Monday, August 11, 2014

EIGRP NBMA network with Frame-relay : split-horizon, summary route, increasing use rate of bandwidth and authentication




Q1> Configure EIGRP with Hub-&-Spoke network
Q2> Split-horizon in the interface of EIGRP with Frame-relay is working by default.
    Therefore, East and West networks can not share their loopback networks each other.
    Turn off split-horizon in HQ
HQ: conf t
int s0/0.1
no ip split-horizon eigrp 25


Q3> All networks should be reachable including loopback interfaces via EIGRP
Q4> Each loopback addresses should be advertized with summary route to minimize routing table
HQ: conf t
int s0/0.1
ip summary-address eigrp 25 10.1.0.0 255.255.252.0
EAST: conf t
int s0/0.2
ip summary-address eigrp 25 10.2.0.0 255.255.252.0
WEST: conf t
int s0/0.3
ip summary-address eigrp 25 10.3.0.0 255.255.252.0

Q5> By default EIGRP consumes 50% of Bandwidth. Increase 30% more for efficiency.
HQ:
cont t
int s0/0.1
ip bandwidth-percent eigrp 25 80

Q6> Enable authentication between all EIGRP routers.(use 2 authentication keys)

Key 1
Secret key: cisco1
Accepted from: Midnight on August 10 2014 until 12:30 on August 11 2014
Sent from: Midnight on August 10 2014 until 12:30 on August 11 2014
Key 2
Secret key: cisco2
Accepted from: 11:00 on August 11 2014 until eternity
Sent from: 11:00 on August 11 2014 until eternity

HQ, EAST and WEST:
key chain EIGRP_KEYS
key 1
  key-string cisco1
  accept-lifetime 00:00:00 Aug 10 2014 12:30:00 Aug 11 2014
  send-lifetime 00:00:00 Aug 10 2014 12:30:00 Aug 11 2014
key 2
  key-string cisco2
  accept-lifetime 11:00:00 Aug 11 2014 infinite
  send-lifetime 11:00:00 Aug 11 2014 infinite
int s0/0.1
ip authentication mode eigrp 25 md5
ip authentication key-chain eigrp 25 EIGRP_KEYS


--------------------------------------------------------------------------------
Configuration

HQ

!
key chain EIGRP_KEYS
 key 1
   key-string cisco1
   accept-lifetime 00:00:00 Aug 10 2014 12:30:00 Aug 11 2014
   send-lifetime 00:00:00 Aug 10 2014 12:30:00 Aug 11 2014
 key 2
   key-string cisco2
   accept-lifetime 11:00:00 Aug 11 2014 infinite
   send-lifetime 11:00:00 Aug 11 2014 infinite
!
interface Loopback1
 ip address 10.1.1.1 255.255.255.0
!
interface Loopback2
 ip address 10.1.2.1 255.255.255.0
!
interface Loopback3
 ip address 10.1.3.1 255.255.255.0
!
interface FastEthernet0/0
 no ip address
 shutdown
 duplex auto
 speed auto
!
interface Serial0/0
 no ip address
 encapsulation frame-relay
 clock rate 64000
 no frame-relay inverse-arp
!
interface Serial0/0.1 multipoint
 ip address 172.16.124.1 255.255.255.248
 ip bandwidth-percent eigrp 25 80
 ip authentication mode eigrp 25 md5
 ip authentication key-chain eigrp 25 EIGRP_KEYS
 no ip split-horizon eigrp 25
 ip summary-address eigrp 25 10.1.0.0 255.255.252.0 5
 snmp trap link-status
 frame-relay map ip 172.16.124.3 103 broadcast
 frame-relay map ip 172.16.124.2 102 broadcast
!
router eigrp 25
 network 10.1.0.0 0.0.255.255
 network 172.16.124.1 0.0.0.0
 no auto-summary


