Selasa, 28 Februari 2017

Lab 130 - Multi Area OSPF Juniper

Wihh semangat nih belajarnya... kemarin kita sudah belajar Basic OSPF di Juniper.. hari ini kita lanjut belajar OSPF yang lebih advanced ya.. kita akan konfig Multi Area OSPF.. Oke langsung aja ya.. kita akan pake topologi berikut
Wishh.. lumayan komplek nih topologi nya.. hehe.. nantinya kita akan membuat masing-masing satu interface loopback pada seluruh router.. Perhatikan bahwa kita nanti juga perlu membuat virtual link ya antara R3 dan R4..

Oke langsung aja ya.. pertama kita harus konfig addressing nya yaa.. berikut konfigurasi addressing pada R1
[edit] root# run show configuration logical-systems R1 interfaces { em0 { unit 13 { vlan-id 13; family inet { address 13.13.13.1/24; } } } lo0 { unit 1 { family inet { address 1.1.1.1/32; } } } }
Berikut konfigurasi R2
[edit] root# run show configuration logical-systems R2 interfaces { em0 { unit 23 { vlan-id 23; family inet { address 23.23.23.2/24; } } unit 24 { vlan-id 24; family inet { address 24.24.24.2/24; } } } lo0 { unit 2 { family inet { address 2.2.2.2/32; } } } }
Berikut konfigurasi di R3
[edit] root# run show configuration logical-systems R3 interfaces { em1 { unit 13 { vlan-id 13; family inet { address 13.13.13.3/24; } } unit 23 { vlan-id 23; family inet { address 23.23.23.3/24; } } unit 34 { vlan-id 34; family inet { address 34.34.34.3/24; } } } lo0 { unit 3 { family inet { address 3.3.3.3/32; } } } }
Berikut konfigurasi di R4
[edit] root# run show configuration logical-systems R4 interfaces { em0 { unit 34 { vlan-id 34; family inet { address 34.34.34.4/24; } } unit 45 { vlan-id 45; family inet { address 45.45.45.4/24; } } } em1 { unit 24 { vlan-id 24; family inet { address 24.24.24.4/24; } } } lo0 { unit 4 { family inet { address 4.4.4.4/32; } } } }
Berikut konfigurasi di R5
[edit] root# run show configuration logical-systems R5 interfaces { em1 { unit 45 { vlan-id 45; family inet { address 45.45.45.5/24; } } } lo0 { unit 5 { family inet { address 5.5.5.5/32; } } } }
Okeee.. konfigurasi addressing sudah selesai.. lanjut kita konfigurasi OSPF nya yaaa.. berikut konfigurasi OSPF di R1
[edit] root# run show configuration logical-systems R1 protocols ospf { area 0.0.0.0 { interface em0.13; interface lo0.1 { passive; } } }
Berikut konfigurasi OSPF di R2
[edit] root# run show configuration logical-systems R2 protocols ospf { area 0.0.0.1 { interface em0.23; interface em0.24; interface lo0.2 { passive; } } }
Berikut konfigurasi OSPF di R3
[edit] root# run show configuration logical-systems R3 protocols ospf { area 0.0.0.0 { interface em1.13; } area 0.0.0.1 { interface em1.23; interface em1.34; interface lo0.3 { passive; } } }
Berikut konfigurasi OSPF di R4
[edit] root# run show configuration logical-systems R4 protocols ospf { area 0.0.0.1 { interface em0.34; interface em1.24; interface lo0.4 { passive; } } area 0.0.0.2 { interface em0.45; } }
Berikut konfigurasi OSPF di R5
[edit] root# run show configuration logical-systems R5 protocols ospf { area 0.0.0.2 { interface em1.45; interface lo0.5 { passive; } } }
Okeee.. konfigurasi OSPF sudah selesai.. untuk pengujian.. kita coba lihat tabel routing di R1 yaa
[edit] root# run show route logical-system R1 inet.0: 10 destinations, 10 routes (10 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both 1.1.1.1/32 *[Direct/0] 00:14:28 > via lo0.1 2.2.2.2/32 *[OSPF/10] 00:07:07, metric 2 > to 13.13.13.3 via em0.13 3.3.3.3/32 *[OSPF/10] 00:07:17, metric 1 > to 13.13.13.3 via em0.13 4.4.4.4/32 *[OSPF/10] 00:07:17, metric 2 > to 13.13.13.3 via em0.13 13.13.13.0/24 *[Direct/0] 00:08:15 > via em0.13 13.13.13.1/32 *[Local/0] 00:08:15 Local via em0.13 23.23.23.0/24 *[OSPF/10] 00:07:17, metric 2 > to 13.13.13.3 via em0.13 24.24.24.0/24 *[OSPF/10] 00:07:17, metric 3 > to 13.13.13.3 via em0.13 34.34.34.0/24 *[OSPF/10] 00:07:17, metric 2 > to 13.13.13.3 via em0.13 224.0.0.5/32 *[OSPF/10] 00:08:15, metric 1 MultiRecv
Oke.. R1 sudah memiliki bebara route melalui OSPF.. namun ada yang kurang nih.. R1 belum punya route untuk ke R5.. kenapa deimikian?? karena R5 berada di Area yang tidak terhubung langsung dengan area backbone.. jadu harus kita konfigurasikan virtual link yaa..

Oke sekarang kita konfigurasikan virtual link antara R3 dan R4.. berikut konfigurasi virtual link di R3
[edit] root# edit logical-systems R3 [edit logical-systems R3] root# set routing-options router-id 3.3.3.3 [edit logical-systems R3] root# edit protocols ospf area 0.0.0.0 [edit logical-systems R3 protocols ospf area 0.0.0.0] root# set virtual-link neighbor-id 4.4.4.4 transit-area 0.0.0.1 [edit logical-systems R3 protocols ospf area 0.0.0.0] root# up [edit logical-systems R3 protocols ospf] root# show area 0.0.0.0 { virtual-link neighbor-id 4.4.4.4 transit-area 0.0.0.1; interface em1.13; } area 0.0.0.1 { interface em1.23; interface em1.34; interface lo0.3 { passive; } }
Berikut konfigurasi virtual link di R4
[edit] root# edit logical-systems R4 [edit logical-systems R4] root# set routing-options router-id 4.4.4.4 [edit logical-systems R4] root# edit protocols ospf area 0.0.0.0 [edit logical-systems R4 protocols ospf area 0.0.0.0] root# set virtual-link neighbor-id 3.3.3.3 transit-area 0.0.0.1 [edit logical-systems R4 protocols ospf area 0.0.0.0] root# up [edit logical-systems R4 protocols ospf] root# show area 0.0.0.1 { interface em0.34; interface em1.24; interface lo0.4 { passive; } } area 0.0.0.2 { interface em0.45; } area 0.0.0.0 { virtual-link neighbor-id 3.3.3.3 transit-area 0.0.0.1; }
Okeee.. sudah selesai nih... kita coba cek yaa
[edit] root# run show ospf neighbor logical-system R3 Address Interface State ID Pri Dead 13.13.13.1 em1.13 Full 1.1.1.1 128 33 34.34.34.4 vl-4.4.4.4 Full 4.4.4.4 0 35 23.23.23.2 em1.23 Full 2.2.2.2 128 32 34.34.34.4 em1.34 Full 4.4.4.4 128 32
Perhatikan bahwa R3 sudah bertetangga dengan R4 melalui virtual link.. sekarang kita coba cek tabel routing di R1 yaa
[edit] root# run show route logical-system R1 inet.0: 12 destinations, 12 routes (12 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both 1.1.1.1/32 *[Direct/0] 00:22:21 > via lo0.1 2.2.2.2/32 *[OSPF/10] 00:01:42, metric 2 > to 13.13.13.3 via em0.13 3.3.3.3/32 *[OSPF/10] 00:01:42, metric 1 > to 13.13.13.3 via em0.13 4.4.4.4/32 *[OSPF/10] 00:01:42, metric 2 > to 13.13.13.3 via em0.13 5.5.5.5/32 *[OSPF/10] 00:01:42, metric 3 > to 13.13.13.3 via em0.13 13.13.13.0/24 *[Direct/0] 00:02:23 > via em0.13 13.13.13.1/32 *[Local/0] 00:02:23 Local via em0.13 23.23.23.0/24 *[OSPF/10] 00:01:42, metric 2 > to 13.13.13.3 via em0.13 24.24.24.0/24 *[OSPF/10] 00:01:42, metric 3 > to 13.13.13.3 via em0.13 34.34.34.0/24 *[OSPF/10] 00:01:42, metric 2 > to 13.13.13.3 via em0.13 45.45.45.0/24 *[OSPF/10] 00:01:42, metric 3 > to 13.13.13.3 via em0.13 224.0.0.5/32 *[OSPF/10] 00:16:08, metric 1 MultiRecv
Okeee.. sekarang tabel routing di R1 sudah lengkap yaaaa... sekarang kita coba lakukan ping dari R1 ke interface loopback seluruh router
[edit] root# run ping 2.2.2.2 logical-system R1 count 1 PING 2.2.2.2 (2.2.2.2): 56 data bytes 64 bytes from 2.2.2.2: icmp_seq=0 ttl=63 time=0.860 ms --- 2.2.2.2 ping statistics --- 1 packets transmitted, 1 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.860/0.860/0.860/0.000 ms [edit] root# run ping 3.3.3.3 logical-system R1 count 1 PING 3.3.3.3 (3.3.3.3): 56 data bytes 64 bytes from 3.3.3.3: icmp_seq=0 ttl=64 time=0.797 ms --- 3.3.3.3 ping statistics --- 1 packets transmitted, 1 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.797/0.797/0.797/0.000 ms [edit] root# run ping 4.4.4.4 logical-system R1 count 1 PING 4.4.4.4 (4.4.4.4): 56 data bytes 64 bytes from 4.4.4.4: icmp_seq=0 ttl=63 time=1.420 ms --- 4.4.4.4 ping statistics --- 1 packets transmitted, 1 packets received, 0% packet loss round-trip min/avg/max/stddev = 1.420/1.420/1.420/0.000 ms [edit] root# run ping 5.5.5.5 logical-system R1 count 1 PING 5.5.5.5 (5.5.5.5): 56 data bytes 64 bytes from 5.5.5.5: icmp_seq=0 ttl=62 time=1.696 ms --- 5.5.5.5 ping statistics --- 1 packets transmitted, 1 packets received, 0% packet loss round-trip min/avg/max/stddev = 1.696/1.696/1.696/0.000 ms
Okeee.. ping nya sukses semua yaa... oke sampai disini dulu ya.. sampai jumpa di artikel artikel selanjutnya.. semoga bermanfaat...
{ Read More }


