Config Register is 0x4a6f6469

Lab EIGRP - 04 akan mengkonfigurasi autentikasi pada routing EIGRP. Topologi EIGRP - 04 lihat gambar dibawah,

Langkah pertama adalah men-set semua router mempunyai waktu yang sama. Gunakan tips dan tricks NTP :

R2#
R2#clock set 23:58:00 march 13 2008
R2#
*Mar 13 23:58:00.000: %SYS-6-CLOCKUPDATE: System clock has been updated from 00:
21:04 UTC Fri Mar 1 2002 to 23:58:00 UTC Thu Mar 13 2008, configured from console by console.
R2#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R2(config)#ntp master
R2(config)#

R1#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R1(config)#ntp server 172.1.1.2
R1(config)#

R3#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R3(config)#ntp server 172.2.2.2
R3(config)#

Setelah semua router dipastikan mempunyai waktu yang synchronize satu dengan yang lainnya, selanjutnya konfigur CLI autentikasi pada routing EIGRP:

R2(config)#key chain auth
R2(config-keychain)#key 1

R2(config-keychain-key)#key-string ccna
R2(config-keychain-key)#accept-lifetime 23:58:00 march 13 2008 01:00:00 march 14 2008
R2(config-keychain-key)#send-lifetime 23:58:00 march 13 2008 01:00:00 march 14 2008
R2(config-keychain-key)#int s1/0
R2(config-if)#ip authentication key-chain eigrp 10 auth
R2(config-if)#
Mar 14 00:05:35.759: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.1 (Seri
al1/0) is down: keychain changed
Mar 14 00:05:37.551: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.1 (Seri
al1/0) is up: new adjacency
Mar 14 00:06:47.735: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.1 (Seri
al1/0) is down: Interface Goodbye received
Mar 14 00:06:52.255: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.1 (Seri
al1/0) is up: new adjacency
R2(config-if)#int s1/1
R2(config-if)#ip authentication key-chain eigrp 10 auth
R2(config-if)#
Mar 14 00:07:20.487: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.3 (Seri
al1/1) is down: keychain changed
Mar 14 00:07:23.807: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.3 (Seri
al1/1) is up: new adjacency
Mar 14 00:07:53.015: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.3 (Seri
al1/1) is down: Interface Goodbye received
Mar 14 00:07:57.871: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.3 (Seri
al1/1) is up: new adjacency
R2(config-if)#ip authentication mode eigrp 10 md5
R2(config-if)#
Mar 14 00:08:13.447: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.3 (Seri
al1/1) is down: authentication mode changed
Mar 14 00:08:30.755: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.3 (Seri
al1/1) is down: Interface Goodbye received
Mar 14 00:08:35.619: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.3 (Seri
al1/1) is up: new adjacency
R2(config-if)#int s1/0
R2(config-if)#ip authentication mode eigrp 10 md5
R2(config-if)#
Mar 14 00:08:53.835: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.1 (Seri
al1/0) is down: authentication mode changed
Mar 14 00:09:25.787: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.1 (Seri
al1/0) is down: Interface Goodbye received
Mar 14 00:09:30.543: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.1 (Seri
al1/0) is up: new adjacency

R1(config)#key chain auth
R1(config-keychain)#key 1
R1(config-keychain-key)#key-string ccna
R1(config-keychain-key)#accept-lifetime 23:58:00 march 13 2008 01:00:00 march 14 2008
R1(config-keychain-key)#send-lifetime 23:58:00 march 13 2008 01:00:00 march 14 2008
R1(config-keychain-key)#
Mar 14 00:05:35.832: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.2 (Seri
al1/0) is down: Interface Goodbye received
Mar 14 00:05:40.152: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.2 (Seri
al1/0) is up: new adjacency
R1(config-keychain-key)#int s1/0
R1(config-if)#ip authentication key-chain eigrp 10 auth
R1(config-if)#
Mar 14 00:06:47.680: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.2 (Seri
al1/0) is down: keychain changed
Mar 14 00:06:49.524: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.2 (Seri
al1/0) is up: new adjacency
Mar 14 00:08:53.901: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.2 (Seri
al1/0) is down: Auth failure
R1(config-if)#int s1/0
R1(config-if)#ip authentication mode eigrp 10 md5
R1(config-if)#
Mar 14 00:09:27.333: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.2 (Seri
al1/0) is up: new adjacency

R3(config)#key chain auth
R3(config-keychain)#key 1
R3(config-keychain-key)#key-string ccna
R3(config-keychain-key)#$accept-lifetime 23:58:00 march 13 2008 01:00:00 march 14 2008
R3(config-keychain-key)#send-lifetime 23:58:00 march 13 2008 01:00:00 march 14 2008
R3(config-keychain-key)#int s1/1
R3(config-if)#
Mar 14 00:07:20.495: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.2 (Seri
al1/1) is down: Interface Goodbye received
Mar 14 00:07:24.979: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.2 (Seri
al1/1) is up: new adjacency
R3(config-if)#int s1/1
R3(config-if)#ip authentication key-chain eigrp 10 auth
R3(config-if)#
Mar 14 00:07:52.851: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.2 (Seri
al1/1) is down: keychain changed
Mar 14 00:07:52.863: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.2 (Seri
al1/1) is up: new adjacency
Mar 14 00:08:13.419: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.2 (Seri
al1/1) is down: Auth failure
R3(config-if)#ip authentication mode eigrp 10 md5
R3(config-if)#
Mar 14 00:08:31.779: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.2 (Serial1/1) is up: new adjacency

