK? Method Status Protocol

FastEthernet0/0 1.1.123.2 YES manual up up

FastEthernet0/1 unassigned YES unset administratively down down

Serial1/0 1.1.24.2 YES manual up up

Serial1/1 unassigned YES unset administratively down down

Serial1/2 unassigned YES unset administratively down down

Serial1/3 unassigned YES unset administratively down down

Loopback0 10.10.2.2 YES manual up up

ccnp瀛︿範瑙嗛,ccnp瀹為獙鏁欑▼

R3(config)#int loopback 0

R3(config-if)#ip add

R3(config-if)#ip address 10.10.3.3 255.255.255.0

R3(config-if)#exit

R3(config)#int f0/0

R3(config-if)#no shuty

R3(config-if)#no shut

R3(config-if)#no shutdown

R3(config-if)#ip add

R3(config-if)#ip add

*Nov 3 19:22:10.175: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed state to up

*Nov 3 19:22:11.175: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up

R3(config-if)#ip add

R3(config-if)#ip address 1.1.123.3 255.255.255.224

R3(config-if)#exit

R3(config)#int s1/0

R3(config-if)#no shut

R3(config-if)#no shutdown

R3(config-if)#

R3(config-if)#ip address 1.1.24.2 255.255.255.

R3(config-if)#ip add

R3(config-if)#ip address 1.1.34.3 255.255.255.248

R3(config-if)#

R3(config-if)#end

R3#show

R3#show ip int bri

Interface IP-Address OK? Method Status Protocol

FastEthernet0/0 1.1.123.3 YES manual up up

FastEthernet0/1 unassigned YES unset administratively down down

Serial1/0 1.1.34.3 YES manual up up

Serial1/1 unassigned YES unset administratively down down

Serial1/2 unassigned YES unset administratively down down

Serial1/3 unassigned YES unset administratively down down

Loopback0 10.10.3.3 YES manual up up

ccnp瀛︿範瑙嗛,ccnp瀹為獙鏁欑▼

R4(config)#int loopback 0

R4(config-if)#ip add

R4(config-if)#ip address 10.10.4.4 255.255.255.0

R4(config-if)#exit

R4(config)#int s1/2

R4(config-if)#exit

R4(config)#int s1/0

R4(config-if)#ip add

R4(config-if)#ip address 1.1.34.4 255.255.255.248

R4(config-if)#no ip address 1.1.34.4 255.255.255.248

R4(config-if)#ip add

R4(config-if)#ip address 1.1.24.4 255.255.255.248

R4(config-if)#exit

R4(config)#int s1/2

R4(config-if)#exit

R4(config)#int s1/0

R4(config-if)#no shu

R4(config-if)#no shutdown

R4(config-if)#exit

R4(config)#

*Nov 3 19:30:15.355: %LINK-3-UPDOWN: Interface Serial1/0, changed state to up

*Nov 3 19:30:16.355: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial1/0, changed state to up

R4(config)#int s1/2

R4(config-if)#no shu

R4(config-if)#no shutdown

R4(config-if)#ipadd

R4(config-if)#ip add

R4(config-if)#ip address

*Nov 3 19:30:52.739: %LINK-3-UPDOWN: Interface Serial1/2, changed state to up

*Nov 3 19:30:53.739: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial1/2, changed state to up

R4(config-if)#ip address 1.1.34.4 255.255.255.248

R4(config-if)#exit

R4(config)#int s1/1

R4(config-if)#no shu

R4(config-if)#no shutdown

R4(config-if)#

*Nov 3 19:31:29.739: %LINK-3-UPDOWN: Interface Serial1/1, changed state to up

*Nov 3 19:31:30.739: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial1/1, changed state to up

R4(config-if)#ip addd

R4(config-if)#ip add

R4(config-if)#ip address 1.1.45.4 255.255.255.0

R4(config-if)#

*Nov 3 19:31:55.367: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial1/1, changed state to down

R4(config-if)#end

R4#show uo

*Nov 3 19:36:59.443: %SYS-5-CONFIG_I: Configured from console by console

R4#show ip int bri

Interface IP-Address OK? Method Status Protocol

FastEthernet0/0 unassigned YES unset administratively down down

FastEthernet0/1 unassigned YES unset administratively down down

Serial1/0 1.1.24.4 YES manual up up

Serial1/1 1.1.45.4 YES manual up down

Serial1/2 1.1.34.4 YES manual up up

Serial1/3 unassigned YES unset administratively down down

Loopback0 10.10.4.4 YES manual up up

R4#en

R4#

R4#conf

Configuring from terminal, memory, or network [terminal]?

Enter configuration commands, one per line. End with CNTL/Z.

