Cisco IOS フレームリレー – sub interfaceの複雑な設定例02

複雑なframe relay subinterface設定例を紹介します。EIGRP authentication設定がやや複雑になる設定例です。

コマンド一覧
構成図
PPP over Frame Relay
1. 設定投入
2. 動作確認
EIGRP Authentication
1. 設定投入
2. 動作確認

コマンド一覧

このシナリオで重要なコマンド一覧は以下の通りです。

特になし

構成図

以下の環境で動作確認を行います。R1をHub、R2, R3をSpokeとする構成で、R1/R3間、R1/R2間で異なるEIGRP passwordを定義する方法について考えます。

           192.168.123.0/24
                             +------+
                     ┌------+  R2  |
       s0/0          │    .2+------+
 +------+.1    +-----+--+  s0/0
 |  R1  +------+  FRSW  |
 +------+      +-----+--+  s0/0
                     │    .3+------+
                     └------+  R3  |
                             +------+

 R1 Loopback0      R2 Loopback0      R3 Loopback0
 10.1.1.1/32       10.2.2.2/32       10.3.3.3/32

 [R1]
interface Serial0/0
 ip address 192.168.123.1 255.255.255.0
 encapsulation frame-relay
 no ip split-horizon eigrp 1

 [R1, R2, R3]
router eigrp 1
 network 10.0.0.0
 network 192.168.123.0
 no auto-summary

設定全文は下記ファイルです。詳細設定は下記を参照ください。

!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
!
!
ip cef
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
 ip address 10.1.1.1 255.255.255.255
!
interface Serial0/0
 ip address 192.168.123.1 255.255.255.0
 encapsulation frame-relay
 no ip split-horizon eigrp 1
 serial restart-delay 0
!
interface Serial0/1
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial0/2
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial0/3
 no ip address
 shutdown
 serial restart-delay 0
!
!
router eigrp 1
 network 10.0.0.0
 network 192.168.123.0
 no auto-summary
!
ip http server
ip forward-protocol nd
!
!
!
!
!
!
control-plane
!
!
!
!
mgcp behavior g729-variants static-pt
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
 login
!
!
end

!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
!
!
ip cef
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
 ip address 10.2.2.2 255.255.255.255
!
interface Serial0/0
 ip address 192.168.123.2 255.255.255.0
 encapsulation frame-relay
 serial restart-delay 0
!
interface Serial0/1
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial0/2
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial0/3
 no ip address
 shutdown
 serial restart-delay 0
!
!
router eigrp 1
 network 10.0.0.0
 network 192.168.123.0
 no auto-summary
!
ip http server
ip forward-protocol nd
!
!
!
!
!
!
control-plane
!
!
!
!
mgcp behavior g729-variants static-pt
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
 login
!
!
end

!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
!
!
ip cef
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
 ip address 10.3.3.3 255.255.255.255
!
interface Serial0/0
 ip address 192.168.123.3 255.255.255.0
 encapsulation frame-relay
 serial restart-delay 0
!
interface Serial0/1
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial0/2
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial0/3
 no ip address
 shutdown
 serial restart-delay 0
!
!
router eigrp 1
 network 10.0.0.0
 network 192.168.123.0
 no auto-summary
!
ip http server
ip forward-protocol nd
!
!
!
!
!
!
control-plane
!
!
!
!
mgcp behavior g729-variants static-pt
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
 login
!
!
end

PPP over Frame Relay

設定投入

Hub & Spoke構成において、PVC毎に異なる設定を適用したい場合は、PPP over Frame Relayを使用すると効果的です。以下のようなコマンドを投入し、PPP over Frame Relay構成に変更します。なお、virtual-template interfaceはIPアドレスが重複していても問題ありません。

 [R1]
interface Serial0/0
 no ip address 192.168.123.1 255.255.255.0
 frame-relay interface-dlci 102 ppp Virtual-Template12
 frame-relay interface-dlci 103 ppp Virtual-Template13
!
interface Virtual-Template12
 ip address 192.168.123.1 255.255.255.0
!
interface Virtual-Template13
 ip address 192.168.123.1 255.255.255.0

 [R2]
interface Serial0/0
 no ip address 192.168.123.2 255.255.255.0
 frame-relay interface-dlci 201 ppp Virtual-Template21
!
interface Virtual-Template21
 ip address 192.168.123.2 255.255.255.0

 [R3]
interface Serial0/0
 no ip address 192.168.123.3 255.255.255.0
 frame-relay interface-dlci 301 ppp Virtual-Template31
!
interface Virtual-Template31
 ip address 192.168.123.3 255.255.255.0

動作確認

PPP over frame relay 設定後も問題なくEIGRP neighborが確立されている事とpingによる疎通が可能である事を確認します。

 [R2]
R2#show ip eigrp neighbors
IP-EIGRP neighbors for process 1
H   Address                 Interface       Hold Uptime   SRTT   RTO  Q  Seq
                                            (sec)         (ms)       Cnt Num
0   192.168.123.1           Vi1               12 00:01:00   95   570  0  16
R2#
R2#
R2#ping 10.3.3.3 source Loopback 0

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.3.3.3, timeout is 2 seconds:
Packet sent with a source address of 10.2.2.2
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/25/76 ms
R2#

EIGRP Authentication

設定投入

R1/R2間, R1/R3間で異なる鍵認証設定を投入します。

 [R1]
key chain R1R2
 key 1
   key-string EIGRP12
key chain R1R3
 key 1
   key-string EIGRP13
!
interface Virtual-Template12
 ip authentication mode eigrp 1 md5
 ip authentication key-chain eigrp 1 R1R2
!
interface Virtual-Template13
 ip authentication mode eigrp 1 md5
 ip authentication key-chain eigrp 1 R1R3

 [R2]
key chain R1R2
 key 1
   key-string EIGRP12
!
interface Virtual-Template21
 ip authentication mode eigrp 1 md5
 ip authentication key-chain eigrp 1 R1R2

 [R3]
key chain R1R3
 key 1
   key-string EIGRP13
!
interface Virtual-Template31
 ip authentication mode eigrp 1 md5
 ip authentication key-chain eigrp 1 R1R3

動作確認

鍵設定投入後も問題なくEIGRP neighborが確立できている事を確認します。

 [R1]
R1#show ip eigrp neighbors
IP-EIGRP neighbors for process 1
H   Address                 Interface       Hold Uptime   SRTT   RTO  Q  Seq
                                            (sec)         (ms)       Cnt Num
1   192.168.123.3           Vi2               10 00:00:04   57   342  0  8
0   192.168.123.2           Vi1               14 00:00:10   87   522  0  5
R1#