Configuring EIGRP usually goes wrong in the same few places: the wrong autonomous system number, missing network statements, or a router that looks fine until you check neighbors. If you need a practical way to get configuring eigrp right the first time, this guide walks through setup, verification, troubleshooting, and tuning on Cisco routers with the same workflow you would use on a real network.
Cisco CCNA v1.1 (200-301)
Learn essential networking skills and gain hands-on experience in configuring, verifying, and troubleshooting real networks to advance your IT career.
Get this course on Udemy at the lowest price →Quick Answer
Configuring EIGRP on Cisco routers means enabling the EIGRP routing process, advertising the correct interfaces, verifying neighbor adjacencies, and then tuning features like summarization, stub routing, and authentication as needed. In Cisco enterprise networks, EIGRP still matters because it converges quickly and is straightforward to troubleshoot when you validate each step in order.
Quick Procedure
- Check interface IP addressing and Layer 3 reachability.
- Enter EIGRP routing configuration with the correct AS number.
- Advertise only the intended networks.
- Verify neighbors and route installation.
- Fix mismatches, passive interfaces, or filtering issues if adjacencies fail.
- Tune summarization, stub settings, and authentication after the baseline works.
| Topic | Cisco EIGRP configuration |
|---|---|
| Primary Goal | Build, verify, and troubleshoot EIGRP adjacencies and route exchange |
| Core Commands | router eigrp, network, show ip eigrp neighbors, show ip route eigrp |
| Key Design Features | Fast convergence, feasible successors, summarization, stub routing, and unequal-cost load balancing |
| Security Options | Routing authentication such as MD5 and platform-supported SHA options |
| IPv6 Support | Address-family-based EIGRP configuration for dual-stack and IPv6 networks |
| Best Fit | Cisco-heavy enterprise, branch, campus, and WAN environments |
| Related Skill Path | CCNA-level routing, verification, and troubleshooting aligned with Cisco CCNA v1.1 (200-301) |
Understanding EIGRP Before You Configure It
EIGRP is Cisco’s Enhanced Interior Gateway Routing Protocol, and it behaves like an advanced distance-vector Routing Protocol with faster convergence and more practical route calculation than classic distance-vector designs. It uses a metric based on bandwidth, delay, and sometimes reliability and load, which means the best path is not always the shortest hop count path.
That matters because configuring eigrp is not just about making two routers exchange routes. It is about making them exchange the right routes, predictably, with minimal churn when a link fails. Cisco documents the protocol behavior and configuration model in its official IOS and IOS XE guides, which is important because syntax and feature support can vary by release and platform family; always verify against the current Cisco documentation for the exact software train in use.
EIGRP fits best where you want quick failover behavior without the operational overhead of more complex designs. In branch and campus environments, it often works well when one team owns the routing domain, the WAN is mostly Cisco-based, and you need a protocol that is easier to explain to junior admins than many multi-area designs.
What EIGRP Is Designed to Do
Fast convergence means EIGRP can usually react quickly when a route changes, especially when a feasible successor already exists. That is useful in a branch network where a primary WAN circuit fails and a backup path must take over with minimal interruption.
The protocol also reduces unnecessary routing updates compared with older distance-vector protocols. Instead of flooding the entire table constantly, it sends updates when routes change and uses DUAL to calculate loop-free paths.
Design goal matters more than “it works.” A clean EIGRP configuration is one that converges predictably, keeps routing updates contained, and makes troubleshooting easy when the network changes.
Where It Fits in Real Networks
EIGRP is still common in Cisco enterprise networks because it handles branch-to-hub routing, campus distribution layers, and smaller WAN designs efficiently. It is also a practical skill for CCNA-level administration because you need to understand how neighbors form, how routes are learned, and how to confirm the protocol is behaving as expected.
If you are studying routing fundamentals through Cisco CCNA v1.1 (200-301), EIGRP is a good place to practice command-line verification and troubleshooting discipline. Those habits transfer directly to OSPF, static routing, and real production support.
Note
Platform behavior can vary by IOS and IOS XE version. Always confirm the exact command syntax and feature availability on the router you are configuring, especially for authentication and IPv6 address-family behavior.
Prerequisites
Before you start configuring eigrp, make sure the base network is ready. EIGRP is not a replacement for broken addressing, disabled interfaces, or inconsistent design. It assumes the underlying Layer 3 path is already functional.
- Interface IP addressing is in place on all routers that should participate in routing.
- Layer 3 connectivity exists between EIGRP peers before you enable the protocol.
- Matching autonomous system numbers are planned for each EIGRP routing domain.
- Advertisement scope is defined so only intended subnets join the routing process.
- Administrative access to the routers is available through console, SSH, or a management session.
- Change control or rollback procedures are documented if this is a production network.