Senin, 27 Februari 2017

Lab 129 - Basic OSPF in Juniper

Lanjut seri Juniper nya yaaa.. sekarang gilirannya OSPF nih buat kita hajar di Juniper.. langsung aja kali ya.. kita akan pake topologi ini yaa

O yaaa.. disini kita akan pake logical system ya.. masih ada yang belum tau apa itu logical system di juniper?? monggo dibaca artikel sebelumnya dulu ya tentang Logical System di Juniper

Oke.. saya akan langsung tunjuikkin konfigurasinya yaa... berikut konfigurasi untuk logical system R1
[edit] root# run show configuration logical-systems R1 interfaces { em0 { unit 12 { vlan-id 12; family inet { address 12.12.12.1/24; } } } lo0 { unit 1 { family inet { address 1.1.1.1/32; } } } }
Berikut konfigurasi logical system R2
[edit] root# run show configuration logical-systems R2 interfaces { em1 { unit 12 { vlan-id 12; family inet { address 12.12.12.2/24; } } unit 23 { vlan-id 23; family inet { address 23.23.23.2/24; } } unit 24 { vlan-id 24; family inet { address 24.24.24.2/24; } } } lo0 { unit 2 { family inet { address 2.2.2.2/32; } } } }
Berikut konfigurasi logical system R3
[edit] root# run show configuration logical-systems R3 interfaces { em0 { unit 23 { vlan-id 23; family inet { address 23.23.23.3/24; } } unit 34 { vlan-id 34; family inet { address 34.34.34.3/24; } } } lo0 { unit 3 { family inet { address 3.3.3.3/32; } } } }
Berikut konfigurasi logical system R4
[edit] root# run show configuration logical-systems R4 interfaces { em0 { unit 24 { vlan-id 24; family inet { address 24.24.24.4/24; } } } em1 { unit 34 { vlan-id 34; family inet { address 34.34.34.4/24; } } } lo0 { unit 4 { family inet { address 4.4.4.4/32; } } } }
Okeee.. konfigurasi addressing pada seluruh logical system sudah selesai.. o yaaa.. jangan lupa di commit lho ya. hehe

Okeoke langsung aja kita konfig OSPF nya ya.. berikut konfigurasi OSPF di logical system R1
[edit] root# edit logical-systems R1 protocols ospf area 0.0.0.0 [edit logical-systems R1 protocols ospf area 0.0.0.0] root# set interface em0.12 [edit logical-systems R1 protocols ospf area 0.0.0.0] root# set interface lo0.1 passive
Bingung ya baca nya?? kayaknya lebih jelas kalau saya tampilkan show nya deh..
[edit] root# run show configuration logical-systems R1 protocols ospf { area 0.0.0.0 { interface em0.12; interface lo0.1 { passive; } } }
Oke di R1 sudah selesai.. lanjut kita konfig di R2.. saya tampilkan show nya aja yaaa.. untuk perintahnya sama seperti yang di R1 kog..
[edit] root# run show configuration logical-systems R2 protocols ospf { area 0.0.0.0 { interface em1.12; interface em1.24; interface em1.23; interface lo0.2 { passive; } } }
Lanjut berikut konfigurasi di R3
[edit] root# run show configuration logical-systems R3 protocols ospf { area 0.0.0.0 { interface em0.23; interface em0.34; interface lo0.3 { passive; } } }
Terahir kita konfig OSPF di R4 yaa
[edit] root# run show configuration logical-systems R4 protocols ospf { area 0.0.0.0 { interface em0.24; interface em1.34; interface lo0.4 { passive; } } }
Nah lhooo udah semua.. cepet banget yaa.. hehehe

Untuk pengujian.. kita bisa melihat neighbor tabel dengan perintah berikut
[edit] root# run show ospf neighbor logical-system R2 Address Interface State ID Pri Dead 12.12.12.1 em1.12 Full 1.1.1.1 128 38 23.23.23.3 em1.23 Full 3.3.3.3 128 35 24.24.24.4 em1.24 Full 4.4.4.4 128 37
Oke.. di R2 sudah full semua.. R2 sudah adjacency dengan ketiga router.. kita coba lihat neighbor tabel di R4 juga yaa
[edit] root# run show ospf neighbor logical-system R4 Address Interface State ID Pri Dead 24.24.24.2 em0.24 Full 2.2.2.2 128 39 34.34.34.3 em1.34 Full 3.3.3.3 128 36
Alhamdulillah R4 juga sudah adjacency dengan R2 dan R3..

Kita juga bisa melihat tabel routing untuk melakukan pengujian.. kita coba cek tabel routing di R1 yaa
[edit] root# run show route logical-system R1 inet.0: 10 destinations, 10 routes (10 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both 1.1.1.1/32 *[Direct/0] 00:12:04 > via lo0.1 2.2.2.2/32 *[OSPF/10] 00:02:00, metric 1 > to 12.12.12.2 via em0.12 3.3.3.3/32 *[OSPF/10] 00:02:00, metric 2 > to 12.12.12.2 via em0.12 4.4.4.4/32 *[OSPF/10] 00:01:58, metric 2 > to 12.12.12.2 via em0.12 12.12.12.0/24 *[Direct/0] 00:02:50 > via em0.12 12.12.12.1/32 *[Local/0] 00:02:50 Local via em0.12 23.23.23.0/24 *[OSPF/10] 00:02:00, metric 2 > to 12.12.12.2 via em0.12 24.24.24.0/24 *[OSPF/10] 00:02:00, metric 2 > to 12.12.12.2 via em0.12 34.34.34.0/24 *[OSPF/10] 00:02:00, metric 3 > to 12.12.12.2 via em0.12 224.0.0.5/32 *[OSPF/10] 00:07:49, metric 1 MultiRecv
Oke.. R1 sudah memiliki route ke seluruh network ya... wahhh.. sukses nih OSPF nya.. hehehe

