Configuring RIPv2 and EIGRP authentication with key chains can be tricky at first, and the syntax isn't exactly easy to remember. But for BSCI and CCNP exam success, we've got to be able to perform this task.
Laptop Battery In a previous tutorial, we saw how to configure RIPv2 packet authentication, with both clear-text and MD5 authentication schemes. EIGRP authentication is much the same, and has the text and MD5 authentication options as well. But EIGRP being EIGRP, the command just has to be a little more detailed!
Passing the BCSI exam and earning your CCNP certification requires you to know OSPF stub areas inside and out. Stub areas, total stub areas, stub stub areas ... and pretty soon your head is swimming. Then when you hear that EIGRP offers stub routing, your first reaction may be unprintable! But while EIGRP stub routing is effective in the right situation, it's not as complex as OSPF stub routing. Let's take a look at basic EIGRP stub routing.
Thinkpad As with RIPv2, the authentication mode must be agreed upon by the EIGRP neighbors. If one router's interface is configured for MD5 authentication and the remote router's interface is configured for text authentication, the adjacency will fail even if the two interfaces in question are configured to use the same password.
Before making a major investment into a computer certification, consider the steps that a vendor does or does not make to protect your investment. Computer certifications have helped me tremendously in building my IT career. By asking the right questions, and taking a hard look at your motives and plans before pursuing a given certification, they can do the same for you. Chris Bryant, 12933, is the owner of The Bryant Advantage ( //www.thebryantadvantage.com), home of free CCNA and CCNP tutorials, The Ultimate CCNA Study Package, Ultimate CCNP Study Packages, and CCNA CBT video training. Pass the CCNA exam, BSCI exam, and BCMSN exam with Chris Bryant, 12933!
Microsoft We'll now configure link authentication on the adjacency over an Ethernet segment. Below, you'll see how to configure a key chain called EIGRP on both routers, use key number 1, and use the key-string BSCI. Run show key chain on a router to see all key chains.
Configuring EIGRP stub routers also combats the SIA problem. EIGRP stub routers are not queried for routes when the hub does not have a feasible successor for a successor route that has gone down. By default, directly connected networks and summary routes. To change this default, use the eigrp stub command followed by the types of routes you want the stub to advertise back to the hub. (The eigrp stub command run by itself configures the router as stub.)
Laptop Computers R2(config)#key chain EIGRP
According to the indictment, Jones would steal various IBM and Penguin computer servers from Verisign's warehouse in Virginia and sell them to Johnson. Johnson would then sell the servers to several individuals, who would sometimes place them for sale on eBay. As a result of this scheme, the indictment alleges that Jones and Johnson caused Verisign to lose more than $120, 000 worth of computer equipment. In the indictment, Jones and Johnson are charged in three counts with causing the interstate transportation of stolen property, namely IBM 330 and 335 servers, in violation of 18 U.S.C.
Laptop Computer R2(config-keychain)#key 1
Interesting traffic brings the link up; by default, any traffic can cross the link once it's up; a lack of interesting traffic is what brings the link down. In Part II of this tutorial, we'll take a look at some common scenarios that make the ISDN link stay up, and what can be done about it. Chris Bryant, 12933, is the owner of The Bryant Advantage ( //www.thebryantadvantage.com), home of free CCNA and CCNP tutorials, The Ultimate CCNA Study Package, Ultimate CCNP Study Packages, and CCNA CBT video training. Pass the CCNA exam, BSCI exam, and BCMSN exam with Chris Bryant, 12933!
Desktop Computer R2(config-keychain-key)#key-string BSCI
Notebooks
R2#show key chain
Lenovo
Key-chain EIGRP:
Hard Drive key 1 -- text "BSCI"
Travelstar accept lifetime (always valid) - (always valid) [valid now]
Gateway send lifetime (always valid) - (always valid) [valid now]
Laptop Parts R3(config)#key chain EIGRP
Software R3(config-keychain)#key 1
Hard Drives R3(config-keychain-key)#key-string BSCI
Electronics
R3#show key chain
Canon
Key-chain EIGRP:
Desktop Pc key 1 -- text "BSCI"
Desktop Computers accept lifetime (always valid) - (always valid) [valid now]
Think Pad send lifetime (always valid) - (always valid) [valid now]
Repair The EIGRP command to apply the key chain is a bit of a pain to remember, because the protocol and AS number is identified in the middle of the command, not the beginning. Also note that two commands are needed - one to name the key chain, another to define the authentication mode in use.
Data Recovery R2(config)#interface ethernet0
Cisco R2(config-if)#ip authentication key-chain eigrp 100 EIGRP
Keyboard R2(config-if)#ip authentication mode eigrp 100 md5
Monitor 5d07h: %DUAL-5-NBRCHANGE: IP-EIGRP 100: Neighbor 172.12.23.3 (Ethernet0) is down: keychain changed
Desktop R3(config)#interface ethernet0
Infosys R3(config-if)#ip authentication key-chain eigrp 100 EIGRP
Refurbished Laptops R3(config-if)#ip authentication mode eigrp 100 md5
Wipro 5d07h: %DUAL-5-NBRCHANGE: IP-EIGRP 100: Neighbor 172.12.23.2 (Ethernet0) is up:
Lap Top As with RIPv2, the existing adjacency was torn down when one side was configured with authentication. If the key chain is correctly defined and applied on both sides, the adjacency will come back up. Always run show ip eigrp neighbor to make sure the adjacency is present. Learn the details of EIGRP key chains by configuring them on your home lab equipment, and you'll be more than ready for BSCI exam success!
Refurbished
Memory Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage (http://www.thebryantadvantage.com), home of free CCNA and CCNP tutorials, The Ultimate CCNA Study Package, Ultimate CCNP Study Packages, and CCNA CBT video training. Pass the CCNA exam ,BSCI exam , and BCMSN exam with Chris Bryant, CCIE #12933!
Intel For a copy of his FREE "How To Pass The CCNA" or "How To Pass The CCNP" ebook and receive a FREE CCNA and CCNP question every day, just visit the website and claim your free copies!
[ Comment, Edit or Article Submission ]
