Tarmoq xavfsizligi

EIGRP protokol bo`yicha qurilgan tarmoq uchun ishni bajarish tartibi
8.7-rasmda tasvirlanga tarmoqda R1 va R2 routerlar o`rtasida axborot almashinuvini autentifikatsiyalash asosida va boshqa routerlar o`rtasida autentifikatsiyasiz sozlamalarni amalga oshiramiz, hamda ular o`rtasidagi farqlarni taqqoslaymiz.

R1 konfiguratsiyasi
Router(config)#hostname R1
R1(config)#router eigrp 1
R1(config-router)#eigrp router-id 1.1.1.1
R1(config-router)#network 192.168.10.0 0.0.0.255
R1(config-router)#network 10.10.10.0 0.0.0.3
R1(config-router)#network 11.11.11.0 0.0.0.3
R1(config-router)#no auto-summary
R1(config-router)#exit
R1(config)#key chain EIGRP_KEY
R1(config-keychain)#key 1
R1(config-keychain-key)#key-string cisco
R1(config-keychain-key)#exit
R1(config-keychain)#exit
R1(config)#interface serial 0/3/0
R1(config-if)#ip authentication mode eigrp 1 md5
R1(config-if)#ip authentication key-chain eigrp 1 EIGRP_KEY
R1(config-if)#exit

R2 konfiguratsiyasi
Router(config)#hostname R2
R2(config)#router eigrp 1
R2(config-router)#eigrp router-id 2.2.2.2
R2(config-router)#network 192.168.20.0 0.0.0.255
R2(config-router)#network 10.10.10.0 0.0.0.3
R2(config-router)#network 12.12.12.0 0.0.0.3
R2(config-router)#no auto-summary
R2(config-router)#exit
R2(config)#key chain EIGRP_KEY
R2(config-keychain)#key 1
R2(config-keychain-key)#key-string cisco
R2(config-keychain-key)#exit
R2(config-keychain)#exit
R2(config)#interface serial 0/3/0
R2(config-if)#ip authentication mode eigrp 1 md5
R2(config-if)#ip authentication key-chain eigrp 1 EIGRP_KEY
R2(config-if)#exit

R3 konfiguratsiyasi
Router(config)#hostname R3
R3(config)#router eigrp 1
R3(config-router)#eigrp router-id 3.3.3.3
R3(config-router)#network 192.168.30.0 0.0.0.255
R3(config-router)#network 12.12.12.0 0.0.0.3
R3(config-router)#network 11.11.11.0 0.0.0.3
R3(config-router)#no auto-summary

8.8-rasm. R1 va R2 routerlar o‘rtasida autentifikatsiya asosida axborot almashinuvi

8.9-rasm. R1 va R3 routerlar o`rtasida autentifikatsiyasiz axborot almashinuvi


OSPF. Hozirda korporativ tarmoqlarda sozlash nisbatan universal va qulay bo`lgan dinamik marshrutizatsiya protokoli birinchi qisqa yo‘lni tanlash ochiq protokoli Open Short-est Path First Protocol — OSPF) hisoblanadi. Dastlab protokol murakab topologiyali katta tarmoqlar (65536 tagacha marshrutizator) da ishlashga mo‘ljallangan. U aloqa kanali holati algoritmiga asoslangan va tarmoq holati o‘zgarishiga yuqori chidamlikka ega.

8.10-rasm. OSPF protokol autentifikatsiyasi sozlamasi