Kita coba ping deh biar lebih pasti.. hehe
[edit] root# run ping 2.2.2.2 logical-system R1 count 2 PING 2.2.2.2 (2.2.2.2): 56 data bytes 64 bytes from 2.2.2.2: icmp_seq=0 ttl=64 time=1.377 ms 64 bytes from 2.2.2.2: icmp_seq=1 ttl=64 time=0.469 ms --- 2.2.2.2 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.469/0.923/1.377/0.454 ms [edit] root# run ping 3.3.3.3 logical-system R1 count 2 PING 3.3.3.3 (3.3.3.3): 56 data bytes 64 bytes from 3.3.3.3: icmp_seq=0 ttl=63 time=2.200 ms 64 bytes from 3.3.3.3: icmp_seq=1 ttl=63 time=1.118 ms --- 3.3.3.3 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max/stddev = 1.118/1.659/2.200/0.541 ms [edit] root# run ping 4.4.4.4 logical-system R1 count 2 PING 4.4.4.4 (4.4.4.4): 56 data bytes 64 bytes from 4.4.4.4: icmp_seq=0 ttl=63 time=1.294 ms 64 bytes from 4.4.4.4: icmp_seq=1 ttl=63 time=0.467 ms --- 4.4.4.4 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.467/0.881/1.294/0.413 ms
Alhamdulillah... R1 bisa ping ke IP loopback seluruh router lain ya... oyaaaa kita coba traceroute yaa dari R1 ke ip loopback R4
[edit] root# run traceroute 4.4.4.4 logical-system R1 traceroute to 4.4.4.4 (4.4.4.4), 30 hops max, 40 byte packets 1 12.12.12.2 (12.12.12.2) 0.934 ms 0.796 ms 0.657 ms 2 4.4.4.4 (4.4.4.4) 1.013 ms 0.704 ms 0.636 ms
Oke ... R1 memilih jalur via R2 untuk menjangkau IP loopback R4.. Okeee.. karena konfigurasi OSPF nya sudah jalan.. sampai disini dulu yaa.. sampai jumpa di artikel artikel selanjutnya..
{ Read More }


Lab 128 - Static Routing Juniper

Welcome to juniper second lab!!!.. hehehe ini adalah lab kedua juniper nih.. semoga bisa istiqomah belajarnya.. Aamiin..

Pada lab ini kita akan sama2 belajar static routing di juniper yaaa.. kita akan pake topologi ini yaa

O yaaa.. disini kita akan pake logical system ya... kemarin di lab juniper pertama kita udah beljar kan tentang logical system juniper...

Pertama kita konfig logical system nya dulu yaaa
[edit] root# set interfaces em0 vlan-tagging [edit] root# set interfaces em1 vlan-tagging
Berikut konfigurasi logical system untuk R1
[edit] root# edit logical-systems R1 [edit logical-systems R1] root# set interfaces em0.12 vlan-id 12 family inet address 12.12.12.1/24 [edit logical-systems R1] root# set interfaces lo0.1 family inet address 1.1.1.1/32
Berikut konfigurasi logical system untuk R2
[edit logical-systems R1] root# top [edit] root# edit logical-systems R2 [edit logical-systems R2] root# set interfaces em1.12 vlan-id 12 family inet address 12.12.12.2/24 [edit logical-systems R2] root# set interfaces em1.23 vlan-id 23 family inet address 23.23.23.2/24 [edit logical-systems R2] root# set interfaces lo0.2 family inet address 2.2.2.2/32
Berikut konfigurasi logical system address untuk R3
[edit logical-systems R2] root# top [edit] root# edit logical-systems R3 [edit logical-systems R3] root# set interfaces em0.23 vlan-id 23 family inet address 23.23.23.3/24 [edit logical-systems R3] root# set interfaces lo0.3 family inet address 3.3.3.3/32
O yaaaa.. jangan lupa commit ya
[edit] root# commit commit complete
Okeee.. konfigurasi addressing sudah selesai pada seluruh logical system.. kita coba cek yaa
root# run show interfaces terse Interface Admin Link Proto Local Remote cbp0 up up demux0 up up dsc up up em0 up up em0.12 up up inet 12.12.12.1/24 em0.23 up up inet 23.23.23.3/24 em1 up up em1.12 up up inet 12.12.12.2/24 em1.23 up up inet 23.23.23.2/24 gre up up ipip up up irb up up lo0 up up lo0.1 up up inet 1.1.1.1 --> 0/0 lo0.2 up up inet 2.2.2.2 --> 0/0 lo0.3 up up inet 3.3.3.3 --> 0/0
Okee.. sudah sesuai..

Sekarang lanjut kita konfigurasi static routing pada seluruh logical system ya... berikut konfigurasi static routing di R1
[edit] root# set logical-systems R1 routing-options static route 2.2.2.2/32 next-hop 12.12.12.2 [edit] root# set logical-systems R1 routing-options static route 3.3.3.3/32 next-hop 12.12.12.2 [edit] root# set logical-systems R1 routing-options static route 23.23.23.0/24 next-hop 12.12.12.2
Berikut konfigurasi static routing di R2
[edit] root# set logical-systems R2 routing-options static route 1.1.1.1/32 next-hop 12.12.12.1 [edit] root# set logical-systems R2 routing-options static route 3.3.3.3/32 next-hop 23.23.23.2
Berikut konfigurasi static routing di R3
[edit] root# set logical-systems R3 routing-options static route 1.1.1.1/32 next-hop 23.23.23.2 [edit] root# set logical-systems R3 routing-options static route 2.2.2.2/32 next-hop 23.23.23.2 [edit] root# set logical-systems R3 routing-options static route 12.12.12.0/24 next-hop 23.23.23.2
Oke.. sudah selesai.. kalo mau chek bisa pake perintah ini nih
[edit] root# show logical-systems R1 routing-options static { route 2.2.2.2/32 next-hop 12.12.12.2; route 3.3.3.3/32 next-hop 12.12.12.2; } [edit] root# show logical-systems R2 routing-options static { route 1.1.1.1/32 next-hop 12.12.12.1; route 3.3.3.3/32 next-hop 23.23.23.3; } [edit] root# show logical-systems R3 routing-options static { route 1.1.1.1/32 next-hop 23.23.23.2; route 2.2.2.2/32 next-hop 23.23.23.2; }
Okeee.. sudah benar kan..

O yaaa.. jangan lupa di commit ya
[edit] root# commit commit complete
Sekarang kita coba lakukan ping dari R1 ke loopback R2 dan R3
[edit] root# run ping 2.2.2.2 logical-system R1 count 3 PING 2.2.2.2 (2.2.2.2): 56 data bytes 64 bytes from 2.2.2.2: icmp_seq=0 ttl=64 time=1.569 ms 64 bytes from 2.2.2.2: icmp_seq=1 ttl=64 time=0.567 ms 64 bytes from 2.2.2.2: icmp_seq=2 ttl=64 time=0.671 ms --- 2.2.2.2 ping statistics --- 3 packets transmitted, 3 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.567/0.936/1.569/0.450 ms [edit] root# run ping 3.3.3.3 logical-system R1 count 3 PING 3.3.3.3 (3.3.3.3): 56 data bytes 64 bytes from 3.3.3.3: icmp_seq=0 ttl=63 time=1.630 ms 64 bytes from 3.3.3.3: icmp_seq=1 ttl=63 time=0.897 ms 64 bytes from 3.3.3.3: icmp_seq=2 ttl=63 time=0.974 ms --- 3.3.3.3 ping statistics --- 3 packets transmitted, 3 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.897/1.167/1.630/0.329 ms
Mau coba traceroute??
[edit] root# run traceroute 2.2.2.2 logical-system R1 traceroute to 2.2.2.2 (2.2.2.2), 30 hops max, 40 byte packets 1 2.2.2.2 (2.2.2.2) 0.536 ms 0.427 ms 0.267 ms [edit] root# run traceroute 3.3.3.3 logical-system R1 traceroute to 3.3.3.3 (3.3.3.3), 30 hops max, 40 byte packets 1 12.12.12.2 (12.12.12.2) 0.653 ms 0.461 ms 0.486 ms 2 3.3.3.3 (3.3.3.3) 0.989 ms 0.779 ms 1.319 ms
Okeeee... berhasil yaa kita setting static routingnya di juniper..

Sampai disini dulu yaaa.. sampai jumpa di artikel artikel selanjutnya... semoga bermanfaat
{ Read More }


Sabtu, 25 Februari 2017

Lab 127 - Logical System in Juniper

Ceritanya ahir2 ini lagi galau.. pengen belajar sesuatu yang baru.. hehe.. Ahirnya ketemu nih sama juniper.. kenalan dikit sama juniper, eh kayaknya kog pengen lebih deket.. hehehe...