R4(config)#int s1/1

R4(config-if)#no shut

R4(config-if)#no shutdown

R4(config-if)#end

R4#show

*Nov 3 19:38:08.023: %SYS-5-CONFIG_I: Configured from console by console

R4#show ip int bri

Interface IP-Address OK? Method Status Protocol

FastEthernet0/0 unassigned YES unset administratively down down

FastEthernet0/1 unassigned YES unset administratively down down

Serial1/0 1.1.24.4 YES manual up up

Serial1/1 1.1.45.4 YES manual up down

Serial1/2 1.1.34.4 YES manual up up

Serial1/3 unassigned YES unset administratively down down

Loopback0 10.10.4.4 YES manual up up

R4#show int s1/1

Serial1/1 is up, line protocol is down

Hardware is M4T

Internet address is 1.1.45.4/24

MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec,

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation HDLC, crc 16, loopback not set

Keepalive set (10 sec)

Restart-Delay is 0 secs

Last input never, output 00:00:03, output hang never

Last clearing of "show interface" counters never

Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0

Queueing strategy: weighted fair

Output queue: 0/1000/64/0 (size/max total/threshold/drops)

Conversations 0/1/256 (active/max active/max total)

Reserved Conversations 0/0 (allocated/max allocated)

Available Bandwidth 1158 kilobits/sec

5 minute input rate 0 bits/sec, 0 packets/sec

5 minute output rate 0 bits/sec, 0 packets/sec

0 packets input, 0 bytes, 0 no buffer

Received 0 broadcasts, 0 runts, 0 giants, 0 throttles

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

57 packets output, 2020 bytes, 0 underruns

0 output errors, 0 collisions, 3 interface resets

0 output buffer failures, 0 output buffers swapped out

4 carrier transitions DCD=up DSR=up DTR=up RTS=up CTS=up

R4#en

R4#

R4#conf

Configuring from terminal, memory, or network [terminal]?

Enter configuration commands, one per line. End with CNTL/Z.

R4(config)#int s1/1

R4(config-if)#en

R4(config-if)#encapsulation ppp

R4(config-if)#end

R4#show

*Nov 3 19:40:58.567: %SYS-5-CONFIG_I: Configured from console by console

R4#show int s1/1

Serial1/1 is up, line protocol is down

Hardware is M4T

Internet address is 1.1.45.4/24

MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec,

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation PPP, LCP REQsent, crc 16, loopback not set

Keepalive set (10 sec)

Restart-Delay is 0 secs

Last input never, output 00:00:01, output hang never

Last clearing of "show interface" counters 00:00:09

Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0

Queueing strategy: weighted fair

Output queue: 0/1000/64/0 (size/max total/threshold/drops)

Conversations 0/1/256 (active/max active/max total)

Reserved Conversations 0/0 (allocated/max allocated)

Available Bandwidth 1158 kilobits/sec

5 minute input rate 0 bits/sec, 0 packets/sec

5 minute output rate 0 bits/sec, 0 packets/sec

0 packets input, 0 bytes, 0 no buffer

Received 0 broadcasts, 0 runts, 0 giants, 0 throttles

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

5 packets output, 70 bytes, 0 underruns

0 output errors, 0 collisions, 0 interface resets

ccnp瀛︿範瑙嗛,ccnp瀹為獙鏁欑▼

R5(config)#int loopback 0

R5(config-if)#ip add

R5(config-if)#ip address 10.10.5.5 255.255.255.0

R5(config-if)#exit

R5(config)#int s1/1

R5(config-if)#ip add

R5(config-if)#ip address 1.1.45.5 255.255.255.0

R5(config-if)#exit

R5(config)#int s1/1

R5(config-if)#en

R5(config-if)#encapsulation ppp

R5(config-if)#

ccnp瀛︿範瑙嗛,ccnp瀹為獙鏁欑▼

一、 RIP基本配置

1 .R1 R2 R3运行RIP Version 2,并把loopback0接口和直连以太网段宣告进RIP中。

R1(config)#router rip

R1(config-router)#ver

R1(config-router)#version 2

R1(config-router)#net

R1(config-router)#network 1.0.0.0

R1(config-router)#net

R1(config-router)#network 10.0.0.0

R1(config-router)#exit

R2(config)#router rip

R2(config-router)#ver

R2(config-router)#version 2

R2(config-router)#net

R2(config-router)#network 1.0.0.0

R2(config-router)#net

R2(config-router)#network 10.0.0.0

R2(config-router)#exit

R2(config)#router rip

R2(config-router)#no au

R2(config-router)#no auto-summary

R3(config)#router rip

R3(config-router)#ver

R3(config-router)#version 2

R3(config-router)#net

R3(config-router)#network 1.0.0.0

R3(config-router)#nei

R3(config-router)#net

R3(config-router)#network 10.0.0.0

R3(config-router)#exit

R3(config)#router rip

R3(config-router)#no au

R3(config-router)#no auto-summary

2.在三台路由器的路由表中都可以互相看到对方的loopback0路由。

3.在R1上,用最小的命令行,增加八个interface地址,地址为: 100.1.1.1/24 - 100.1.8.1/24,这八个地址在R1的RIP数据库中是作为外部路由出现。

