Cisco Systems 3560 Manual De Usuario

Descargar
Página de 1288
 
36-38
Catalyst 3560 Switch Software Configuration Guide
OL-8553-06
Chapter 36      Configuring IP Unicast Routing
Configuring EIGRP
Use the no forms of these commands to disable the feature or return the setting to the default value.
Configuring EIGRP Route Authentication
EIGRP route authentication provides MD5 authentication of routing updates from the EIGRP routing 
protocol to prevent the introduction of unauthorized or false routing messages from unapproved sources.
Beginning in privileged EXEC mode, follow these steps to enable authentication:
Step 9
show ip eigrp interface
Display which interfaces EIGRP is active on and 
information about EIGRP relating to those interfaces.
Step 10
copy running-config startup-config 
(Optional) Save your entries in the configuration file.
Command
Purpose
Command
Purpose
Step 1
configure terminal
Enter global configuration mode.
Step 2
interface interface-id
Enter interface configuration mode, and specify the 
Layer 3 interface to configure.
Step 3
ip authentication mode eigrp autonomous-system md5
Enable MD5 authentication in IP EIGRP packets.
Step 4
ip authentication key-chain eigrp autonomous-system 
key-chain
Enable authentication of IP EIGRP packets.
Step 5
exit
Return to global configuration mode.
Step 6
key chain name-of-chain
Identify a key chain and enter key-chain configuration 
mode. Match the name configured in Step 4.
Step 7
key number
In key-chain configuration mode, identify the key 
number.
Step 8
key-string text
In key-chain key configuration mode, identify the key 
string.
Step 9
accept-lifetime start-time {infinite | end-time | duration 
seconds
}
(Optional) Specify the time period during which the key 
can be received. 
The start-time and end-time syntax can be either 
hh:mm:ss Month date year or hh:mm:ss date Month 
year
. The default is forever with the default start-time 
and the earliest acceptable date as January 1, 1993. The 
default end-time and duration is infinite
Step 10
send-lifetime start-time {infinite | end-time | duration 
seconds
}
(Optional) Specify the time period during which the key 
can be sent.
The start-time and end-time syntax can be either 
hh:mm:ss Month date year or hh:mm:ss date Month 
year
. The default is forever with the default start-time 
and the earliest acceptable date as January 1, 1993. The 
default end-time and duration is infinite.
Step 11
end 
Return to privileged EXEC mode.