Ya begitulah.. ceritanya pengen belajar sesuatu hal yang baru,, dan saya rasa Juniper merupakan product yang unik.. konfigurasinya jauh beda dengan mikrotik ataupun cisco.. jadi yaaaaa... saya merasa tertarik dan tertantang untuk mempelajari yang satu ini.. hehe

Artikel pertama tentang Juniper ini saya akan membahas tentang logical system.. Logical system juniper ini asyik banget.. kita bisa menjalankan berapapun router dalam sebuah router... milik virtualisasi lah..

Kayak gini nih ilustrasinya logical system juniper
Yang kiri itu system biasa.. kalau kita mau praktik pake 6 router. berarti kita harus punya 6 router juga.. nah yang kanan tuh pake logical system.. untuk praktik 6 router,, kita cukup menggunakan 1 router saja..

bingung yaa??? hahaha oke dah daripada tambah bingung langsung kita ngelab aja..
Perhatikan gambar diatas,, dengan satu rotuer saja.. saya bisa praktik mengkonfigurasi 3 router.. yaitu R1 R2 dan R3.. asumsinya disini router asli saya (Juniper) hanya memiliki dua interface, yaitu em0 dan em1.

Nah kedua interface itu bisa digunakan oleh seluruh logical rotuer (R1, R2, ataupun R3).... yang penting adalah sebuah interface nda boleh digunakan dalam vlan yang sama... sebagai contoh link antara R1 dan R2 kan make vlan 12.. nah di kedua router tersebut ga bisa kalo hanya pake satu interface yang sama.. harus pake dua interface yang beda.. pada topologi diatas kita make em0 pada R1 dan em1 pada R2.. tapi sebuah interface bisa dipake rotuer lain.. asal dengan vlan id yang beda yaaa...

Oke sekarang kita konfig yaaa..
root@% cli root> configure [edit] root#
Untuk login pertama kali ke juniper, gunakan user root,, nanti akan diarahkan ke prompt root@% seperti diatas..promt ini menunjukkan bahwa kita berada di free bsd mode.. selanjutnya ketikkan cli untuk masuk ke juniper mode.. kemudian ketikkan configure untuk masuk ke config mode.. disini kita bisa melakukan konfigurasi pada juniper..

Selanjutnya lakukan konfigurasi berikut
root# set system root-authentication plain-text-password New password: Retype new password:
Konfigurasi diatas digunakan untuk set password user root.. kalau kita tidak melakukan langkah diatas.. nanti kita ga bisa commit

Oke.. sekarang kita konfigurasikan vlan tagging pada interface em0 dan em1
root# set interfaces em0 vlan-tagging [edit] root# set interfaces em1 vlan-tagging [edit] root#
Oke lanjut.. kita lakukan konfigurasi logical system R1.. sesuaikan dengan topologi yaaa untuk interface dan ip address nya.. o yaa.. untuk ip address kita akan menggunakan standard IDN yaa
root# edit logical-systems R1 [edit logical-systems R1] root# set interfaces em0.12 vlan-id 12 family inet address 12.12.12.1/24 [edit logical-systems R1] root# set interfaces em0.13 vlan-id 13 family inet address 13.13.13.1/24 [edit logical-systems R1] root# commit commit complete
Setelah mengetikkan perintah pertama diatas.. kita berganti direktori lah enak nya kalo nyebut.. hehe.. di direktori logical-system R1 kita konfigurasikan interface em0.12 dan em0.13..

Untuk melihat konfigurasi yang telah kita lakukan.. kita bisa menggunakan perintah berikut
[edit logical-systems R1] root# show interfaces { em0 { unit 12 { vlan-id 12; family inet { address 12.12.12.1/24; } } unit 13 { vlan-id 13; family inet { address 13.13.13.1/24; } } } }
Perintah diatas digunakan untuk melihat konfigurasi pada logical-system R1 aja.. coba lihat tuh sekarang posisi kita ada di logical-system R1..

Oke.. sudah sesuai dengan yang kita konfigurasikan yaaa... kalau pengen lihat hasilnya,, kita bisa pake perintah berikut
root# run show interfaces terse Interface Admin Link Proto Local Remote cbp0 up up demux0 up up dsc up up em0 up up em0.12 up up inet 12.12.12.1/24 em0.13 up up inet 13.13.13.1/24 ...... ...........
Oke.. ip address 12.12.12.1/24 dan 13.13.13.1/24 sudah aktif.. perhatikan bahwa interface nya juga sesuai dengan yang kita konfigurasikan..

Oke konfigurasi logical system R1 sudah selesai.. lanjut kita konfigurasi logical system R2 yaa
[edit logical-systems R1] root# top [edit] root# edit logical-systems R2 [edit logical-systems R2] root# set interfaces em1.12 vlan-id 12 family inet address 12.12.12.2/24 [edit logical-systems R2] root# set interfaces em1.23 vlan-id 23 family inet address 23.23.23.2/24 [edit logical-systems R2] root# commit commit complete
Perintah top itu digunakan untuk kembali ke hirarki tertinggi.. yaitu di edit

Oke.. sebelum lanjut konfigurasi logical system R3.. kita coba ping dulu ya dari R1 ke R2..
root# run ping 12.12.12.2 logical-system R1 count 3 PING 12.12.12.2 (12.12.12.2): 56 data bytes 64 bytes from 12.12.12.2: icmp_seq=0 ttl=64 time=1.194 ms 64 bytes from 12.12.12.2: icmp_seq=1 ttl=64 time=0.492 ms 64 bytes from 12.12.12.2: icmp_seq=2 ttl=64 time=0.736 ms --- 12.12.12.2 ping statistics --- 3 packets transmitted, 3 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.492/0.807/1.194/0.291 ms [edit logical-systems R2] root#
Oke.. sudah berhasil yaa.. mantabbb lahhh

Sekarang kita lakukan konfigurasi logical system R3
[edit logical-systems R2] root# top [edit] root# edit logical-systems R3 [edit logical-systems R3] root# set interfaces em1.13 vlan-id 13 family inet address 13.13.13.3/24 [edit logical-systems R3] root# set interfaces em0.23 vlan-id 23 family inet address 23.23.23.3/24 [edit logical-systems R3] root# commit commit complete
Sepertinya konfignya sudah selesai nih.. coba kita ping dari R3 ke R1 dan R2
root# run ping 13.13.13.1 logical-system R3 count 3 PING 13.13.13.1 (13.13.13.1): 56 data bytes 64 bytes from 13.13.13.1: icmp_seq=0 ttl=64 time=0.690 ms 64 bytes from 13.13.13.1: icmp_seq=1 ttl=64 time=0.465 ms 64 bytes from 13.13.13.1: icmp_seq=2 ttl=64 time=0.549 ms --- 13.13.13.1 ping statistics --- 3 packets transmitted, 3 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.465/0.568/0.690/0.093 ms [edit logical-systems R3] root# run ping 23.23.23.2 logical-system R3 count 3 PING 23.23.23.2 (23.23.23.2): 56 data bytes 64 bytes from 23.23.23.2: icmp_seq=0 ttl=64 time=5.917 ms 64 bytes from 23.23.23.2: icmp_seq=1 ttl=64 time=0.744 ms 64 bytes from 23.23.23.2: icmp_seq=2 ttl=64 time=0.570 ms --- 23.23.23.2 ping statistics --- 3 packets transmitted, 3 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.570/2.410/5.917/2.481 ms
Okeeee.. sudah jalan semua yaaaa.. gimana gimana?? asyik kan?? dengan satu router aja kita bisa praktik seolah-olah punya 3 router.. hehehe bisa kaya nih kita bisa gandain router.. hehe

Oke sampai disini dulu yaaa.. semoga bermanfaat

{ Read More }


Jumat, 24 Februari 2017

Lab 126 - BGP Local AS No Prepend Replace AS

Pada lab sebelumnya kita telah belajar tentang BGP Local AS No Prepend.. nah sekarang di lab ini kita akan bahas materi tentang BGP Local AS No Prepend Replace AS.. Yuppp.. lab ini merupakan solusi untuk masalah terahir yang saya tunjukkan di lab BGP Local AS No Prepend..