R1(config)#int loo

R1(config)#int loopback 0

R1(config-if)#ip add

R1(config-if)#ip address 100.1.1.1.1 255.255.255.0 sec

R1(config-if)#ip address 100.1.1.1.1 255.255.255.0 secon

R1(config-if)#ip address 100.1.1.1 255.255.255.0 secon

R1(config-if)#ip address 100.1.1.1 255.255.255.0 secondary

R1(config-if)#ip add

R1(config-if)#ip address 100.1.2.1 255.255.255.0 sec

R1(config-if)#ip address 100.1.2.1 255.255.255.0 secondary

R1(config-if)#ip add

R1(config-if)#ip address 100.1.3.1 255.255.255.0 sec

R1(config-if)#ip address 100.1.3.1 255.255.255.0 secondary

R1(config-if)#

R1(config-if)#ip add

R1(config-if)#ip address 100.1.4.1 255.255.255.0 sec

R1(config-if)#ip address 100.1.4.1 255.255.255.0 secondary

R1(config-if)#ip add

R1(config-if)#ip address 100.1.5.1 255.255.255.0 sec

R1(config-if)#ip address 100.1.5.1 255.255.255.0 secondary

R1(config-if)#ip add

R1(config-if)#ip address 100.1.6.1 255.255.255.0 sec

R1(config-if)#ip address 100.1.6.1 255.255.255.0 secondary

R1(config-if)#ip add

R1(config-if)#ip address 100.1.7.1 255.255.255.0 sec

R1(config-if)#ip address 100.1.7.1 255.255.255.0 secondary

R1(config-if)#ip add

R1(config-if)#ip address 100.1.8.1 255.255.255.0 sec

R1(config-if)#ip address 100.1.8.1 255.255.255.0 secondary

R1(config-if)#

ccnp瀛︿範瑙嗛,ccnp瀹為獙鏁欑▼

4.只在R1做配置,并使用最小的命令行,使R3上可以看到的这八个网段的七个, 看不到100.1.8.0/24这条路由,

且奇数路由的metric为5, 偶数路由的metric为7,不允许用Offset-list。

R1(config)#acc

R1(config)#access-list 1 deny 100.1.8.0

R1(config)#acc

R1(config)#access-list per

R1(config)#access-list 1 per

R1(config)#access-list 1 permit any

R1(config)#router rip

R1(config-router)#dis

R1(config-router)#distri

R1(config-router)#distribute-list 1 out f0/0

ccnp瀛︿範瑙嗛,ccnp瀹為獙鏁欑▼

R1(config)#access-list 2 permit 100.1.0.0 0.0.6.0

R1(config)#acc

R1(config)#access-list 3 per

R1(config)#access-list 3 permit 100.1.1.0 0.0.6.0

R1(config)#route-ma

R1(config)#route-map A permit

R1(config)#route-map A permit 10

R1(config-route-map)#match ip add

R1(config-route-map)#match ip address 2

R1(config-route-map)#set m

R1(config-route-map)#set met

R1(config-route-map)#set metric 7

R1(config-route-map)#exit

R1(config)#route-

R1(config)#route-map A per

R1(config)#route-map A permit 20

R1(config-route-map)#ma

R1(config-route-map)#match ip addre

R1(config-route-map)#match ip address 3

R1(config-route-map)#set me

R1(config-route-map)#set metric 5

R1(config-route-map)#exit

R1(config)#router rip

R1(config-router)#redis

R1(config-router)#redistribute con

R1(config-router)#redistribute connected rou

R1(config-router)#redistribute connected route-map

R1(config-router)#redistribute connected route-map A

R1(config-router)#

ccnp瀛︿範瑙嗛,ccnp瀹為獙鏁欑▼

1. 不可以在R2做任何配置,使R2看不到100网段的7条路由, 但可以看到R1和R3的loopback路由,不能通过Version 1, 2来解决此问题。

R1(config)#

R1(config)#router rip

R1(config-router)#passi

R1(config-router)#route rip

R1(config-router)#pass

R1(config-router)#passive-interface f0/0

R1(config-router)#nei

R1(config-router)#neighbor 1.1.123.3

R1(config-router)#network 10.10.3.3

R1(config-router)#

R1(config-router)#

R1(config-router)#

R1(config-router)#

R1(config-router)#

ccnp瀛︿範瑙嗛,ccnp瀹為獙鏁欑▼

R3(config)#access-list 1 deny 100.1.0.0 0.0.7.0

R3(config)#acc

R3(config)#access-list 1 per

R3(config)#access-list 1 permit any

R3(config)# route rip

% Ambiguous command: " route rip"

R3(config)# router rip

R3(config-router)#dis

R3(config-router)#distri

R3(config-router)#distribute-list 1 out f0/0

一、 EIGRP 100配置

1. 在R2 R3 R4的链路运行EIGRP 100,将R4的loopback0接口宣告到EIGRP 100。在R4上,show ip eigrp neighbors,可以看到两个邻接关系。

R3(config)#router eigrp 100

R3(config-router)#net

R3(config-router)#net

R3(config-router)#network 1.1.34.3 0.0.0.0

R3(config-router)#

R2(config)#router eigrp

R2(config)#router eigrp 100

R2(config-router)#net

R2(config-router)#network 1.1.24.2 0.0.0.0

R4(config)#router eigrp 100

R4(config-router)#network 1.1.24.4 0.0.0.0

ccnp瀛︿範瑙嗛,ccnp瀹為獙鏁欑▼

1. 假设R4的F0/0口的地址为:150.1.1.1/24,使R4与BB2建立EIGRP邻接关系,此时R4会收到很多从BB2传递过来的路由,包括:A、B、C类。用最小的Prefix-list命令,只允许B类路由进入R4。

