EIGRP 认证

1.实验目的

通过本实验可以掌握EIGRP 路由协议认证的配置和调试

2&＃xff1a;实验环境

如下图所示

3.实验步骤

&＃xff08;1&＃xff09;步骤1&＃xff1a;配置路由器R1

R1(config)#key chain ccnp

R1(config-keychain)# key 1

R1(config-keychain-key)#key-string cisco

R1(config)#interface s0/0/0

R1(config-if)#ip authentication mode eigrp 1 md5 //认证模式为MD5

R1(config-if)#ip authentication key-chain eigrp 1 ccnp //在接口上调用钥匙链

&＃xff08;2&＃xff09;步骤2&＃xff1a;配置路由器R2

R2(config)#key chain ccnp

R2(config-keychain)# key 1

R2(config-keychain-key)#key-string cisco

R2(config)#interface s0/0/0

R2(config-if)#ip authentication mode eigrp 1 md5

R2(config-if)#ip authentication key-chain eigrp 1 ccnp

R2(config)#interface s0/0/1

R2(config-if)#ip authentication mode eigrp 1 md5

R2(config-if)#ip authentication key-chain eigrp 1 ccnp

&＃xff08;3&＃xff09;步骤3&＃xff1a;配置路由器R3

R3(config)#key chain ccnp

R3(config-keychain)# key 1

R3(config-keychain-key)#key-string cisco

R3(config)#interface s0/0/0

R3(config-if)#ip authentication mode eigrp 1 md5

R3(config-if)#ip authentication key-chain eigrp 1 ccnp

R3(config)#interface s0/0/1

R3(config-if)#ip authentication mode eigrp 1 md5

R3(config-if)#ip authentication key-chain eigrp 1 ccnp

&＃xff08;4&＃xff09;步骤4&＃xff1a;配置路由器R4

R4(config)#key chain ccnp

R4(config-keychain)# key 1

R4(config-keychain-key)#key-string cisco

R4(config)#interface s0/0/0

R4(config-if)#ip authentication mode eigrp 1 md5

R4(config-if)#ip authentication key-chain eigrp 1 ccnp

4.实验调试

&＃xff08;1&＃xff09;如果链路的一端启用了认证&＃xff0c;另外一端没有起用认证&＃xff0c;则出现下面的提示信息&＃xff1a;

*Feb 10 05:46:11.119: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 1: Neighbor 192.168.12.2

(Serial0/0/0) is down: authentication mode changed

&＃xff08;2&＃xff09;如果钥匙链的密匙不正确&＃xff0c;则出现下面的提示信息&＃xff1a;

*Feb 10 05:47:08.122: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 1: Neighbor 192.168.12.1

(Serial0/0/0) is down: Auth failure