Mungkin ada yang belum tau nih masalahnya.. kalau belum tau saya sarankan baca dulu deh lab sebelumnya.. Sekedar mengingatkan ya.. di lab sebelumnya kita punya topologi kayak gini..

Nah tapi masalahnya di R1 ganti AS dari 1 jadi 100.. jadi kita perlu mengkonfigurasikan BGP Local AS agar di R2 tidak perlu mengubah konfigurasi.. tapi ada masalah tuh.. di R2, route untuk menuju 1.1.1.1 AS Pathnya jadi doble, yaitu 1 (AS lama) dan juga 100 (AS baru).. kayak gini nih..
R2(config-router)#do sh ip bgp BGP table version is 16, local router ID is 2.2.2.2 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, x best-external, a additional-path, c RIB-compressed, Origin codes: i - IGP, e - EGP, ? - incomplete RPKI validation codes: V valid, I invalid, N Not found Network Next Hop Metric LocPrf Weight Path *> 1.1.1.1/32 12.12.12.1 0 0 1 100 i *> 2.2.2.2/32 0.0.0.0 0 32768 i *> 3.3.3.3/32 23.23.23.3 0 0 3 i
nah lhooo ada masalah juga tuh.. masak R2 kalo pengen ke 1.1.1.1 AS Path nya dobel gitu.. 1 dan 100.. bukannya AS 1 itu AS nya R1 yang lama dan AS 100 itu AS nya R1 yang baru.. kog bisa kedua AS tersebut muncul di AS Path ya.. hehehe

Mau lihat juga di R3?? kita coba lihat yaa
R3(config-router)#do sh ip bgp BGP table version is 20, local router ID is 3.3.3.3 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, x best-external, a additional-path, c RIB-compressed, Origin codes: i - IGP, e - EGP, ? - incomplete RPKI validation codes: V valid, I invalid, N Not found Network Next Hop Metric LocPrf Weight Path *> 1.1.1.1/32 23.23.23.2 0 2 1 100 i *> 2.2.2.2/32 23.23.23.2 0 0 2 i *> 3.3.3.3/32 0.0.0.0 0 32768 i
Hahahaha ternyata di R3 juga bermasalah tuh..

Untuk mengatasi masalah tersebut.. kita bisa mengkonfigurasikan BGP Local AS no prepend replace as... kyak gini nih konfig nya..
R1(config)#router bgp 100 R1(config-router)#neighbor 12.12.12.2 local-as 1 no-prepend replace-as
Sekarang kita coba cek lagi di R2 yaa
R2(config-router)#do sh ip bgp BGP table version is 18, local router ID is 2.2.2.2 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, x best-external, a additional-path, c RIB-compressed, Origin codes: i - IGP, e - EGP, ? - incomplete RPKI validation codes: V valid, I invalid, N Not found Network Next Hop Metric LocPrf Weight Path *> 1.1.1.1/32 12.12.12.1 0 0 1 i *> 2.2.2.2/32 0.0.0.0 0 32768 i *> 3.3.3.3/32 23.23.23.3 0 0 3 i
Tuh.. udah bener kan.. sekarang AS Pathnya sudah bener tuh.. gak dua duanya di pake (1 dan 100).. yang kepake jadinya tinggal yang local as aja (yang AS 1).. gimana nih kalau di R3?? mau lihat??
R3(config-router)#do sh ip bgp BGP table version is 18, local router ID is 3.3.3.3 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, x best-external, a additional-path, c RIB-compressed, Origin codes: i - IGP, e - EGP, ? - incomplete RPKI validation codes: V valid, I invalid, N Not found Network Next Hop Metric LocPrf Weight Path *> 1.1.1.1/32 23.23.23.2 0 2 1 i *> 2.2.2.2/32 23.23.23.2 0 0 2 i *> 3.3.3.3/32 0.0.0.0 0 32768 i
tuh.. udah bener juga yaaa.. oke udah ngerti kan?? sip2.. sampai disini dulu yaa.. semoga bermanfaat..
{ Read More }


Lab 125 - BGP Local AS No Prepend

Wahhhhh masih lanjut terus nih lab BGP nya.. hehehe.. kali ini kita akan belajar tentang BGP local AS ya.. sebenarnya dulu sudah pernah saya bahas sih tentang apa itu BGP Local AS.. tapi pembahasan pada lab yang dulu masih belum mendetail.. masih banyak fitur-fitur BGP Local AS yang belum saya jelaskan.. jadi sekarang saya akan membahas tentang BGP Local AS kembali..

Ada yang masih ingat apa itu BGP Local AS?? Lupa?? oke ndak masalah.. kita akan bahas dari dasar deh.. pertama kita buat dulu topologi seperti ini yaaa

Asumsinya kita udah konfig ip address standard IDN ya.. sekarang tinggal kita konfig BGP nya..
R1(config-router)#do sh run | s r b router bgp 1 bgp log-neighbor-changes network 1.1.1.1 mask 255.255.255.255 neighbor 12.12.12.2 remote-as 2
R2(config-router)#do sh run | s r b router bgp 2 bgp log-neighbor-changes network 2.2.2.2 mask 255.255.255.255 neighbor 12.12.12.1 remote-as 1 neighbor 23.23.23.3 remote-as 3
R3(config-router)#do sh run | s r b router bgp 3 bgp log-neighbor-changes network 3.3.3.3 mask 255.255.255.255 neighbor 23.23.23.2 remote-as 2
Sekarang kita coba lihat hasilnya di seluruh router..
R1(config-router)#do sh ip bgp BGP table version is 4, local router ID is 1.1.1.1 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, x best-external, a additional-path, c RIB-compressed, Origin codes: i - IGP, e - EGP, ? - incomplete RPKI validation codes: V valid, I invalid, N Not found Network Next Hop Metric LocPrf Weight Path *> 1.1.1.1/32 0.0.0.0 0 32768 i *> 2.2.2.2/32 12.12.12.2 0 0 2 i *> 3.3.3.3/32 12.12.12.2 0 2 3 i
R2(config-router)#do sh ip bgp BGP table version is 12, local router ID is 2.2.2.2 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, x best-external, a additional-path, c RIB-compressed, Origin codes: i - IGP, e - EGP, ? - incomplete RPKI validation codes: V valid, I invalid, N Not found Network Next Hop Metric LocPrf Weight Path *> 1.1.1.1/32 12.12.12.1 0 0 1 i *> 2.2.2.2/32 0.0.0.0 0 32768 i *> 3.3.3.3/32 23.23.23.3 0 0 3 i
R3(config-router)#do sh ip bgp BGP table version is 12, local router ID is 3.3.3.3 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, x best-external, a additional-path, c RIB-compressed, Origin codes: i - IGP, e - EGP, ? - incomplete RPKI validation codes: V valid, I invalid, N Not found Network Next Hop Metric LocPrf Weight Path *> 1.1.1.1/32 23.23.23.2 0 2 1 i *> 2.2.2.2/32 23.23.23.2 0 0 2 i *> 3.3.3.3/32 0.0.0.0 0 32768 i
Okeee normal yaa... tabel routing di seluruh router sudah lengkap yaaa...

Sekarang tiba2 ada sebuah masalah nih di kantor A (AS 1).. Kantor A ternyata berganti AS dari 1 ke 100.. oke kita tinggal ganti AS nya di R1 yaa
R1(config)#no router bgp 1 R1(config)#router bgp 100 R1(config-router)#neigh 12.12.12.2 remote-as 2 R1(config-router)#net 1.1.1.1 mask 255.255.255.255
Kira2 giaman hasilnya?? tentu saja R1 dan R2 tidak akan adjacency... kenapa?? kan di R2 kita konfignya neighbor 12.12.12.1 remote-as 1 bukan remote-as 100.. sedangkan di R1 AS nya sudah berganti menjadi 100... nah lhoo.. gimana nih?? masak iya saat kantor A berganti AS,kita harus menyuruh kantor lain (AS Lain) mengganti konfigurasi juga?? sepertinya ndak mungkin deh..

