...

Thursday, March 4, 2010

Misc 2

Authentication for EIGRP is similar to RIP. First we create a key-chain as follows:key-chain KEYCHAIN
key 1
key-string cisco


Then we apply to the interfaces participating in EIGRP (which needs to be authenticated):
ip authe mode eigrp 10 md5
ip authe key eigrp 10 KEYCHAIN


Similar to RIP, we can do route summarization at any router through:
ip summary eigrp 10 192.5.0.0 255.255.252.0

We can have multiple route summaries.

PPP CHAP authentication can be done through:
encap ppp
ppp auth chap
ppp chap pass cisco
exit
user R5 pass cisco


When other routers try to authenticate, his hostname is used. The local database is then checked for the password the opposite specifies with the "ppp chap pass" command. CHAP authentication can be one sided. You can also mix authentications.

You can create a definition for a specific range of interfaces through:
define interface-range DEFINE f0/1, f0/3, f0/5-6

You can then access the interfaces through:
int ran mac DEFINE

You can also create macros which do a list of commands, like:
macro name MACRO
in f0/1
sw m a
sw a v 5
@


Macros can be run from global or interface. From global, use:
macro global apply MACRO

From an interface, use:
macro apply MACRO

You can have parameters passed into macros, like:
macro name MACRO
in $1
sw m a
sw a v $2
@


To change f0/2 to vlan 35, simply:
macro apply MACRO $1 f0/2 $2 35

$1 and $2 can be anything, as long as they don't occur in the code unless you want it to.

If you want to input symbols like ? in password, use the CTRL+V escape character before the symbol like:
CTRL+V?

No comments :

Post a Comment

<