]

Laborator 5 - EIGRP
Motivaie
Avnd norocul de o situaie economic favorabil, compania a reuit s se extind i s mai deschid un sediu, aflat
n cldirea de vis--vis. Aici urmeaz s fie mutai angajaii din departamentele de Marketing i Finane. Acestea fiind
departamente cheie pentru business-ul companiei, conducerea a luat decizia c RIP nu va fi suficient. Este nevoie de
un protocol mai scalabil, ce poate reaciona foarte rapid la modificri n topologie.

Topologie

Cerine
1. [20p] Activai EIGRP AS 10 pe toate ruterele, doar pentru acele reele din spaiul 10.0.0.0/8 pentru care exist
interfee active; pe ruterul SuccessKid, activai EIGRP numai pentru reelele din 10.0.0.0/8 pentru care exist
interfee active folosind o singur comand.
Rezolvare
GoodGuyGreg(config)#router eigrp 10
GoodGuyGreg(config-router)#net 10.10.10.28 0.0.0.3
GoodGuyGreg(config-router)#net 10.10.10.4 0.0.0.3

ScumbagSteve(config)#router eigrp 10
ScumbagSteve(config-router)#net 10.10.10.4 0.0.0.3
*Mar

1 04:20:33.262: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 10.10.10.5 (FastEthernet1/0) is up: new adjacency

ScumbagSteve(config-router)#net 10.10.10.64 0.0.0.3

ScumbagSteve(config-router)#net 10.10.10.192 0.0.0.3

BadLuckBrian(config)#router eigrp 10
BadLuckBrian(config-router)#net 10.10.10.192 0.0.0.3
*Mar

1 04:22:44.666: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 10.10.10.193 (FastEthernet2/0) is up: new adjacency

BadLuckBrian(config-router)#net 10.10.10.0 0.0.0.3

SuccessKid(config)#router eigrp 10
SuccessKid(config-router)#net 10.10.10.0 0.0.0.127
SuccessKid(config-router)#
*Mar

1 04:21:43.242: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 10.10.10.66 (Ethernet3/2) is up: new adjacency

*Mar

1 04:21:43.246: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 10.10.10.30 (Ethernet3/0) is up: new adjacency

*Mar

1 04:21:43.254: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 10.10.10.2 (Ethernet3/1) is up: new adjacency

2. [10p] Activai EIGRP AS 10 pe Loopback0 i Loopback1 de pe ScumbagSteve. Includei rute n EIGRP ctre
loopback-urile de pe ruterele GoodGuyGreg i BadLuckBrian, fr a porni EIGRP explicit pe aceste interfee.
Rezolvare
ScumbagSteve(config)#router eigrp 10
ScumbagSteve(config-router)#net 141.85.157.64 0.0.0.63
ScumbagSteve(config-router)#net 141.85.157.0 0.0.0.63

GoodGuyGreg(config-router)#router eigrp 10
GoodGuyGreg(config-router)#redistribute connected
GoodGuyGreg(config-router)#do sh ip proto
[...]
Redistributing: connected, eigrp 10
[...]

BadLuckBrian(config-router)#router eigrp 10
BadLuckBrian(config-router)#redistribute connected
BadLuckBrian(config-router)#do sh ip proto
[...]
Redistributing: connected, eigrp 10
[...]

3. [20p] Legtura la Internet a cldirii se face prin ruterul SuccessKid, interfaa Ethernet1/0. Realizai
configuraiile necesare astfel nct toat cldirea s fie conectat la Internet.
Rezolvare
SuccessKid(config)#ip route 0.0.0.0 0.0.0.0 eth1/0 192.168.231.1
sau
SuccessKid(config)#ip route 0.0.0.0 0.0.0.0 192.168.231.1
SuccessKid(config)#router eigrp 10
SuccessKid(config-router)#redistribute static
SuccessKid(config-router)#do sh ip proto
[...]
Redistributing: static, eigrp 10
[...]

4. [10p] Protocolul EIGRP sumarizeaz automat cele dou loopback-uri de pe ScumbagSteve, anunnd vecinilor
o rut ctre o reea /16. Dezactivai acest comportament. De ce nu au fost sumarizate i rutele ctre
loopback-urile ruterelor GoodGuyGreg i BadLuckBrian?
Rezolvare
ScumbagSteve(config)#router eigrp 10
ScumbagSteve(config-router)#no auto-summ
ScumbagSteve(config-router)#do sh ip proto
[...]
Automatic network summarization is not in effect
[...]