Jadi solusinya, kita bisa menggunakan local AS.. gini nih konfig nya..
R1(config)#router bgp 100 R1(config-router)#neighbor 12.12.12.2 local-as 1
nah setelah konfig bgp local-as.. baru deh nda error lagi..
R1(config-router)#do sh ip bgp summ BGP router identifier 1.1.1.1, local AS number 100 BGP table version is 4, main routing table version 4 3 network entries using 444 bytes of memory 3 path entries using 192 bytes of memory 3/3 BGP path/bestpath attribute entries using 408 bytes of memory 2 BGP AS-PATH entries using 48 bytes of memory 0 BGP route-map cache entries using 0 bytes of memory 0 BGP filter-list cache entries using 0 bytes of memory BGP using 1092 total bytes of memory BGP activity 3/0 prefixes, 3/0 paths, scan interval 60 secs Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd 12.12.12.2 4 2 10 6 4 0 0 00:01:53 2
Tuh.. udah adjacency kan antara R1 dan R2.. R1 juga sudah menerima 2 prefix dari R2.. sekarang kita coba cek tabel routing BGP di R1
R1(config-router)#do sh ip bgp BGP table version is 4, local router ID is 1.1.1.1 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, x best-external, a additional-path, c RIB-compressed, Origin codes: i - IGP, e - EGP, ? - incomplete RPKI validation codes: V valid, I invalid, N Not found Network Next Hop Metric LocPrf Weight Path *> 1.1.1.1/32 0.0.0.0 0 32768 i *> 2.2.2.2/32 12.12.12.2 0 0 1 2 i *> 3.3.3.3/32 12.12.12.2 0 1 2 3 i
nah lhooo.. tau gak kalau sebenarnya disini ada masalah?? coba deh bandingin dengan tabel routing BGP di R1 saat AS nya masih 1..
R1(config-router)#do sh ip bgp BGP table version is 4, local router ID is 1.1.1.1 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, x best-external, a additional-path, c RIB-compressed, Origin codes: i - IGP, e - EGP, ? - incomplete RPKI validation codes: V valid, I invalid, N Not found Network Next Hop Metric LocPrf Weight Path *> 1.1.1.1/32 0.0.0.0 0 32768 i *> 2.2.2.2/32 12.12.12.2 0 0 2 i *> 3.3.3.3/32 12.12.12.2 0 2 3 i
Oke.. ngerti kan bedanya?? pada tabel routing BGP R1 setelah berganti AS.. terdapat AS 1 (AS nya sendiri) pada AS path.. nah untuk mengatasi masalah ini.. kita bisa menggunakan Local AS No Prepend seperti ini ..
R1(config)#router bgp 100 R1(config-router)#nei 12.12.12.2 local-as 1 no-prepend
Kita coba cek hasilnya di R1 yaaa
R1(config-router)#do sh ip bgp BGP table version is 8, local router ID is 1.1.1.1 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, x best-external, a additional-path, c RIB-compressed, Origin codes: i - IGP, e - EGP, ? - incomplete RPKI validation codes: V valid, I invalid, N Not found Network Next Hop Metric LocPrf Weight Path *> 1.1.1.1/32 0.0.0.0 0 32768 i *> 2.2.2.2/32 12.12.12.2 0 0 2 i *> 3.3.3.3/32 12.12.12.2 0 2 3 i
Oke sudah bener kan.. sekarang AS 1 sudah gak ada di AS Path..

Oh yaa..kita baru cek tabel routing BGP di R1.. kita belum cek di R2 nih.. coba kita cek yaa.. kira2 ada masalah juga nda ya?? hehe penuh masalah nih kayaknya BGP nya.. hehe
R2(config-router)#do sh ip bgp BGP table version is 16, local router ID is 2.2.2.2 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, x best-external, a additional-path, c RIB-compressed, Origin codes: i - IGP, e - EGP, ? - incomplete RPKI validation codes: V valid, I invalid, N Not found Network Next Hop Metric LocPrf Weight Path *> 1.1.1.1/32 12.12.12.1 0 0 1 100 i *> 2.2.2.2/32 0.0.0.0 0 32768 i *> 3.3.3.3/32 23.23.23.3 0 0 3 i
nah lhooo ada masalah juga tuh.. masak R2 kalo pengen ke 1.1.1.1 AS Path nya dobel gitu.. 1 dan 100.. bukannya AS 1 itu AS nya R1 yang lama dan AS 100 itu AS nya R1 yang baru.. kog bisa kedua AS tersebut muncul di AS Path ya.. hehehe

Untuk mengatasi masalah ini kita bisa mengkonfigurasikan BGP Local AS No Prepend Replace AS.. materi tersebut akan saya bahas pada lab selanjutnya, lab 126, In Syaa Allah.. Untuk lab ini sampai disini dulu ya.. hehe.. semoga bermanfaat...
{ Read More }


Lab 124 - BGP Aggregation Advertise Map

Lanjtut yaaa belajar BGP nya.. sekarang kita akan belajar fitur advertise map pada aggregation BGP.. langsung lab aja ya.. nanti teorinya saya jelaskan sambil ngelab nya.. Berikut topologi yang akan kita gunakan pada lab ini


Pertama kita konfig BGP nya dulu ya.. oya diasumsikan ip address sudah di konfig standard idn ya..
R1(config)#do sh run | s r b router bgp 12 bgp log-neighbor-changes network 1.1.0.0 mask 255.255.255.0 network 1.1.1.0 mask 255.255.255.0 network 1.1.2.0 mask 255.255.255.0 network 1.1.3.0 mask 255.255.255.0 neighbor 13.13.13.3 remote-as 3 neighbor 12.12.12.2 remote-as 12
R2(config-router)#do sh run | s r b router bgp 12 bgp log-neighbor-changes network 1.1.4.0 mask 255.255.255.0 network 1.1.5.0 mask 255.255.255.0 network 1.1.6.0 mask 255.255.255.0 network 1.1.7.0 mask 255.255.255.0 neighbor 23.23.23.3 remote-as 3 neighbor 12.12.12.1 remote-as 12
R3(config-router)#do sh run | s r b router bgp 3 bgp log-neighbor-changes neighbor 13.13.13.1 remote-as 12 neighbor 23.23.23.2 remote-as 12 neighbor 34.34.34.4 remote-as 4
R4(config-router)#do sh run | s r b router bgp 4 bgp log-neighbor-changes neighbor 34.34.34.3 remote-as 3
Kita lihat hasilnya di R3 yaa
R4(config-router)#do sh ip bgp BGP table version is 27, local router ID is 34.34.34.4 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, x best-external, a additional-path, c RIB-compressed, Origin codes: i - IGP, e - EGP, ? - incomplete RPKI validation codes: V valid, I invalid, N Not found Network Next Hop Metric LocPrf Weight Path *> 1.1.0.0/24 34.34.34.3 0 3 12 i *> 1.1.1.0/24 34.34.34.3 0 3 12 i *> 1.1.2.0/24 34.34.34.3 0 3 12 i *> 1.1.3.0/24 34.34.34.3 0 3 12 i *> 1.1.4.0/24 34.34.34.3 0 3 12 i *> 1.1.5.0/24 34.34.34.3 0 3 12 i *> 1.1.6.0/24 34.34.34.3 0 3 12 i *> 1.1.7.0/24 34.34.34.3 0 3 12 i
Oke R3 sudah punya informasi prefix yang lengkap dalam BGP..

Sekarang kita lakukan summarization di R3 yaa
R3(config)#router bgp 3 R3(config-router)#aggregate-address 1.1.0.0 255.255.248.0 as-set summary-only
Kita coba lihat hasilnya di R4..
R4(config-router)#do sh ip bgp BGP table version is 38, local router ID is 34.34.34.4 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, x best-external, a additional-path, c RIB-compressed, Origin codes: i - IGP, e - EGP, ? - incomplete RPKI validation codes: V valid, I invalid, N Not found Network Next Hop Metric LocPrf Weight Path *> 1.1.0.0/21 34.34.34.3 0 0 3 12 i
Oke hasilnya normal ya...

Sekarang ada sedikit masalah nih.. R1 akan mengkonfigurasikan prefix 1.1.0.0/24 dengan community no-advertise
R1(config)#access-list 1 permit 1.1.0.0 0.0.0.255 R1(config)#route-map set-com R1(config-route-map)#match ip address 1 R1(config-route-map)#set community no-advertise R1(config-route-map)#router bgp 12 R1(config-router)#nei 13.13.13.3 route-map set-com out R1(config-router)#nei 13.13.13.3 send-community R1(config-router)#do cle ip bgp * soft
Sebenarnya ini masalah sepele.. tapi akibatnya bisa besar lho.. kita coba lihat R3 yaa
R4(config-router)#do sh ip bgp R4(config-router)#
Tuh kannn.... di R4 jadi hilang prefix hasil summary nya.. kenapa demikian?? karena R3 melakukan summary pada network 1.1.0.0/21,, dan salah satu prefix nya (1.1.0.0/24) memiliki community no-advertise.. jadi akibatnya semua prefix akan terpengaruhi dan tidak akan diadvertise kemanapun...