In practice, the most common mistake is advertising too much or too little. If a router owns both transit and user LAN interfaces, you should already know which networks belong in the EIGRP domain and which should stay out. Cisco’s official EIGRP documentation explains how the routing process identifies participating interfaces, and that detail matters because a single wrong network statement can make the configuration appear correct while quietly excluding the interface you expected to participate.
Basic Cisco EIGRP Configuration Step by Step
The simplest way to configure EIGRP is to build a repeatable baseline: enter the routing process, advertise the intended subnets, then verify that neighbors form and routes appear. The exact syntax depends on whether you are using classic EIGRP for IPv4 or address-family style EIGRP in a newer IOS XE workflow, but the operational logic is the same.
-
Confirm the interfaces are up. Use
show ip interface briefto verify the physical and logical state before touching EIGRP. If an interface is administratively down, has the wrong mask, or shows no IP address, routing will fail before the protocol even starts. -
Enter EIGRP routing configuration. On a classic IPv4 deployment, use
router eigrp 100or the AS number assigned to your design. The AS number must match across routers that should become neighbors in the same routing domain. -
Advertise the right networks. Use the
networkcommand to enable EIGRP on the intended interfaces. For example,network 10.10.10.0 0.0.0.255on one router andnetwork 10.10.20.0 0.0.0.255on another can place only those interfaces into the routing process. -
Repeat consistently on every peer. If one router advertises a subnet and the other router does not participate in the same AS, the adjacency will never come up. Consistency is the difference between a clean lab demo and a broken production rollout.
-
Save and document the baseline. Use
write memoryorcopy running-config startup-configafter validation. In a real network, saved configuration and clear documentation reduce recovery time when a change must be backed out.
A minimal working example for two routers might look like this in classic form:
R1(config)# router eigrp 100
R1(config-router)# network 10.1.1.0 0.0.0.255
R1(config-router)# network 192.168.10.0 0.0.0.255
R2(config)# router eigrp 100
R2(config-router)# network 10.1.1.0 0.0.0.255
R2(config-router)# network 192.168.20.0 0.0.0.255
The important part is not the example itself. It is the habit of enabling only the interfaces that belong in the routing domain and then checking whether the control plane behaves the way you expect.
How Do You Verify EIGRP Is Working Correctly?
You verify EIGRP by checking neighbor formation first, then route installation, then end-to-end reachability. If you start with ping tests alone, you can miss the real issue, such as a passive interface or an AS mismatch that only becomes obvious in the neighbor table.
Use show ip eigrp neighbors to confirm that each router sees the other as a valid adjacency. A healthy output should show the neighbor address, interface, hold time, uptime, and sequence-related fields. If those values are missing or the table is empty, the problem is below the routing table level.
Next, check show ip route eigrp. That command confirms whether routes are being learned and installed. If a neighbor exists but no EIGRP routes appear, look at filtering, summarization, and whether the learned route is actually being advertised into the local process.
- Neighbor table proves the protocol session is up.
- Routing table proves learned routes are being installed.
- Ping confirms the destination is reachable.
- Traceroute shows the path taken across the network.
For production validation, do not stop at one router. Confirm that multiple neighbors learn the same route and that return traffic can traverse the expected path. That is the difference between a successful lab config and a stable routed network.
Why Do EIGRP Neighbors Fail to Form?
EIGRP neighbors usually fail for one of a few reasons: the routers do not match on the AS number, the interfaces are not participating in EIGRP, or the link itself is not ready. The fastest way to troubleshoot is to work from Layer 3 outward instead of guessing at the protocol.
Start with the interface. Check status, addressing, and subnet match. A router with the wrong mask or an interface in a down state may look healthy in the CLI but still be unable to exchange hello packets across the link.
Then check the configuration domain. If one router is in AS 100 and the other is in AS 200, they will not form adjacency even if everything else is correct. That issue is common in mixed environments where multiple teams have copied old templates without updating the routing process.
Other causes are just as common:
- Passive-interface misuse prevents hellos on an interface that should participate.
- ACLs can block EIGRP multicast traffic or routing updates.
- Bad summarization can hide a route you expected to advertise.
- Authentication mismatch can reject otherwise valid neighbors.
- Subnet mismatch can make two routers sit on different networks even when they are physically connected.
The best troubleshooting mindset is simple: interface first, neighbor second, routing table third. That sequence saves time and prevents the common mistake of changing EIGRP timers or metrics before the basics are correct.
How Does EIGRP Choose the Best Path?
EIGRP metric is the calculation the protocol uses to decide which route is preferred. It does not rely on hop count alone. Instead, it primarily uses bandwidth and delay, which is why a path with fewer routers is not always the path EIGRP chooses.
This matters in real networks with unequal WAN links. A high-bandwidth path with more hops may still be preferred over a direct but slow circuit. In that sense, EIGRP is more design-aware than simple hop-based routing because it allows the routing decision to reflect actual link quality rather than just topology shape.