R4(config)#int f0/0

R4(config-if)#ip add

R4(config-if)#ip address 150.1.1.1 255.255.255.0

R4(config-if)#ip pr

R4(config-if)#ip pre

R4(config-if)#exit

R4(config)#ip pre

R4(config)#ip prefix-list B seq

R4(config)#ip prefix-list B seq 5 pert

R4(config)#ip prefix-list B seq 5 per

R4(config)#ip prefix-list B seq 5 permit 128.0.0.0/2 le 32

R4(config)#router ei

R4(config)#router eigrp 100

R4(config-router)#net

R4(config-router)#network 150.1.1.1 0.0.0.0

R4(config)#router ei

R4(config)#router eigrp 100

R4(config-router)#dis

R4(config-router)#distr

R4(config-router)#distribute-list pre

R4(config-router)#distribute-list prefix

R4(config-router)#distribute-list prefix B in f0/0

R4(config-router)#

2. 在R2和R3上做RIP与EIGRP的双向重分布。使R4上看不到100.0.0.0网段的任何路由。此解决方案不能用Route-map,不能用基于接口的过滤,也不能通过metric的方法。

R2(config)#router ei

R2(config)#router eigrp 100

R2(config-router)#redis

R2(config-router)#redistribute rip me

R2(config-router)#redistribute rip metric 100000 10 255 1 1500

R2(config-router)#exit

R2(config)#router rip

R2(config-router)#red

R2(config-router)#redistribute eig

R2(config-router)#redistribute eigrp 100 me

R2(config-router)#redistribute eigrp 100 metric 1

R2(config-router)#

R3(config)#router ei

R3(config)#router eigrp 100

R3(config-router)#redi

R3(config-router)#redistribute

*Nov 3 22:36:53.251: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.34.4 (Serial1/0) is down: Interface Goodbye received

R3(config-router)#redistribute rip me

R3(config-router)#redistribute rip metric 1

*Nov 3 22:36:58.167: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.34.4 (Serial1/0) is up: new adjacency

R3(config-router)#redistribute rip metric 100000 10 255 1 1500

R3(config-router)#

R3(config-router)#

R3(config-router)#exit

R3(config)#router rip

R3(config-router)#

R3(config-router)#re

R3(config-router)#redistribute ei

R3(config-router)#redistribute eigrp 100 me

R3(config-router)#redistribute eigrp 100 metric

% Incomplete command.

R3(config-router)#redistribute eigrp 100 metric 1

R3(config-router)#

R3(config-router)#acc

R3(config-router)#exit

R3(config)#

R3(config)#acce

R3(config)#access-list 1 deny 100.1.0.0 0.0.7.0

R3(config)#acc

R3(config)#access-list 1 per

*Nov 3 22:38:13.927: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.34.4 (Serial1/0) is down: Interface Goodbye received

R3(config)#access-list 1 per

R3(config)#access-list 1 permit any

R3(config)#

*Nov 3 22:38:18.307: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.34.4 (Serial1/0) is up: new adjacency

R3(config)#router eig

R3(config)#router eigrp 100

R3(config-router)#dis

R3(config-router)#distr

R3(config-router)#distribute-list 1 out rip

R3(config-router)#

3. 使R2 R3 R4之间的EIGRP Hello=2s,HOLD Time=10s。

R2(config)#int s1/0

R2(config-if)#bandw

R2(config-if)#bandwidth 1545

R2(config-if)#exit

4. R2 R3 R4之间的EIGRP请开启认证。

R2(config)#int s1/0

R2(config-if)#bandw

R2(config-if)#bandwidth 1545

R2(config-if)#exit

R2(config)#key ch

R2(config)#key chain

R2(config)#key chain A

R2(config-keychain)#key 1

R2(config-keychain-key)#key

R2(config-keychain-key)#key-string cisco

R2(config-keychain-key)#exit

R2(config-keychain)#

R2#

*Nov 3 22:44:02.543: %SYS-5-CONFIG_I: Configured from console by console

R2#

R2#^V^Z% Unknown command or computer name, or unable to find computer address

R2#conf

R2#configure

R2#configure

Configuring from terminal, memory, or network [terminal]?

Enter configuration commands, one per line. End with CNTL/Z.

R2(config)#int s1/0

R2(config-if)#ip au

R2(config-if)#ip authentication mo

R2(config-if)#ip authentication mode ei

R2(config-if)#ip authentication mode eigrp 100 md5

R2(config-if)#

*Nov 3 22:46:29.123: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.24.4 (Serial1/0) is down: authentication mode changed

R2(config-if)#ip au

R2(config-if)#ip authentication ke

R2(config-if)#ip authentication key-chain ei

R2(config-if)#ip authentication key-chain eigrp 100 A

同r3 r4

5. 在R2上,增加一个loopback1,其IP地址为:161.1.1.1/24,宣告进入EIGRP,这时R4上应只可以看到161网段的三条路由: 161.1.0.0/16,161.1.0.0/18,161.1.0.0/20三条路由。 而在R1上只能看到161.1.1.0/24的路由,不能用Route-map,可以使用基于接口的过滤。

R2(config)#int loo

R2(config)#int loopback 1

R2(config-if)#ip add

R2(config-if)#ip address 161.1.1.1 255.255.255.0

R2(config-if)# exit

R2(config)#router ei

R2(config)#router eigrp 100

R2(config-router)#nety

R2(config-router)#net

R2(config-router)#network 161.1.1.1 0.0.0.0

R2(config-router)#exit

R2(config)#network 161.1.1.1 0.0.0.00

^

% Invalid input detected at '^' marker.

