GRE 隧道接口上的 EIGRP 身份验证?

网络工程 eigrp
2021-07-06 02:53:03

我想对 EIGRP 更新实施身份验证。

我可以在 GRE 隧道接口而不是物理接口上启用 EIGRP 身份验证吗?

1个回答

是的,你可以这样做。下面是一个例子:

Router-A#
!
key chain Netlab
 key 13
   key-string Netlabbuilder
!
interface Tunnel1
 description Site-B
 ip address 10.99.99.1 255.255.255.252
 ip mtu 1400
 ip authentication mode eigrp 10 md5
 ip authentication key-chain eigrp 10 Netlab
 ip tcp adjust-mss 1360
 cdp enable
 tunnel source 13.1.87.2
 tunnel destination 10.12.85.2
end
!
Router-A#show ip eigrp neighbors tunnel 1
IP-EIGRP neighbors for process 10
H   Address                 Interface       Hold Uptime   SRTT   RTO  Q  Seq
                                            (sec)         (ms)       Cnt Num
1   10.99.99.2              Tu1               13 00:04:38   54  5000  0  17

#####

Router-B#
!
key chain Netlab
 key 13
   key-string Netlabbuilder
!
interface Tunnel1
 description Site-A
 ip address 10.99.99.2 255.255.255.252
 ip mtu 1400
 ip authentication mode eigrp 10 md5
 ip authentication key-chain eigrp 10 Netlab
 ip tcp adjust-mss 1360
 cdp enable
 tunnel source 10.12.85.2
 tunnel destination 13.1.87.2
end
!
Router-B#show ip eigrp neighbors tunnel 1
IP-EIGRP neighbors for process 10
H   Address                 Interface       Hold Uptime   SRTT   RTO  Q  Seq
                                            (sec)         (ms)       Cnt Num
0   10.99.99.1              Tu1               13 00:05:55  212  5000  0  10