Cisco Catalyst 4500 Series, Software Configuration Manual

Page: 949 / 2086

35-21
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Chapter 35 Configuring Layer 3 Interfaces
Configuring EIGRP Stub Routing
Route Authentication Example
The following example enables MD5 authentication on EIGRP packets in autonomous system 1:
Router A
interface ethernet 1
ip authentication mode eigrp 1 md5
ip authentication key-chain eigrp 1 holly
key chain holly
key 1
key-string 0987654321
accept-lifetime 04:00:00 Dec 4 1996 infinite
send-lifetime 04:00:00 Dec 4 1996 04:48:00 Dec 4 1996
exit
key 2
key-string 1234567890
accept-lifetime 04:00:00 Dec 4 1996 infinite
send-lifetime 04:45:00 Dec 4 1996 infinite
Router B
interface ethernet 1
ip authentication mode eigrp 1 md5
ip authentication key-chain eigrp 1 mikel
key chain mikel
key 1
key-string 0987654321
accept-lifetime 04:00:00 Dec 4 1996 infinite
send-lifetime 04:00:00 Dec 4 1996 infinite
exit
key 2
key-string 1234567890
accept-lifetime 04:00:00 Dec 4 1996 infinite
send-lifetime 04:45:00 Dec 4 1996 infinite
Router A accepts and attempts to verify the MD5 digest of any EIGRP packet with a key equal to 1. It
also accepts a packet with a key equal to 2. All other MD5 packets are dropped. Router A sends all
EIGRP packets with key 2.
Router B accepts key 1 or key 2, and sends key 1. In this scenario, MD5 authenticates.
Stub Routing Example
A router that is configured as a stub with the eigrp stub command shares connected and summary
routing information with all neighbor routers by default. Four optional keywords can be used with the
eigrp stub command to modify this operation:
•
receive-only
• connected
•
static
• summary
This section provides configuration examples for all forms of the eigrp stub command. The eigrp stub
command can be modified with several options, and these options can be used in any combination except
for the
receive-only keyword. The receive-only keyword restricts the router from sharing any of its
routes with any other router in that EIGRP autonomous system, and the receive-only keyword does not
permit any other option to be specified because it prevents any type of route from being sent. The three