R2(config)#network 161.1.1.1 0.0.0.00^Z ^

% Invalid input detected at '^' marker.

R2#

*Nov 3 22:52:16.235: %SYS-5-CONFIG_I: Configured from console by console

R2#conf

R2#configure

Configuring from terminal, memory, or network [terminal]?

Enter configuration commands, one per line. End with CNTL/Z.

R2(config)#

R2(config)#int s1/0

R2(config-if)#ip su

R2(config-if)#ip summary-address ei

R2(config-if)#ip summary-address eigrp 100 161.1.0.0 255.255.240.0

R2(config-if)#

*Nov 3 22:52:50.503: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.24.4 (Serial1/0) is down: summary configured

R2(config-if)#ip summary-address eigrp 100 161.1.0.0 255.255.24

*Nov 3 22:52:52.123: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.24.4 (Serial1/0) is up: new adjacency

R2(config-if)#ip summary-address eigrp 100 161.1.0.0 255.255.192.0

R2(config-if)#

*Nov 3 22:52:58.011: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.24.4 (Serial1/0) is down: summary configured

R2(config-if)#ip summary-address eigrp 100 161.1.0.0 255.255.1

*Nov 3 22:53:01.619: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.24.4 (Serial1/0) is up: new adjacency

R2(config-if)#ip summary-address eigrp 100 161.1.0.0 255.255.0.0

R2(config-if)#

*Nov 3 22:53:04.871: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.24.4 (Serial1/0) is down: summary configured

R2(config-if)#

R2(config-if)#

R2(config-if)#

*Nov 3 22:53:06.199: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.24.4 (Serial1/0) is up: new adjacency

R2(config-if)#acc

R2(config-if)#exit

R2(config)#acc

R2(config)#access-list deny 161.1.0.0

^

% Invalid input detected at '^' marker.

R2(config)#access-list 1 deny 161.1.0.0

R2(config)#access-list 1 per

R2(config)#access-list 1 permit

R2(config)#access-list 1 permit any

R2(config)#

R2(config)#router rip

R2(config-router)#dis

R2(config-router)#distr

R2(config-router)#distribute-list 1out f0/0

ccnp瀛︿範瑙嗛,ccnp瀹為獙鏁欑▼

ccnp瀛︿範瑙嗛,ccnp瀹為獙鏁欑▼

1. 把R3的loopback0宣告进EIGRP,使R4可以看到两条等价路由。

R3(config)#router ei

R3(config)#router eigrp 100

R3(config-router)#net

R3(config-router)#network 10.10.3.3 0.0.0.0

R3(config-router)#exit

R3(config)#int loo

R3(config)#int loopback 0

R3(config-if)#delq

R3(config-if)#del

R3(config-if)#delay 10

R3(config-if)#

ccnp瀛︿範瑙嗛,ccnp瀹為獙鏁欑▼

1. 在R3上增加一个loopback5,其地址为:5.5.5.5/32,同时宣告到RIP与EIGRP中。在R3上做配置,使R4可以看到此路由,且metric值为: 100000000,下一跳指向R3,当R3-R4的链路断了后,R4可以通过R2到达此路由,且不需要重新收敛。

R3(config)#

R3(config)#router eigrp 100

R3(config-router)#net

R3(config-router)#network 5.5.5.5 0.0.0.0

R3(config-router)#

R3(config-router)#acc

R3(config-router)#exit

R3(config)#acc

R3(config)#access-list 3 per

R3(config)#access-list 3 permit 5.5.5.5

R3(config)#router ei

R3(config)#router eigrp 100

R3(config-router)#off

R3(config-router)#offset-list 2ou

*Nov 4 00:06:57.174: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.34.4 (Serial1/0) is down: retry limit exceeded

*Nov 4 00:06:57.426: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.34.4 (Serial1/0) is up: new adjacency

R3(config-router)#offset-list 2 out 97703168 s1/0

R3(config-router)#

*Nov 4 00:07:26.130: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.34.4 (Serial1/0) is down: route configuration changed

R3(config-router)#

*Nov 4 00:07:30.378: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.34.4 (Serial1/0) is up: new adjacency

R3(config-router)#

R3#

*Nov 4 00:08:32.486: %SYS-5-CONFIG_I: Configured from console by console

R3#

*Nov 4 00:08:49.890: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.34.4 (Serial1/0) is down: retry limit exceeded

R3#

*Nov 4 00:08:54.790: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.34.4 (Serial1/0) is up: new adjacency

R3#chonf

Translating "chonf"

Translating "chonf"

% Unknown command or computer name, or unable to find computer address

R3#

R3#conf

Configuring from terminal, memory, or network [terminal]?

