Cisco Systems 78-11741-02 Route Authentication Example, IPC-275, Infinite, Exit Key Key-string

Configuring EIGRP

EIGRP Configuration Examples

Route Authentication Example

The following example enables MD5 authentication on EIGRP packets in autonomous system 1. Figure 52 shows the scenario.

Figure 52 EIGRP Route Authentication Scenario

Enhanced IGRP Autonomous System 1

E1

Router A

Router A Configuration

E1

Router B

S5836

interface ethernet 1

ip authentication mode eigrp 1 md5

ip authentication key-chain eigrp 1 holly

key chain holly
key 1
key-string 0987654321
accept-lifetime 04:00:00 Dec	4 1996 infinite
send-lifetime 04:00:00 Dec 4	1996 04:48:00 Dec 4 1996
exit
key 2
key-string 1234567890
accept-lifetime 04:00:00 Dec	4 1996 infinite
send-lifetime 04:45:00 Dec 4	1996 infinite

Router B Configuration

interface ethernet 1

ip authentication mode eigrp 1 md5

ip authentication key-chain eigrp 1 mikel key chain mikel

key 1

key-string 0987654321

accept-lifetime 04:00:00 Dec 4 1996 infinite send-lifetime 04:00:00 Dec 4 1996 infinite

exit key 2

key-string 1234567890

accept-lifetime 04:00:00 Dec 4 1996 infinite send-lifetime 04:45:00 Dec 4 1996 infinite

Router A will accept and attempt to verify the MD5 digest of any EIGRP packet with a key equal to 1. It will also accept a packet with a key equal to 2. All other MD5 packets will be dropped. Router A will send all EIGRP packets with key 2.

Router B will accept key 1 or key 2, and will send key 1. In this scenario, MD5 will authenticate.

Cisco IOS IP Configuration Guide

IPC-275