Search:       

Wednesday, 23 April 2014       

Home / Computers / Computer Certification

Cisco CCNP / BCSI Exam Tutorial: Configuring EIGRP Packet Authentication

By:Chris Bryant, CCIE #12933


Configuring RIPv2 and EIGRP authentication with key chains can be tricky at first, and the syntax isn't exactly easy to remember. But for BSCI and CCNP exam success, we've got to be able to perform this task.



In a previous tutorial, we saw how to configure RIPv2 packet authentication, with both clear-text and MD5 authentication schemes. EIGRP authentication is much the same, and has the text and MD5 authentication options as well. But EIGRP being EIGRP, the command just has to be a little more detailed!



As with RIPv2, the authentication mode must be agreed upon by the EIGRP neighbors. If one router's interface is configured for MD5 authentication and the remote router's interface is configured for text authentication, the adjacency will fail even if the two interfaces in question are configured to use the same password.



We'll now configure link authentication on the adjacency over an Ethernet segment. Below, you'll see how to configure a key chain called EIGRP on both routers, use key number 1, and use the key-string BSCI. Run show key chain on a router to see all key chains.



R2(config)#key chain EIGRP



R2(config-keychain)#key 1



R2(config-keychain-key)#key-string BSCI



R2#show key chain



Key-chain EIGRP:



key 1 -- text "BSCI"



accept lifetime (always valid) - (always valid) [valid now]



send lifetime (always valid) - (always valid) [valid now]



R3(config)#key chain EIGRP



R3(config-keychain)#key 1



R3(config-keychain-key)#key-string BSCI



R3#show key chain



Key-chain EIGRP:



key 1 -- text "BSCI"



accept lifetime (always valid) - (always valid) [valid now]



send lifetime (always valid) - (always valid) [valid now]



The EIGRP command to apply the key chain is a bit of a pain to remember, because the protocol and AS number is identified in the middle of the command, not the beginning. Also note that two commands are needed - one to name the key chain, another to define the authentication mode in use.



R2(config)#interface ethernet0



R2(config-if)#ip authentication key-chain eigrp 100 EIGRP



R2(config-if)#ip authentication mode eigrp 100 md5



5d07h: %DUAL-5-NBRCHANGE: IP-EIGRP 100: Neighbor 172.12.23.3 (Ethernet0) is down: keychain changed



R3(config)#interface ethernet0



R3(config-if)#ip authentication key-chain eigrp 100 EIGRP



R3(config-if)#ip authentication mode eigrp 100 md5



5d07h: %DUAL-5-NBRCHANGE: IP-EIGRP 100: Neighbor 172.12.23.2 (Ethernet0) is up:



As with RIPv2, the existing adjacency was torn down when one side was configured with authentication. If the key chain is correctly defined and applied on both sides, the adjacency will come back up. Always run show ip eigrp neighbor to make sure the adjacency is present. Learn the details of EIGRP key chains by configuring them on your home lab equipment, and you'll be more than ready for BSCI exam success!



Article Source: http://www.dailynewarticles.com

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage, home of free CCNP and CCNA tutorials, The Ultimate CCNA Study Package, and Ultimate CCNP Study Packages.

For a FREE copy of his latest e-books, “How To Pass The CCNA” and “How To Pass The CCNP”, just visit the website! You can also get FREE CCNA and CCNP exam questions every day! Pass the CCNP exam with The Bryant Advantage!







More Articles from Computer Certification Category:
Cisco CCNP Certification / BCMSN Exam Tutorial: Writing QoS Policy
Cisco CCNP / BCSI Exam Tutorial: Configuring EIGRP Packet Authentication
Cisco CCNP / BSCI Certification: Introduction To ISIS Terminology
What To Expect When Taking Your First Cisco Certification Exam
Cisco CCNA / CCNP Home Lab: Why You Need An ISDN Simulator
Be Certifiable! The Basics Of MCSE And MCP
Cisco CCNP / BCSI Exam Tutorial: Broadcasts And The IP Helper-Address Command
Webroot Window Washer
Cisco CCNA / CCNP Home Lab Tutorial: Using 2520 Routers
CCNA / CCNP Home Lab Tutorial: The VLAN.DAT File
Cisco CCNP / BCMSN Exam Tutorial: Changing Root Bridge Election Results
CCNP Certification / BCMSN Exam Tutorial: HSRP MAC Addresses And Timers
Cisco CCNP / BCMSN Exam Tutorial: Switches, QoS, And Cisco's Networking Model
Cisco CCNA Exam Tutorial: Troubleshooting Directly Connected Serial Interfaces
How To Earn Cisco’s Firewall Specialist Certification

 


Main Menu
Home
Most Popular Articles
Top Authors
Submit Articles
Submission Guidelines
Link to Us
Bookmark
Contact Us

Partners
Blue Articles

 

 

- Privacy Policy -