【正文】 14 15:35:: %DUAL5NBRCHANGE: IPEIGRP(0) 50: Neighbor (Serial1/0) is up: new adjacency *Mar 14 15:35:: %DUAL5NBRCHANGE: IPEIGRP(0) 50: Neighbor (Serial1/0) is down: Auth failure 7查看 R2 的路由表，由于認(rèn)證失敗，此時(shí) R1與 R2 的鄰居關(guān)系也無(wú)法維持。 R1show ip route , 2 subs, 2 masks C , Serial1/1 D , 00:00:37, Null0 , 2 subs, 2 masks C , Loopback0 D , 00:00:37, Null0 D [90/2297856] via , 00:00:09, Serial1/1 R1 R2show ip route , 2 subs, 2 masks C , Serial1/0 D , 00:00:53, Null0 D [90/2297856] via , 00:00:51, Serial1/0 C , Loopback0 R2 配置 R1 的 EIGRP 認(rèn)證。 實(shí)驗(yàn)拓?fù)鋱D： 工大瑞普 CCNP 實(shí)驗(yàn)手 冊(cè) 169。 2020 , Inc. All rights reserved. 25 R1(config)exit R1clear ip router * R1show ip route ??? C is directly connected, Serial1/1 D [90/156160] via , 00:00:01, FastEther0/0 [90/2300416] via , 00:00:01, Serial1/1 R1 1實(shí)驗(yàn)完成。 R1show ip eigrp topology alllinks ??? P , 1 successors, FD is 156160, serno 6 via (156160/128256), FastEther0/0 via (2300416/130816), Serial1/1 ??? 1根據(jù)如下公式配置 R1的 EIGRP 的 variance 值。 R1show ip eigrp 50 topology ??? P , 1 successors, FD is 156160 via (156160/128256), FastEther0/0 P , 1 successors, FD is 28160 via Connected, FastEther0/0 ??? 查看完整的拓?fù)浔韮?nèi)容。 觀察 R1 到達(dá) R3 的 。 掌握 EIGRP 的 AD、 FD、 FC、 Successor、 FS 概念。 3實(shí)驗(yàn)完成。 2020 , Inc. All rights reserved. 19 Sending 5, 100byte ICMP Echos to , timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), roundtrip min/avg/max = 16/69/145 ms R2ping Type escape sequence to abort. Sending 5, 100byte ICMP Echos to , timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), roundtrip min/avg/max = 16/44/64 ms R2ping Type escape sequence to abort. Sending 5, 100byte ICMP Echos to , timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), roundtrip min/avg/max = 60/97/140 ms R2ping Type escape sequence to abort. Sending 5, 100byte ICMP Echos to , timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), roundtrip min/avg/max = 48/93/149 ms R2 再次查看 R2的路由表： R2show ip route Gateway of last resort is not set , 3 subs D [90/307200] via , 00:23:45, Ether1/1 C is directly connected, Ether1/1 C is directly connected, Ether1/0 , 2 subs D [90/409600] via , 00:05:49, Ether1/0 D [90/435200] via , 00:03:38, Ether1/1 D [90/409600] via , 00:23:45, Ether1/1 D [90/409600] via , 00:23:45, Ether1/1 D [90/409600] via , 00:23:45, Ether1/1 D [90/409600] via , 00:23:45, Ether1/1 R2 1為了能夠有效的減少路由表的大小，還可以通過(guò) EIGRP 對(duì) 工大瑞普 CCNP 實(shí)驗(yàn)手 冊(cè) 169。其實(shí)真正的原因，并不是路由選擇出錯(cuò)，而是自動(dòng)匯總不能做到精確的控制原因?qū)е碌摹６?R4也屬于主類的界，也會(huì)與 R1 做出相同的動(dòng)作。 配置各臺(tái)路由器的 EIGRP 協(xié)議 ,并且不關(guān)閉自動(dòng)總結(jié)。 2020 , Inc. All rights reserved. 15 CCNP Lab Manual Lab 3. Manually Summarizing EIGRP Routes 實(shí)驗(yàn)?zāi)康模? 理解 EIGRP 的自動(dòng)匯總的缺點(diǎn) 。不過(guò)需要注意的是 ip defaultwork 其指出默認(rèn)網(wǎng)絡(luò)，建議采用主類網(wǎng)絡(luò)。 將 R1 和 R5 的靜態(tài)默認(rèn)路由刪除后，查看 R1 和 R5的路由表。 2020 , Inc. All rights reserved. 11 R1(config)exit R1show ip route Gateway of last resort is to work , 2 subs D [90/284160] via , 00:09:19, FastEther0/1 C is directly connected, FastEther0/1 S* [1/0] via R1 R1ping Type escape sequence to abort. Sending 5, 100byte ICMP Echos to , timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), roundtrip min/avg/max = 48/71/92 ms R1 R5(config)ip route R5(config)exit R5 R5show ip route Gateway of last resort is to work , 2 subs C is directly connected, Ether1/1 D [90/307200] via , 00:13:57, Ether1/1 S* [1/0] via R5 R5ping Type escape sequence to abort. Sending 5, 100byte ICMP Echos to , timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), roundtrip min/avg/max = 32/53/64 ms R5 根據(jù)上面配置，其實(shí)只需要給內(nèi)部路由器配置默認(rèn)路由指向出口路由器 R2 即可解決外部網(wǎng)絡(luò)無(wú)法訪問(wèn)的問(wèn)題。 配置 R3 路由器用于模擬外部網(wǎng)絡(luò)，也可以把其假想為 Inter 網(wǎng)絡(luò)，并且在 R3 上配置一條默認(rèn)用于，以便路由來(lái)自于 EIGRP 內(nèi)部網(wǎng)絡(luò)的數(shù)據(jù)包 。 工大瑞普 Cisco課程開(kāi)發(fā)小組 工大瑞普 CCNP 實(shí)驗(yàn)手 冊(cè) 169。 R3(config)interface serail 1/0 R3(configif)ip summary eigrp 50 R3(configif)exit 工大瑞普 CCNP 實(shí)驗(yàn)手 冊(cè) 169?？梢允褂?no autosummary 命令關(guān)閉。 在三臺(tái)路由配置 EIGRP 自治系統(tǒng)編號(hào)為 50。 掌握 EIGRP 的自動(dòng)匯總特性，以及如何關(guān)閉自動(dòng)匯總。 L3 EtherChannel with LACP ................................ 241 Lab 47. Configuring Layer 3 Redundancy with HSRP .................................. 246 Lab 48. Configuring Layer 3 Redundancy with VRRP .................................. 254 Implementing Secure Converged Wide Area Networks ........ 261 Lab 49. Configuring the CPE as the PPPoE Client ....................................... 262 Lab 50. Configuring GRE Tunnels ................................................................. 274 Lab 51. Configuring IPsec SitetoSite With PreshareKey .......................... 278 Lab 52. Configuring IPsec SitetoSite VPN Using SDM............................... 291 Lab 53. Configuring GRE Tunnels over IPsec With Presharekey ............... 300 Lab 54. Configuring GRE Tunnels over IPsec using SDM............................ 307 Lab 55. Configuring Cisco Easy VPN and Easy VPN Server Using SDM .... 319 Lab 56. Basic MPLS FrameMode Configuration .......................................... 335 Lab 57. Basic MPLS VPN Configuration........................................................ 342 Lab 58. Configuring Reflexive ACL ............................................................... 357 Lab 59. Configuring TwoInterface Firewall with CBAC ............................... 364 Lab 60. Configuring ThreeInterface Firewall with CBAC ............................ 371 Lab 61. Configuring Cisco Router AutoSecure............................................. 378 La