Untuk mengatasi masalah ini.. kita bisa melakukan summary pada beberapa prefix saja menggunakan advertisemap pada R3 seperti berikut
R3(config)#ip prefix-list advertise-map deny 1.1.0.0/24 R3(config)#ip prefix-list advertise-map permit 1.1.0.0/21 ge 24 le 24 R3(config)#route-map to-aggregate R3(config-route-map)#match ip address prefix-list advertise-map R3(config-route-map)#router bgp 3 R3(config-router)# aggregate-address 1.1.0.0 255.255.248.0 as-set summary-only advertise-map to-aggregate
Perhatikan bahwa kita membuat prefix list.. pertama mendeny network 1.1.0.0/24.. artinya nanti prefix 1.1.0.0/24 tidak akan diikutkan dalam summarization..

Kita coba cek hasilnya di R4 yaa
R4(config-router)#do sh ip bgp BGP table version is 42, local router ID is 34.34.34.4 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, x best-external, a additional-path, c RIB-compressed, Origin codes: i - IGP, e - EGP, ? - incomplete RPKI validation codes: V valid, I invalid, N Not found Network Next Hop Metric LocPrf Weight Path *> 1.1.0.0/21 34.34.34.3 0 0 3 12 i
Okeee sudah berhasil kan..

Oke sampai disini dulu ya.. semoga bermanfaat..
{ Read More }


Lab 123 - BGP Aggregation Attribute MAP

Wihh banyak banget nih fitur-fitur nya BGP.. bahas BGP ga habis2 nih.. hehe.. kali ini kita akan belajar tentang attribute map pada BGP.. makanan apa lagi nih attribute map??? seperti biasa yaa... kita langsung ngelab aja.. nanti stelah ngelab tmen2 juga tau sendiri apa itu attribute map.. kelamaan kalau bahas teori.. hehe

Okeoke kita akan pake topologi ini yaa

Pertama kita konfig BGP nya dulu ya.. asumsinya kita udah konfig ip address standard IDN yaa.. berikut konfig BGP nya..
R1 access-list 1 permit 1.1.0.0 0.0.0.255 access-list 1 permit 1.1.1.0 0.0.0.255 access-list 1 permit 1.1.2.0 0.0.0.255 access-list 1 permit 1.1.3.0 0.0.0.255 ! route-map loopback permit 10 match ip address 1 ! router bgp 1 bgp log-neighbor-changes redistribute connected route-map loopback neighbor 12.12.12.2 remote-as 2
R2(config-router)#do sh run | s r b router bgp 2 bgp log-neighbor-changes neighbor 12.12.12.1 remote-as 1 neighbor 23.23.23.3 remote-as 3
R3(config-router)#do sh run | s r b router bgp 3 bgp log-neighbor-changes neighbor 23.23.23.2 remote-as 2
Sekarang kita lihat hasilnya yaa
R3(config-router)#do sh ip bgp BGP table version is 5, local router ID is 23.23.23.3 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, x best-external, a additional-path, c RIB-compressed, Origin codes: i - IGP, e - EGP, ? - incomplete RPKI validation codes: V valid, I invalid, N Not found Network Next Hop Metric LocPrf Weight Path *> 1.1.0.0/24 23.23.23.2 0 2 1 ? *> 1.1.1.0/24 23.23.23.2 0 2 1 ? *> 1.1.2.0/24 23.23.23.2 0 2 1 ? *> 1.1.3.0/24 23.23.23.2 0 2 1 ?
Oke masih normal yaa... sekarang kita akan mengkonfigurasikan summarization dengan aggregation di R2
R2(config)#router bgp 2 R2(config-router)#aggregate-address 1.1.0.0 255.255.252.0 summary-only as-set R2(config-router)#do cle ip bgp * soft
Masih ada yang belum tau tentang perintah as-set diatas?? kalo belum.. silahkan baca lab sebelumnya disini yaa..

Kita lihat hasilnya di R3
R3(config-router)#do sh ip bg BGP table version is 10, local router ID is 23.23.23.3 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, x best-external, a additional-path, c RIB-compressed, Origin codes: i - IGP, e - EGP, ? - incomplete RPKI validation codes: V valid, I invalid, N Not found Network Next Hop Metric LocPrf Weight Path *> 1.1.0.0/22 23.23.23.2 0 0 2 1 ?
Oke.. di R3 sudah tersummary ya.. sekarang kita mau konfig attribute map nih.. attribute map ini bisa kita gunakan untuk memodifikasi attribute dari prefix yang di aggregate menggunakan as-set..

Pada contoh diatas, origin dari prefix yang kita aggregate di R2 adalah incomplate.. nah dengan menggunakan attribute map ini kita bisa memodifikasi origin nya menjadi IGP.. kita coba yaa
R2(config)#route-map manipulate-origin R2(config-route-map)#set origin igp R2(config-route-map)#exit R2(config)#router bgp 2 R2(config-router)# aggregate-address 1.1.0.0 255.255.252.0 as-set summary-only attribute-map manipulate-origin
perhatikan bahwa kita membuat route-map di R2, namun tidak ada parameter match. kalau seperti ini artinya untuk semuanya..

sekarang kita coba lihat hasilnya lagi di R3 yaa
R3(config-router)#do sh ip bgp BGP table version is 11, local router ID is 23.23.23.3 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, x best-external, a additional-path, c RIB-compressed, Origin codes: i - IGP, e - EGP, ? - incomplete RPKI validation codes: V valid, I invalid, N Not found Network Next Hop Metric LocPrf Weight Path *> 1.1.0.0/22 23.23.23.2 0 0 2 1 i
Nah perhatikan sekarang origin nya sudah berganti menjadi IGP...

Sekarang kita buat contoh kasus lain.. misal kita mengkonfigurasikan community no-advertise pada R1..
R1(config)#ip prefix-list prefix-24 permit 1.1.0.0/22 ge 24 le 24 R1(config)#route-map com-no-advertise R1(config-route-map)#match ip address prefix-list prefix-24 R1(config-route-map)#set community no-advertise R1(config-route-map)#exit R1(config)#router bgp 1 R1(config-router)#nei 12.12.12.2 route-map com-no-advertise out R1(config-router)#nei 12.12.12.2 send-community
Kita lihat hasilnya di R2
R2(config)#do sh ip bgp 1.1.0.0 BGP routing table entry for 1.1.0.0/24, version 12 Paths: (1 available, best #1, table default, not advertised to any peer, Advertisements suppressed by an aggregate.) Not advertised to any peer Refresh Epoch 1 1 12.12.12.1 from 12.12.12.1 (1.1.3.1) Origin incomplete, metric 0, localpref 100, valid, external, best Community: no-advertise
Perhatikan bahwa community nya no-advertise, jadi prefix ini tidak akan diadvertise kemanapun.. alhasil R3 pun tidak akan punya informasi tentang prefix ini
R3(config-router)#do sh ip bgp R3(config-router)#
Teruss bagaimana dong??? tenang... kita bisa manipulasi prefix ini menggunakan attribute map pada R2...
R2(config)#route-map remove-community R2(config-route-map)#set community none R2(config-route-map)#exit R2(config)#router bgp 2 R2(config-router)#aggregate-address 1.1.0.0 255.255.252.0 as-set summary-only attribute-map remove-community R2(config-router)#do cle ip bgp * soft
Sekarang kita coba lihat lagi di R2
R2(config-router)#do sh ip bgp 1.1.0.0 BGP routing table entry for 1.1.0.0/24, version 12 Paths: (1 available, best #1, table default, not advertised to any peer,
Advertisements suppressed by an aggregate.) Not advertised to any peer Refresh Epoch 2 1 12.12.12.1 from 12.12.12.1 (1.1.3.1) Origin incomplete, metric 0, localpref 100, valid, external, best Community: no-advertise
Perhatikan bahwa keterangan di R2 masih tetap tidak diadvertise kemanapun,,, karena community nya no-advertise.. tapi coba kita lihat di R3..
R3(config-router)#do sh ip bgp BGP table version is 13, local router ID is 23.23.23.3 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, x best-external, a additional-path, c RIB-compressed, Origin codes: i - IGP, e - EGP, ? - incomplete RPKI validation codes: V valid, I invalid, N Not found Network Next Hop Metric LocPrf Weight Path *> 1.1.0.0/22 23.23.23.2 0 0 2 1 ?
Perhatikan bahwa R3 sudah punya informasi tentang prefix 1.1.0.0/22... Oke kira2 bisa dimengerti ya?? intinya attribute map BGP itu fungsinya untuk menghilangkan atau memodifikasi attribute pada prefix yang diaggregate...
{ Read More }


Lab 122 - BGP Aggregation AS-Set

Masih lanjut belajar BGP yaaa.. lab lab sebelumnya kita sudah membahas tentang summarization.. nah lab ini masih ada hubungannya nih dengan summarization..

