除标准EIGRP配置外,要启用MD5认证,需要以下几步:
1、创建key chain 和 key-string
R1#configure terminal
R1(config)#key chain MYCHAIN
R1(config-keychain)#key 1
R1(config-keychain-key)#key-string cisco
R1(config-keychain-key)#end
2、在EIGRP接口启用认证:
R1#configure terminal
R1(config)#interface serial 0/0.1
R1(config-subif)#ip authentication mode eigrp 12 md5
R1(config-subif)#ip authentication key-chain eigrp 12 MYCHAIN
R1(config-subif)#end
R1#
这里引用刚才创建的key chain
3、验证,使用Debug命令观察eigrp包:
R1#debug eigrp packets
EIGRP Packets debugging is on
(UPDATE, REQUEST, QUERY, REPLY, HELLO, IPXSAP, PROBE, ACK, STUB, SIAQUERY, SIAREPLY)
R1#
*Mar 1 00:18:51.895: EIGRP: Sending HELLO on FastEthernet0/0
*Mar 1 00:18:51.895: AS 12, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0
*Mar 1 00:18:56.607: EIGRP: Sending HELLO on FastEthernet0/0
*Mar 1 00:18:56.607: AS 12, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0
R1#no debug all
All possible debugging has been turned off
R1#
网友评论