EAST

!
key chain EIGRP_KEYS
 key 1
   key-string cisco1
   accept-lifetime 00:00:00 Aug 10 2014 12:30:00 Aug 11 2014
   send-lifetime 00:00:00 Aug 10 2014 12:30:00 Aug 11 2014
 key 2
   key-string cisco2
   accept-lifetime 11:00:00 Aug 11 2014 infinite
   send-lifetime 11:00:00 Aug 11 2014 infinite
!
interface Loopback1
 ip address 10.2.1.1 255.255.255.0
!
interface Loopback2
 ip address 10.2.2.1 255.255.255.0
!
interface Loopback3
 ip address 10.2.3.1 255.255.255.0
!
interface Serial0/0.2 multipoint
 ip address 172.16.124.2 255.255.255.248
 ip authentication mode eigrp 25 md5
 ip authentication key-chain eigrp 25 EIGRP_KEYS
 ip summary-address eigrp 25 10.2.0.0 255.255.252.0 5
 snmp trap link-status
 frame-relay map ip 172.16.124.3 201 broadcast
 frame-relay map ip 172.16.124.1 201 broadcast
!
router eigrp 25
 network 10.2.0.0 0.0.255.255
 network 172.16.124.2 0.0.0.0
 no auto-summary

WEST

!
key chain EIGRP_KEYS
 key 1
   key-string cisco1
   accept-lifetime 00:00:00 Aug 10 2014 12:30:00 Aug 11 2014
   send-lifetime 00:00:00 Aug 10 2014 12:30:00 Aug 11 2014
 key 2
   key-string cisco2
   accept-lifetime 11:00:00 Aug 11 2014 infinite
   send-lifetime 11:00:00 Aug 11 2014 infinite
!
interface Loopback1
 ip address 10.3.1.1 255.255.255.0
!
interface Loopback2
 ip address 10.3.2.1 255.255.255.0
!
interface Loopback3
 ip address 10.3.3.1 255.255.255.0
!
interface Serial0/0.3 multipoint
 ip address 172.16.124.3 255.255.255.248
 ip authentication mode eigrp 25 md5
 ip authentication key-chain eigrp 25 EIGRP_KEYS
 ip summary-address eigrp 25 10.3.0.0 255.255.252.0 5
 snmp trap link-status
 frame-relay map ip 172.16.124.2 301 broadcast
 frame-relay map ip 172.16.124.1 301 broadcast
!
router eigrp 25
 network 10.3.0.0 0.0.255.255
 network 172.16.124.3 0.0.0.0
 no auto-summary

Frame-relay

frame-relay switching
!
interface Serial0/0
 no ip address
 encapsulation frame-relay
 clock rate 2000000
 frame-relay intf-type dce
 frame-relay route 102 interface Serial0/1 201
 frame-relay route 103 interface Serial0/2 301
 frame-relay route 104 interface Serial0/3 401
 frame-relay route 105 interface Serial0/4 501
 frame-relay route 106 interface Serial0/5 601
!
interface Serial0/1
 no ip address
 encapsulation frame-relay
 clock rate 2000000
 frame-relay intf-type dce
 frame-relay route 201 interface Serial0/0 102
 frame-relay route 203 interface Serial0/2 302
 frame-relay route 204 interface Serial0/3 402
 frame-relay route 205 interface Serial0/4 502
 frame-relay route 206 interface Serial0/5 602
!
interface Serial0/2
 no ip address
 encapsulation frame-relay
 clock rate 2000000
 frame-relay intf-type dce
 frame-relay route 301 interface Serial0/0 103
 frame-relay route 302 interface Serial0/1 203
 frame-relay route 304 interface Serial0/3 403
 frame-relay route 305 interface Serial0/4 503
 frame-relay route 306 interface Serial0/5 603
!
interface Serial0/3
 no ip address
 encapsulation frame-relay
 clock rate 2000000
 frame-relay intf-type dce
 frame-relay route 401 interface Serial0/0 104
 frame-relay route 402 interface Serial0/1 204
 frame-relay route 403 interface Serial0/2 304
 frame-relay route 405 interface Serial0/4 504
 frame-relay route 406 interface Serial0/5 604
!

No comments:

Post a Comment