Enter configuration commands, one per line. End with CNTL/Z.

R3(config)#

R3(config)#

R3(config)#router eig

R3(config)#router eigrp

% Incomplete command.

R3(config)#

R3(config)#router eigrp 100

R3(config-router)#odd

R3(config-router)#off

R3(config-router)#offset-list 2 out 92203168 s1/0

ccnp瀛︿範瑙嗛,ccnp瀹為獙鏁欑▼

1. 在R3上增加一个loopback6,其地址为:6.6.6.6/32,同时宣告到RIP及EIGRP。使R4可以看到此路由,下一跳指向R2,当R2-R4的链路断了后,R4可以通过R3到达此路由,且不需要重新收敛。请用Distance xx来完成此任务, 如果修改metric时,不能用Offset-list,不可以影响其他路由。

R4(config)#router eigrp 100

R4(config-router)#dis

R4(config-router)#dista

R4(config-router)#distance 170 1.1.34.3 0.0.0.0 1

R4(config-router)#exit

R4(config)#

R4(config)#ac

R4(config)#access-list 1 per

R4(config)#access-list 1 permit 10.10.3.0

R4(config)#access-list 1 permit 6.6.6.6

R4(config)#

R3#conf

R3#configure

Configuring from terminal, memory, or network [terminal]?

Enter configuration commands, one per line. End with CNTL/Z.

R3(config)#

R3(config)#int lo6

R3(config-if)#

R3(config-if)#ip add

R3(config-if)#ip address 6.6.6.6 255.255.255.255

R3(config-if)#

R3(config-if)#exit

R3(config)#

*Nov 4 00:11:14.406: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.34.4 (Serial1/0) is down: retry limit exceeded

R3(config)#router

*Nov 4 00:11:18.286: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.34.4 (Serial1/0) is up: new adjacency

R3(config)#router rip

R3(config-router)#net

R3(config-router)#network 6.0.0.0

R3(config-router)#router ei

R3(config-router)#exit

R3(config)#router ei

R3(config)#router eigrp 100

R3(config-router)#6.6.6.6 0.0.0.0

^

% Invalid input detected at '^' marker.

R3(config-router)#net

R3(config-router)#network

R3(config-router)#network 6.6.6.6 0.0.0.0

ccnp瀛︿範瑙嗛,ccnp瀹為獙鏁欑▼

1. 针对上题,如果需要安装两条非等价路由该如何做,如果要求数据包只使用metric小的那条路由,该如何做?不需要考虑ROUTE-CACHE,CEF等。

R4(config)#router eigrp 100

R4(config-router)#var

R4(config-router)#variance 2

R4(config-router)#tr

R4(config-router)#traffic-share min

R4(config-router)#traffic-share min ac

R4(config-router)#traffic-share min across-interfaces

2. R4向BB2只注入一条Default Route,不可以向其他路由器注入默认路由,不要使用任何形式的过滤。

R4(config)#

R4(config)#int f0/0

R4(config-if)#ip su

R4(config-if)#ip summary-address ei

R4(config-if)#ip summary-address eigrp 100

*Nov 4 00:16:14.490: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.34.3 (Serial1/2) is down: Interface Goodbye received

R4(config-if)#ip summary-address eigrp 100 0.0.0.0 0.0.0.0

一、 EIGRP 99配置

1. R4-R5之间的PPP链路运行EIGRP 99,请使用单播建立EIGRP邻居关系,并把R5的loopback0宣告进EIGRP进程。

R4(config)#router ei

R4(config)#router eigrp 99

R4(config-router)#net

R4(config-router)#network

*Nov 4 00:17:36.906: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.34.3 (Serial1/2) is down: Interface Goodbye received

R4(config-router)#network 1.1.45.4

*Nov 4 00:17:41.570: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.34.3 (Serial1/2) is up: new adjacency

R4(config-router)#network 1.1.45.4 0.0.0.0

R4(config-router)#nei

R4(config-router)#neighbor 1.1.45.5 s1/1

R4(config-router)#no au

R4(config-router)#no auto-summary

R4(config-router)#

R5(config)#router ei

R5(config)#router eigrp 99

R5(config-router)#net

R5(config-router)#network 1.1.45.5 0.0.0.0

R5(config-router)#net

R5(config-router)#network 10.10.5.5 0.0.0.0

R5(config-router)#neiu

R5(config-router)#nei

R5(config-router)#neighbor 1.1.45.4 s1/1

R5(config-router)#no au

R5(config-router)#no auto-summary

R5(config-router)#

2. 在R5上增加一个loopback1,其地址为:7.7.7.7/32,使其在R4看到是一条外部路由: 7.7.7.7/32 ( 90/xxxxx )。 R4要向R5只注入一条默认路由,不能用接口下汇总,也不能用distribute-list,不能用route-map。

