How to configure authentication for EIGRP, a Cisco proprietary enhanced distance vector routing protocol
By Brad Reese on Tue, 05/06/08 - 11:32pm.
Enhanced Interior Gateway Routing Protocol (EIGRP) is a Cisco proprietary enhanced distance vector routing protocol.
EIGRP provides benefits like fast convergence, incremental updates and support for multiple network layer protocols.
EIGRP supports Message Digest 5 (MD5) authentication to prevent malicious and incorrect routing information from being introduced into the routing table of a Cisco router.
To configure EIGRP authentication, the keys used in the authentication process have to be configured and attached to an interface along with MD5 as the mode of authentication.
To configure authentication, apart from the basic steps required for enabling EIGRP, perform these steps:
| 1. | To configure the keys, identify a group of authentication keys by issuing the key chain name-of-chain command in global configuration mode. |
| 2. | To identify an authentication key on a key chain, issue the key key-id command in key-chain configuration mode. |
| 3. | To specify the key authentication string, issue the key-string text command in key-chain key configuration mode. |
| 4. | To enable authentication for EIGRP packets and to specify the set of keys to be used on an interface, issue the ip authentication key-chain eigrp as-number key-chain command in interface configuration mode. |
| 5. | To specify MD5 as the type of authentication to be used for EIGRP packets, issue the ip authentication mode eigrp as-number md5 command in interface configuration mode. EIGRP does not support plain text authentication. |
| 6. | Optionally, you can configure key management to automatically migrate from one authentication key to another by configuring the accept-lifetime start-time {infinite | end-time | duration seconds} and send-lifetime start-time {infinite | end-time | duration seconds} commands in key-chain key configuration mode. |
For further information on configuring EIGRP authentication with an example you may wish to refer to:
View more Cisco How-To Tutorials
- About Brad Reese on Cisco
Brad Reese cofounded BradReese.Com Cisco Refurbished, which enables affordable Cisco networks globally by assuring customer satisfaction with guaranteed one year warranties on both Cisco Repair as well as Refurbished Cisco.
Don't be shy, contact Brad Reese online or call him Toll Free:
866-864-0506
International callers may wish to call Brad by dialing:
850-364-4115
- Archives
- February 2010
- January 2010
- December 2009
- November 2009
- October 2009
- September 2009
- August 2009
- July 2009
- June 2009
- May 2009
- April 2009
- March 2009
- February 2009
- January 2009
- December 2008
- November 2008
- October 2008
- September 2008
- August 2008
- July 2008
- June 2008
- May 2008
- April 2008
- March 2008
- February 2008
- January 2008
- December 2007
- November 2007
- October 2007
- September 2007
- August 2007
- July 2007
- June 2007
- May 2007
- April 2007
- March 2007
- February 2007
- January 2007
- On The Web
Sponsored Links
- Masters of Virtualization and Cloud Computing- Trend Micro
- Hitachi IT Operations Analyzer—30-day free trial- Hitachi Data Systems
- Are you gambling with your data? It is at risk. Find out and protect it.- Ultrium LTO
- CA ARCserve r12.5 is More Than Backup! Download Trial Version Today- CA
- Take the Netezza TwinFin TestDrive!- Netezza
- Getting to One 10-minute Webcast, Cloud Computing: Beyond the Hype- Novell
- Watch a step-by-step demo of how Chinese hackers compromised brand name US high-tech companies like Google. - Zscaler
- Cisco Webcast: Leveraging 802.11n, Is your WLAN ready for Enterprise Video?- Cisco
- Turn your desk phone and mobile phone into one with Sprint Mobile Integration.- Sprint
- Discover the Four Trends Driving the Future of Data Centers - Emerson Network Power
-
Network World, Inc
The Leader in Network Knowledge