Topologi EIGRP - 03 akan membahas tehnik konfigurasi ‘un-equal cost path load balance’. Konfigurasi CLI routing EIGRP bisa dilihat ke EIGRP - 02. Topologi EIGRP -03 pada gambar dibawah,

Setelah selesai dikonfigurasi, pada perintah ’sh ip route’ di R2 terlihat bahwa routing menuju subnet 100.1.1.0/24 hanya melalui R3 atau serial1/1:

Padahal sebenarnya ada dua jalur untuk routing menuju subnet 100.1.1.0/24 selain R3 yang dipilih diatas, masih ada link melewati R1. Namun link melalui R1 memiliki cost yang lebih besar sehingga tidak menjadi best routes. Hal ini dapat dilihat pada perintah ’sh ip eigrp topology’, bisa dilihat pada capture dibawah,

Berikut konfigurasi load balance untuk dua link di atas yang ‘un-equal cost path’:

R2#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R2(config)#router eigrp 10
R2(config-router)#variance 2
R2(config-router)#^Z
R2#
*Mar  1 00:16:32.471: %SYS-5-CONFIG_I: Configured from console by console
R2#clear ip eigrp neighbors
R2#
*Mar  1 00:16:45.975: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.1 (Ser
ial1/0) is down: manually cleared
*Mar  1 00:16:45.983: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.3 (Ser
ial1/1) is down: manually cleared
*Mar  1 00:16:47.531: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.3 (Ser
ial1/1) is up: new adjacency
*Mar  1 00:16:48.707: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.1 (Ser
ial1/0) is up: new adjacency

Dengan konfigurasi diatas maka R2 sekarang sudah mempunyai dua link yang aktif untuk routing menuju subnet 100.1.1.0/24 yaitu melalui R3 dan R1. Berikut capture console R2:

Konfigurasi kali ini akan melakukan tehnik men-summarized routing pada routing EIGRP. Summarized routing penting dilakukan, dengan summarized routing maka routing table tetap terjaga ukurannya tidak terlalu besar. Dan berbanding lurus dengan kerja processor yang tidak semakin berat. Pada topologi EIGRP - 02 ini R2 menggunakan 8 loopback interface dengan maksud agar terlihat perbandingan sebelum summarized routing dilakukan dan sesudahnya. Gambar topologi dapat dilihat dibawah,

R2#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R2(config)#router eigrp 10
R2(config-router)#no auto-summary
R2(config-router)#network 172.1.1.0 0.0.0.255
R2(config-router)#network 172.2.2.0 0.0.0.255
R2(config-router)#network 10.0.0.0 0.0.0.255
R2(config-router)#network 10.0.1.0 0.0.0.255
R2(config-router)#network 10.0.2.0 0.0.0.255
R2(config-router)#network 10.0.3.0 0.0.0.255
R2(config-router)#network 10.0.4.0 0.0.0.255
R2(config-router)#network 10.0.5.0 0.0.0.255
R2(config-router)#network 10.0.6.0 0.0.0.255
R2(config-router)#network 10.0.7.0 0.0.0.255
R2(config-router)#
*Mar  1 00:48:39.723: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.3 (Ser
ial1/1) is up: new adjacency
*Mar  1 00:49:26.371: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.1 (Ser
ial1/0) is up: new adjacency

R3#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R3(config)#router eigrp 10
R3(config-router)#no auto-summary
R3(config-router)#network 172.2.2.0 0.0.0.255
*Mar  1 00:52:20.563: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.2 (Ser
ial1/1) is up: new adjacency
R3(config-router)#network 100.1.1.0 0.0.0.255
R3(config-router)#
*Mar  1 00:53:15.043: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 100.1.1.1 (Fas
tEthernet0/0) is up: new adjacency

R1#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R1(config)#router eigrp 10
R1(config-router)#no auto-summary
R1(config-router)#network 172.1.1.0 0.0.0.255
*Mar  1 00:55:53.183: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.2 (Ser
ial1/0) is up: new adjacency
R1(config-router)#network 100.1.1.0 0.0.0.255
R1(config-router)#
*Mar  1 00:56:05.831: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 100.1.1.3 (FastEthernet0/0) is up: new adjacency

Setelah konfigurasi awal ini dapat dilihat routing table pada R1 dan R3 yang belum melakukan summarisasi:

Berikut konfigurasi summarized routing di R2 pada kedua interface yang tersambung ke R1 dan R3,

R2(config-router)#exit
R2(config)#int s1/0
R2(config-if)#ip summary-address eigrp 10 10.0.0.0 255.255.248.0
R2(config-if)#
*Mar  1 00:59:01.003: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.1 (Serial1/0) is down: summary configured
*Mar  1 00:59:03.203: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.1 (Ser
ial1/0) is up: new adjacency
R2(config-if)#int s1/1
R2(config-if)#ip summary-address eigrp 10 10.0.0.0 255.255.248.0
R2(config-if)#
*Mar  1 01:00:09.471: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.3 (Ser
ial1/1) is down: summary configured
*Mar  1 01:00:10.139: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.3 (Serial1/1) is up: new adjacency

Summarized routing telah berhasil dilakukan. Berikut routing table pada R1 dan R3, dan bandingkan dengan routing table sebelum melakukan summarized routing diatas.