R5(config)#

R5(config)#

R5(config)#in lo1

R5(config-if)#ip add

R5(config-if)#ip address 7.7.7.7 255.255.255.0

R5(config-if)#route

R5(config-if)#exit

R5(config)#route-

R5(config)#route-map Aper

R5(config)#route-map per

R5(config)#route-map A per

R5(config)#route-map A permit 10

R5(config-route-map)#match in

R5(config-route-map)#match interface lo

R5(config-route-map)#match interface loopback 1

R5(config-route-map)#

R5(config-route-map)#

R5(config-route-map)#exit

R5(config)#router ei

R5(config)#router eigrp 99

R5(config-router)#red

R5(config-router)#redistribute co

R5(config-router)#redistribute connected ro

R5(config-router)#redistribute connected route-map A

R4(config)#router eigrp 99

R4(config-router)#dis

R4(config-router)#dista

R4(config-router)#distance ei

R4(config-router)#distance eigrp 90 90

R4(config-router)#eig

R4(config-router)#eigrp s

R4(config-router)#eigrp stub st

R4(config-router)#eigrp stub static

*Nov 4 00:22:54.454: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 99: Neighbor 1.1.45.5 (Serial1/1) is down: route configuration changed

R4(config-router)#eigrp stub static

R4(config-router)#re

R4(config-router)#redistribute

*Nov 4 00:22:57.574: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 99: Neighbor 1.1.45.5 (Serial1/1) is up: new adjacency

R4(config-router)#redistribute st

R4(config-router)#redistribute static

R4(config-router)#

R4(config-router)#ip r

R4(config-router)#ip rou

R4(config-router)#ip rou

*Nov 4 00:23:07.630: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.34.3 (Serial1/2) is down: retry limit exceeded

R4(config-router)#ip rout

R4(config-router)#iexit

^

% Invalid input detected at '^' marker.

R4(config-router)#

*Nov 4 00:23:11.610: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.34.3 (Serial1/2) is up: new adjacency

R4(config-router)#exit

R4(config)#ip route

R4(config)#ip route 0.0.0.0 0.0.0.0 null 0

ccnp瀛︿範瑙嗛,ccnp瀹為獙鏁欑▼

1. 在R4上,把EIGRP 100与EIGRP 99做双向重分布。在R1上看到7.7.7.7/32这条路由下一跳指向R2,如果R2不可达,则R1可以通过R3到达到达此路由。R2与R3是可以相互传递路由,此方案还需要考虑双点双向重分布可能会出现的路由环路或次优路径的问题。

R4#conf

R4#configure

Configuring from terminal, memory, or network [terminal]?

Enter configuration commands, one per line. End with CNTL/Z.

R4(config)#

R4(config)#router ei

R4(config)#router eigrp 99

R4(config-router)#re

R4(config-router)#redistribute ei

R4(config-router)#redistribute eigrp 100

R4(config-router)#exit

R4(config)#router ei

R4(config)#router eigrp 100

R4(config-router)#re

R4(config-router)#redistribute ri

R4(config-router)#redistribute e

R4(config-router)#redistribute eigrp 99

R2(config)#

R2(config)#

R2(config)#acc

R2(config)#access-list 10 per

R2(config)#access-list 10 permit 7.7.7.7

R2(config)#acc

R2(config)#access-list 10 per

R2(config)#access-list 10 permit 10.10.5.0

R2(config)#access-list 10 permit 1.1.45.0

R2(config)#router rip

R2(config-router)#dis

R2(config-router)#dista

R2(config-router)#distance 171 1.1.123.3 0.0.0.0 10

R2(config-router)#

R3#acc

R3#access-l

R3#conf

R3#configure

R3#configure

Configuring from terminal, memory, or network [terminal]?

Enter configuration commands, one per line. End with CNTL/Z.

R3(config)#

R3(config)#

R3(config)#acc

R3(config)#access-list 10 per

R3(config)#access-list 10 permit 7.7.7.7

R3(config)#access-list 10 permit 10.10.5.0

R3(config)#access-list 10 permit 1.1.45.0

R3(config)#router rip

R3(config-router)#fis

R3(config-router)#dis

R3(config-router)#dista

R3(config-router)#distance 171

*Nov 4 00:30:28.214: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.34.4 (Serial1/0) is down: Interface Goodbye received

R3(config-router)#distance 171 1.1.123.3 0.

*Nov 4 00:30:32.646: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.34.4 (Serial1/0) is up: new adjacency

R3(config-router)#distance 171 1.1.123.3 0.0.0.0 10

R2(config)#route

R2(config)#route-

R2(config)#route-m

R2(config)#route-map R-E deny 10

R2(config-route-map)#match ta

R2(config-route-map)#match tag 180

R2(config-route-map)#exit

R2(config)#route-map

R2(config)#route-map R-E per

R2(config)#route-map R-E permit 20

R2(config-route-map)#set t

R2(config-route-map)#set ta

R2(config-route-map)#set tag 120

R2(config-route-map)#exit

R2(config)#rou

R2(config)#route-m

R2(config)#route-map E-R de

R2(config)#route-map E-R deny 10

R2(config-route-map)#mat

R2(config-route-map)#match tag 130

R2(config-route-map)#

R2(config-route-map)#exit

R2(config)#route-map E-R per

R2(config)#route-map E-R permit 20

R2(config-route-map)#set tag 170

R2(config-route-map)#

R2(config-route-map)#

R2(config-route-map)#exit

R2(config)#router ei

R2(config)#router eigrp 100

R2(config-router)#redi

R2(config-router)#redistribute r

R2(config-router)#redistribute ri

R2(config-router)#redistribute rip me

R2(config-router)#redistribute rip metric 100000 10 255 1 1500 rout

R2(config-router)#redistribute rip metric 100000 10 255 1 1500 route-map R-E

R2(config-router)#EAXIT

^

% Invalid input detected at '^' marker.