Understanding the metric helps you troubleshoot why traffic is taking an unexpected path. If a backup link becomes preferred, it is usually because the primary link’s bandwidth, delay, or advertising behavior changed. EIGRP also supports feasible successors, which can help a backup route take over more quickly when the primary route fails.
Metrics are design signals, not trivia. If you understand why EIGRP prefers one route over another, you can predict failover behavior before the outage happens.
That knowledge is useful when you are validating branch circuits, tuning WAN edge devices, or comparing the behavior of EIGRP to OSPF. Cisco’s routing documentation and design guides are the best place to confirm how metric-related features behave on your specific platform and release.
What Advanced EIGRP Features Are Worth Using?
Once the baseline is stable, the most useful EIGRP enhancements are summarization, stub routing, unequal-cost load balancing, and route filtering. These features are not required for a basic deployment, but they matter when the network grows beyond a handful of routers.
Route Summarization
Summarization reduces the number of routes shared between routers by advertising a shorter prefix that covers multiple more specific networks. This helps shrink the routing table and can reduce update noise across the domain. In a branch design, summarization often makes the difference between a clean upstream view and a table full of overly detailed LAN prefixes.
Stub Routing
EIGRP stub tells neighbors that a router should not be used as a transit point for broad query traffic. That is especially valuable at branch sites. If a branch router only needs to reach headquarters and local LANs, stub routing helps limit query scope and keeps the branch from being dragged into unnecessary convergence work.
Unequal-Cost Load Balancing
EIGRP can also load balance across paths that do not have identical metrics when configured correctly. That is useful in mixed WAN designs where two links both matter but one is better than the other. Instead of wasting the second path, you can use it intelligently while still keeping the preferred route in charge.
Route Filtering
Route filtering gives you control over what enters or leaves the EIGRP domain. It is a design tool, not a band-aid. Use it to prevent route leakage, stop unwanted default propagation, or keep lab and production prefixes separate.
These features all improve scalability, but they also add operational complexity. Apply them intentionally, document them carefully, and verify the outcome after every change.
How Do You Secure EIGRP Communications?
EIGRP authentication protects routing adjacencies from unauthorized or accidental participation. In practice, that means a router cannot become a neighbor unless it presents the expected authentication information. That is important on shared infrastructure, in large enterprise segments, and anywhere misconfiguration could create route instability.
Historically, EIGRP authentication has commonly used MD5, and some newer platforms or configurations may support stronger options such as SHA depending on IOS or IOS XE capabilities. The exact syntax varies, so always check the current Cisco documentation for the release you are running before applying it in production.
Authentication is not just about malicious activity. It also protects against an engineer plugging in the wrong device, a test router joining the wrong segment, or a copied template bringing up a neighbor unexpectedly. Those are real operational risks in busy Cisco environments.
- Use authentication on shared or production links where routing integrity matters.
- Match keys exactly on both sides of the adjacency.
- Document key chains and timers so rotations do not break routing.
- Validate after change with neighbor and route checks.
Warning
Authentication failures often look like basic adjacency problems. If you recently enabled EIGRP security and neighbors stopped forming, check keys, timers, and platform support before assuming the link is down.
How Does EIGRP Work in IPv6 and Dual-Stack Networks?
EIGRP for IPv6 uses an address-family style configuration model on supported Cisco platforms, which means IPv6 behavior is configured and verified separately from IPv4 in many environments. That separation matters because a router can be healthy for IPv4 and still have a broken IPv6 EIGRP setup.
Before troubleshooting IPv6, confirm that the interface has IPv6 enabled and that the addresses are correct. IPv6 routing also has its own operational checks, so you should verify neighbor formation, learned routes, and reachability in the IPv6 domain independently from IPv4.
Dual-stack networks often require parallel validation. A router may advertise IPv4 routes correctly while IPv6 adjacencies remain down because of a missing address-family setting, an interface-level IPv6 configuration issue, or a mismatch in how the routing process was activated.
- Check IPv6 addressing on every participating interface.
- Verify neighbor formation separately for IPv6.
- Confirm route installation in the IPv6 routing table.
- Test reachability with IPv6 ping and traceroute tools.
For dual-stack operations, the practical lesson is simple: do not assume one protocol family proves the other. Validate both. Cisco’s IOS XE documentation for EIGRP address families is the best reference for exact command behavior and release-specific support.
What Is the Best Way to Troubleshoot Common EIGRP Problems?
The best EIGRP troubleshooting process starts with the link, then checks adjacency, then checks route propagation. That order is reliable because it matches how the protocol behaves. If the interface is broken, the neighbor will fail. If the neighbor is up but routes are missing, the problem is usually policy or advertisement related.