5. [20p] Ruterul GoodGuyGreg are legate dou reele, L0 i L1. Sumarizai aceste reele pentru a reduce
dimensiunea tabelei de rutare a vecinilor.
Rezolvare
GoodGuyGreg(config)#int e3/0
GoodGuyGreg(config-if)#ip summary-address eigrp 10 199.4.0.128 255.255.255.128
GoodGuyGreg(config-if)#int fa1/0
GoodGuyGreg(config-if)#ip summary-address eigrp 10 199.4.0.128 255.255.255.128
GoodGuyGreg(config-if)#do sh ip proto
[...]
Address Summarization:
199.4.0.128/25 for FastEthernet1/0, Ethernet3/0
[...]

6. [10p] Suntem ngrijorai de problemele de securitate ce ar putea s apar pe legaturile GoodGuyGregScumbagSteve i GoodGuyGreg-SuccessKid. Realizai configuraiile necesare astfel nct comunicaia EIGRP
dintre aceste rutere s nu poat fi interceptat de o staie conectat la acelai domeniu de broadcast.
Rezolvare
GoodGuyGreg(config)#router eigrp 10
GoodGuyGreg(config-router)#neighbor 10.10.10.6 fa1/0
GoodGuyGreg(config-router)#neighbor 10.10.10.29 eth3/0

ScumbagSteve(config)#router eigrp 10
ScumbagSteve(config-router)#neigh 10.10.10.5 fa1/0

SuccessKid(config)#router eigrp 10
SuccessKid(config-router)#neigh 10.10.10.30 eth3/0

GoodGuyGreg#debug ip packet
*Mar

1 00:43:24.987: IP: s=10.10.10.6 (FastEthernet1/0), d=10.10.10.5 (FastEthernet1/0), len 60, rcvd 3

*Mar

1 00:43:25.531: IP: s=10.10.10.5 (local), d=10.10.10.6 (FastEthernet1/0), len 60, sending

[...]
*Mar

1 00:43:26.187: IP: s=10.10.10.29 (Ethernet3/0), d=10.10.10.30 (Ethernet3/0), len 60, rcvd 3

*Mar

1 00:43:26.783: IP: s=10.10.10.30 (local), d=10.10.10.29 (Ethernet3/0), len 60, sending

GoodGuyGreg#undebug all

7. [10p] Activai autentificare pe segmentul dintre SuccessKid i ScumbagSteve, folosind parola cisco.
Rezolvare
SuccessKid(config)#key chain auth
SuccessKid(config-keychain)# key 1
SuccessKid(config-keychain-key)#

key-string cisco

SuccessKid(config-keychain-key)#interface eth3/2
SuccessKid(config-if)#ip authentication ?
key-chain

key-chain

mode

mode

SuccessKid(config-if)#ip authentication mode eigrp 10 md5

SuccessKid(config-if)#ip authentication key-chain eigrp 10 auth

ScumbagSteve(config)#key chain auth

ScumbagSteve(config-keychain)# key 1
ScumbagSteve(config-keychain-key)#

key-string cisco

ScumbagSteve(config-keychain-key)#int eth0/0
ScumbagSteve(config-if)#ip authentication mode eigrp 10 md5
ScumbagSteve(config-if)#ip authentication key-chain eigrp 10 auth

SuccessKid#debug eigrp packet

[...]
*Mar

1 00:52:43.255: EIGRP: received packet with MD5 authentication, key id = 1

*Mar

1 00:52:43.259: EIGRP: Received HELLO on Ethernet3/2 nbr 10.10.10.66

[...]
SuccessKid#undebug all
SuccessKid#sh key chain
Key-chain auth:
key 1 -- text "cisco"
[...]

8. [10p] Att GoodGuyGreg ct i BadLuckBrian au dou ci de ieire spre SuccessKid (fie direct, fie prin
ScumbagSteve). Configurai echipamentele astfel nct traficul s fie balansat ntre cele dou ci, ctre
Internet.
Rezolvare
O posibil soluie, nu neaprat unica:

# valorile default de bandwidth i delay pentru Ethernet

ScumbagSteve# sh int e0/0 | include BW
MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec,
# valorile default de bandwidth i delay pentru FastEthernet
ScumbagSteve# sh int fa1/0 | include BW
MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
ScumbagSteve(config)#interface e0/0
ScumbagSteve(config-if)#delay 90 #n zecimi de microsecund
ScumbagSteve(config-if)#do sh int e0/0 | include BW
MTU 1500 bytes, BW 10000 Kbit, DLY 900 usec,
Ctrl^Z
BadLuckBrian#sh ip route
[...]
D*EX 0.0.0.0/0 [170/307200] via 10.10.10.29, 00:04:35, Ethernet3/0
[170/307200] via 10.10.10.6, 00:04:35, FastEthernet1/0