Cisco Systems 3560 ユーザーズマニュアル
36-38
Catalyst 3560 Switch Software Configuration Guide
OL-8553-06
Chapter 36 Configuring IP Unicast Routing
Configuring EIGRP
Use the no forms of these commands to disable the feature or return the setting to the default value.
Configuring EIGRP Route Authentication
EIGRP route authentication provides MD5 authentication of routing updates from the EIGRP routing
protocol to prevent the introduction of unauthorized or false routing messages from unapproved sources.
protocol to prevent the introduction of unauthorized or false routing messages from unapproved sources.
Beginning in privileged EXEC mode, follow these steps to enable authentication:
Step 9
show ip eigrp interface
Display which interfaces EIGRP is active on and
information about EIGRP relating to those interfaces.
information about EIGRP relating to those interfaces.
Step 10
copy running-config startup-config
(Optional) Save your entries in the configuration file.
Command
Purpose
Command
Purpose
Step 1
configure terminal
Enter global configuration mode.
Step 2
interface interface-id
Enter interface configuration mode, and specify the
Layer 3 interface to configure.
Layer 3 interface to configure.
Step 3
ip authentication mode eigrp autonomous-system md5
Enable MD5 authentication in IP EIGRP packets.
Step 4
ip authentication key-chain eigrp autonomous-system
key-chain
key-chain
Enable authentication of IP EIGRP packets.
Step 5
exit
Return to global configuration mode.
Step 6
key chain name-of-chain
Identify a key chain and enter key-chain configuration
mode. Match the name configured in Step 4.
mode. Match the name configured in Step 4.
Step 7
key number
In key-chain configuration mode, identify the key
number.
number.
Step 8
key-string text
In key-chain key configuration mode, identify the key
string.
string.
Step 9
accept-lifetime start-time {infinite | end-time | duration
seconds}
seconds}
(Optional) Specify the time period during which the key
can be received.
can be received.
The start-time and end-time syntax can be either
hh:mm:ss Month date year or hh:mm:ss date Month
year. The default is forever with the default start-time
and the earliest acceptable date as January 1, 1993. The
default end-time and duration is infinite.
hh:mm:ss Month date year or hh:mm:ss date Month
year. The default is forever with the default start-time
and the earliest acceptable date as January 1, 1993. The
default end-time and duration is infinite.
Step 10
send-lifetime start-time {infinite | end-time | duration
seconds}
seconds}
(Optional) Specify the time period during which the key
can be sent.
can be sent.
The start-time and end-time syntax can be either
hh:mm:ss Month date year or hh:mm:ss date Month
year. The default is forever with the default start-time
and the earliest acceptable date as January 1, 1993. The
default end-time and duration is infinite.
hh:mm:ss Month date year or hh:mm:ss date Month
year. The default is forever with the default start-time
and the earliest acceptable date as January 1, 1993. The
default end-time and duration is infinite.
Step 11
end
Return to privileged EXEC mode.