Saya bingung nih kalau mau jelasin teorinya.. mending langsung ngelab aja ya.. nanti tmen2 juga paham sendiri kalu udah selesai lab nya.. hehe.. kita pake topologi ini yaa

Pertama kita konfigurasikan BGP yang normal-normal aja dulu ya.. asumsinya kita udah konfigurasi IP address standard IDN yaa
R1(config-router)#do sh run | s r b router bgp 1 bgp log-neighbor-changes network 1.1.0.1 mask 255.255.255.255 network 1.1.1.1 mask 255.255.255.255 network 1.1.2.1 mask 255.255.255.255 network 1.1.3.1 mask 255.255.255.255 neighbor 12.12.12.2 remote-as 2
R2(config-router)#do sh run | s r b router bgp 2 bgp log-neighbor-changes neighbor 12.12.12.1 remote-as 1 neighbor 23.23.23.3 remote-as 3
R3(config-router)#do sh run | s r b router bgp 3 bgp log-neighbor-changes neighbor 23.23.23.2 remote-as 2
Oke.. kita lihat hasilnya yaa
R2(config-router)#do sh ip bgp BGP table version is 25, local router ID is 23.23.23.2 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, x best-external, a additional-path, c RIB-compressed, Origin codes: i - IGP, e - EGP, ? - incomplete RPKI validation codes: V valid, I invalid, N Not found Network Next Hop Metric LocPrf Weight Path *> 1.1.0.1/32 12.12.12.1 0 0 1 i *> 1.1.1.1/32 12.12.12.1 0 0 1 i *> 1.1.2.1/32 12.12.12.1 0 0 1 i *> 1.1.3.1/32 12.12.12.1 0 0 1 i
R3(config-router)#do sh ip bgp BGP table version is 25, local router ID is 23.23.23.3 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, x best-external, a additional-path, c RIB-compressed, Origin codes: i - IGP, e - EGP, ? - incomplete RPKI validation codes: V valid, I invalid, N Not found Network Next Hop Metric LocPrf Weight Path *> 1.1.0.1/32 23.23.23.2 0 2 1 i *> 1.1.1.1/32 23.23.23.2 0 2 1 i *> 1.1.2.1/32 23.23.23.2 0 2 1 i *> 1.1.3.1/32 23.23.23.2 0 2 1 i
Sip2.. R2 dan R3 sudah mempunyai route ke seluruh IP loopback R1. Nah sekarang contoh kasusnya adalah, kita pengen agar R2 tetap memiliki full route seperti diatas, namun R3 hanya memiliki route summary saja..

Untuk itu kita harus melakukan summarization di R2, jika kita melakukan summarization di R1, nantinya R2 juga hanya memiliki route hasil summary saja.. padahal kan kita pengen agar R2 masih punya full route.. Oke langsung saja kita konfigurasikan summarization di R2
R2(config)#router bgp 2 R2(config-router)#aggregate-address 1.1.0.0 255.255.252.0 summary-only R2(config-router)#do cle ip bgp * soft
Kita lihat hasilnya di R2 dan R3 yaa
R2(config-router)#do sh ip bgp BGP table version is 30, local router ID is 23.23.23.2 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, x best-external, a additional-path, c RIB-compressed, Origin codes: i - IGP, e - EGP, ? - incomplete RPKI validation codes: V valid, I invalid, N Not found Network Next Hop Metric LocPrf Weight Path *> 1.1.0.0/22 0.0.0.0 32768 i s> 1.1.0.1/32 12.12.12.1 0 0 1 i s> 1.1.1.1/32 12.12.12.1 0 0 1 i s> 1.1.2.1/32 12.12.12.1 0 0 1 i s> 1.1.3.1/32 12.12.12.1 0 0 1 i
R3(config-router)#do sh ip bgp BGP table version is 30, local router ID is 23.23.23.3 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, x best-external, a additional-path, c RIB-compressed, Origin codes: i - IGP, e - EGP, ? - incomplete RPKI validation codes: V valid, I invalid, N Not found Network Next Hop Metric LocPrf Weight Path *> 1.1.0.0/22 23.23.23.2 0 0 2 i
Perhatikan bahwa R2 masih punya full route, sedangkan R3 hanya punya 1 ruote hasil summary saja.. sesuai dengan contoh kasusnya ya..

Tapi ada sedikit masalah nih di R3.. coba lihat AS Path nya.. AS Path di R3 untuk menuju 1.1.0.0/22 hanya melalui AS 2 saja.. bukannya yang mengadvertise network 1.1.0.0/22 ini harusnya R1?? kog AS 1 tidak masuk dalam AS Path??

Coba kita lihat lebih detail ya
R3(config-router)#do sh ip bgp 1.1.0.0 BGP routing table entry for 1.1.0.0/22, version 26 Paths: (1 available, best #1, table default) Not advertised to any peer Refresh Epoch 5 2, (aggregated by 2 23.23.23.2) 23.23.23.2 from 23.23.23.2 (23.23.23.2) Origin IGP, metric 0, localpref 100, valid, external, atomic-aggregate, best
Perhatikan bahwa AS Path nya hanya berhenti sampai AS nya aggregator saja, yaitu R2 (AS 2).. ini bisa jadi masalah nih.. AS Path ini bisa digunakan untuk looping prevention.. jadi kalau seperti ini, nanti ada beberapa kasus yang bisa menyebabkan looping..

ingat peraturan ini "router BGP akan mereject prefix yang dalam as pathnya ada AS nya sendiri".. nah masalahnya bagaimana jika suatu saat R1 menerima prefix 1.1.0.0/22 dari R3?? kan prefix tersebut tidak mengandung AS 1? jadi R1 akan menerimanya.. padahal kan 1.1.0.0/22 itu dari R1 sendiri?? wah looping dong??? Iya.. bisa2 loopoing!!

Untuk mencegahnya, kita harus menambahkan parameter as-set saat melakukan aggregation di R2.. seperti ini nih..
R2(config)#router bgp 2 R2(config-router)#aggregate-address 1.1.0.0 255.255.252.0 summary-only as-set R2(config-router)#do cle ip bgp * soft
Kita lihat hasilnya di R3 ya....
R3(config-router)#do sh ip bgp BGP table version is 31, local router ID is 23.23.23.3 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, x best-external, a additional-path, c RIB-compressed, Origin codes: i - IGP, e - EGP, ? - incomplete RPKI validation codes: V valid, I invalid, N Not found Network Next Hop Metric LocPrf Weight Path *> 1.1.0.0/22 23.23.23.2 0 0 2 1 i
Oke... sekarang AS Pathnya sudah lengkap.. ngerti kan bedanya?? sip2 mantab...

Kita coba lihat lebih detail yaa..
R3(config-router)#do sh ip bgp 1.1.0.0 BGP routing table entry for 1.1.0.0/22, version 31 Paths: (1 available, best #1, table default) Not advertised to any peer Refresh Epoch 6 2 1, (aggregated by 2 23.23.23.2) 23.23.23.2 from 23.23.23.2 (23.23.23.2) Origin IGP, metric 0, localpref 100, valid, external, best
Perhatikan bahwa yang menjadi aggregator tetap 23.23.23.2 (R2) dengan AS 2. namun sekarang AS Pathnya sudah lengkap..

Oke sampai disini dulu ya.. semoga bermanfaat...
{ Read More }


FeedBack

Jika Anda merasa terbantu dengan artikel dari Coretan Bocah IT, silahkan berlangganan GRATIS via email. Dengan begitu, Anda akan mendapat kiriman artikel setiap ada artikel baru yang terbit di Coretan Bocah IT

Masukkan Email :

IconIconIconFollow Me on Pinterest