R2(config-router)#EXIT

R2(config)#router rip

R2(config-router)#redi

R2(config-router)#redistribute ei

R2(config-router)#redistribute eigrp 100 me

R2(config-router)#redistribute eigrp 100 metric 1 roou

R2(config-router)#redistribute eigrp 100 metric 1 rou

R2(config-router)#redistribute eigrp 100 metric 1 route-map E-R

R2(config-router)#

R3(config)#route-ma

R3(config)#route-map E-R de

R3(config)#route-map E-R deny 10

R3(config-route-map)#ma

R3(config-route-map)#match ta

R3(config-route-map)#match tag 120

R3(config-route-map)#

R3(config-route-map)#

R3(config-route-map)#exit

R3(config)#route-ma

R3(config)#route-map

*Nov 4 00:37:20.594: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.34.4 (Serial1/0) is down: Interface Goodbye received

R3(config)#route-map E-

*Nov 4 00:37:24.958: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.34.4 (Serial1/0) is up: new adjacency

R3(config)#route-map E-R per

R3(config)#route-map E-R permit 15

R3(config-route-map)#match ip add

R3(config-route-map)#match ip address 15

R3(config-route-map)#

R3(config-route-map)#match ip address 7

R3(config-route-map)#set me

R3(config-route-map)#set metric 2

R3(config-route-map)#set tag 180

R3(config-route-map)#exit

R3(config)#route-

R3(config)#route-map E-R

*Nov 4 00:38:44.474: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.34.4 (Serial1/0) is down: retry limit exceeded

R3(config)#route-map E-R per

R3(config)#route-map E-R permit

*Nov 4 00:38:47.210: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.34.4 (Serial1/0) is up: new adjacency

R3(config)#route-map E-R permit 20

R3(config-route-map)#set ta

R3(config-route-map)#set tag 180

R3(config-route-map)#

R3(config-route-map)#exit

R3(config)#

R3(config)#route-ma

R3(config)#route-map E-R per

R3(config)#route-map E-R permit 20

R3(config-route-map)#set

R3(config-route-map)#set ta

R3(config-route-map)#set tag 180

R3(config-route-map)#exit

R3(config)#

R3(config)#route

R3(config)#route-m

R3(config)#route-map R-E deny 10

R3(config-route-map)#

R3(config-route-map)#

R3(config-route-map)#ma

R3(config-route-map)#match ta

R3(config-route-map)#match tag 170

R3(config-route-map)#

*Nov 4 00:40:06.722: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.34.4 (Serial1/0) is down: retry limit exceeded

R3(config-route-map)#exi

*Nov 4 00:40:10.358: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.34.4 (Serial1/0) is up: new adjacency

R3(config-route-map)#exit

R3(config)#

R3(config)#route-m

R3(config)#route-map R-E per

R3(config)#route-map R-E permit 20

R3(config-route-map)#set tag 130

R3(config-route-map)#

R3(config-route-map)#

R3(config-route-map)#exit

R3(config)#acc

R3(config)#access-list 7 per

R3(config)#access-list 7 permit 7.7.7.7

R3(config)#router ei

R3(config)#router eigrp 100

R3(config-router)#

R3(config-router)#re

R3(config-router)#redistribute ri

R3(config-router)#redistribute rip me

R3(config-router)#redistribute rip metric 100000 10 255 1 1500 route0m

R3(config-router)#redistribute rip metric 100000 10 255 1 1500 route-m

R3(config-router)#redistribute rip metric 100000 10 255 1 1500 route-map R

*Nov 4 00:41:29.870: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.34.4 (Serial1/0) is down: retry limit exceeded

R3(config-router)#redistribute rip metric 100000 10 255 1 1500 route-map R-E

R3(config-router)#

R3(config-router)#

*Nov 4 00:41:33.962: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor 1.1.34.4 (Serial1/0) is up: new adjacency

R3(config-router)#

R3(config-router)#exit

R3(config)#router rip

R3(config-router)#

R3(config-router)#re

R3(config-router)#redistribute ri

R3(config-router)#redistribute ei

R3(config-router)#redistribute eigrp 100 me

R3(config-router)#redistribute eigrp 100 metric 1 rou

R3(config-router)#redistribute eigrp 100 metric 1 route-map E-r

R3(config-router)#redistribute eigrp 100 metric 1 route-map E-R

ccnp瀛︿範瑙嗛,ccnp瀹為獙鏁欑▼

感谢关注WOLF-LAB网络技术实验室,定期更新,思科CCNP相关技术!