-
Check the interface status first. Use
show ip interface briefand inspect the physical link, IP address, and subnet mask. Fix the basic Layer 3 issue before looking at EIGRP timers or metric tuning. -
Confirm the AS number. If routers are in different autonomous systems, they will not neighbor. This is one of the fastest mistakes to detect and one of the easiest to fix.
-
Review the EIGRP neighbor table. Use
show ip eigrp neighborsto see whether the adjacency exists and whether it is stable. If the table is empty, look at authentication, ACLs, passive interfaces, and multicast handling. -
Inspect the routing table. Use
show ip route eigrpto determine whether learned routes are being installed. If routes appear on one router but not another, check summarization, filtering, and which networks are actually being advertised. -
Test end-to-end traffic. Run ping and traceroute from each side of the domain. This confirms not only control-plane learning but also data-plane forwarding through the expected path.
When troubleshooting gets messy, avoid changing multiple variables at once. Make one change, validate one result, and move to the next issue. That method is slower than random guessing, but it is much faster than chasing two broken things at the same time.
How Do You Tune EIGRP for Better Stability and Performance?
Tuning EIGRP is about reducing unnecessary routing churn while keeping the design easy to support. The safest tuning changes are usually summarization and stub routing, because both reduce the amount of work routers must do when a topology changes.
Summarization stabilizes larger networks by hiding detail where detail is not needed. It is especially useful at the edge of a branch or distribution layer, where upstream routers should not know every single local subnet. That also makes the routing table smaller and the control plane quieter.
Stub routing is another major stability tool. In branch networks, it limits query propagation and prevents routers from spending time answering questions about routes they should never be expected to carry transit traffic for. That can make a noticeable difference in convergence behavior after a failure.
Route filtering and unequal-cost load balancing should be used with care. Filtering is excellent for design control, but it can also hide routes you later expect to see. Unequal-cost load balancing is powerful, but only when you have a clear business reason to use more than one path.
- Use summarization to reduce table size and route noise.
- Use stub routing at branch edges to constrain query traffic.
- Use filtering to enforce routing policy intentionally.
- Use unequal-cost paths only when the design benefits from it.
Do not tune EIGRP just because the feature exists. Tune it because the network design needs it. That is the difference between an engineered routing domain and a collection of copied commands.
What Should You Consider in Real-World Deployments?
Production EIGRP is not a lab exercise. In a live network, every routing change should be treated as a controlled event with verification, rollback planning, and documentation. A router that comes up with one neighbor in a test topology can still fail in production because of a filtering rule, a security policy, or a missing secondary adjacency.
Document the important details before you make changes: AS numbers, advertised networks, summarization boundaries, authentication settings, and which interfaces are passive. That documentation matters when someone else inherits the environment or when you need to troubleshoot an incident under time pressure.
In Cisco-heavy enterprises, consistency across branch, campus, and WAN segments is critical. If one site uses a different AS number or a different summary boundary, the routing domain becomes harder to reason about. Good operations teams keep their EIGRP templates predictable and their exceptions rare.
That approach also aligns with broader enterprise governance. The Cisco configuration guides and the NIST approach to controlled change and risk reduction both emphasize the same principle: know what changed, verify the result, and keep the design understandable.
Key Takeaway
- EIGRP is easiest to manage when you configure it in a strict order: interface readiness, AS alignment, network advertisement, then verification.
- Most EIGRP failures come from basic issues such as mismatched AS numbers, missing network statements, passive interfaces, or authentication errors.
- Summarization and stub routing improve stability by reducing route noise and limiting query traffic in larger networks.
- IPv6 EIGRP and IPv4 EIGRP should be validated separately in dual-stack environments because one family can work while the other fails.
- The fastest way to troubleshoot EIGRP is to check the interface, then the neighbor table, then the routing table.
Cisco CCNA v1.1 (200-301)
Learn essential networking skills and gain hands-on experience in configuring, verifying, and troubleshooting real networks to advance your IT career.
Get this course on Udemy at the lowest price →Conclusion
Successful configuring eigrp is a workflow, not a single command. You start with clean interfaces and matching AS numbers, advertise only the networks you intend, verify neighbors and routes, and then tune features like summarization, stub routing, authentication, and IPv6 support when the design calls for them.
If you remember nothing else, remember the common failure points: AS mismatch, missing network statements, passive interfaces, and authentication problems. Those four issues explain a large share of EIGRP troubleshooting time in real networks. Cisco’s official documentation remains the best source for exact syntax and platform-specific behavior, especially when you move beyond the basics into IOS XE address families and security options.
For CCNA-level routing work and day-to-day admin tasks, this is the right mental model: configure carefully, verify immediately, troubleshoot in layers, and optimize only after the baseline is stable. That is how you keep Cisco routing predictable in production.
CompTIA®, Cisco®, Microsoft®, AWS®, EC-Council®, ISC2®, ISACA®, and PMI® are trademarks of their respective owners.

