Minggu, 30 April 2017

Lab 137 - MPLS l2VPN Cisco

Assalamu'alaikum.. bagaimana kabarnya teman teman? Alhamdulillah hari ini ada kesempatan untuk nulis lagi.. hari ini saya akan menulis konfigurasi MPLS L2VPN di cisco.

Oke langsung saja ya, berikut topologi yang akan kita gunakan pada lab ini
Tujuan kita adalah R4 dan R5 harus saling bisa berkomunikasi menggunakan ip yang berada dalam satu subnet. R6 dan R7 juga harus bisa berkomunikasi menggunakan ip satu segment.

Oke.. pertama kita konfigurasikan ip address pada bagian MPLS Backbone
R1(config)#int e0/0 R1(config-if)#no sh R1(config-if)#ip add 12.12.12.1 255.255.255.0 R1(config-if)#int lo0 R1(config-if)#ip add 1.1.1.1 255.255.255.255
R2(config)#int e0/0 R2(config-if)#no sh R2(config-if)#ip add 12.12.12.2 255.255.255.0 R2(config-if)#int e0/1 R2(config-if)#no sh R2(config-if)#ip add 23.23.23.2 255.255.255.0 R2(config-if)#int lo0 R2(config-if)#ip add 2.2.2.2 255.255.255.255
R3(config)#int e0/0 R3(config-if)#no sh R3(config-if)#ip add 23.23.23.3 255.255.255.0 R3(config-if)#int lo0 R3(config-if)#ip add 3.3.3.3 255.255.255.255
Oke.. lanjut kita konfigurasikan IGP pada MPLS Backbone.. kali ini kita menggunakan OSPF
R1(config-if)#router ospf 1 R1(config-router)#net 12.12.12.1 0.0.0.0 are 0 R1(config-router)#net 1.1.1.1 0.0.0.0 are 0
R2(config-if)#router ospf 1 R2(config-router)#net 12.12.12.2 0.0.0.0 are 0 R2(config-router)#net 23.23.23.2 0.0.0.0 are 0 R2(config-router)#net 2.2.2.2 0.0.0.0 are 0
R3(config-if)#router ospf 1 R3(config-router)#net 23.23.23.3 0.0.0.0 are 0 R3(config-router)#net 3.3.3.3 0.0.0.0 are 0
Selanjutnya kita konfigurasikan MPLS
R1(config)#mpls label protocol ldp R1(config)#mpls ldp router-id lo0 force R1(config)#int e0/0 R1(config-if)#mpls ip
R2(config)#mpls label protocol ldp R2(config)#mpls ldp router-id lo0 force R2(config)#int rang e0/0-1 R2(config-if-range)#mpls ip
R3(config)#mpls label protocol ldp R3(config)#mpls ldp router-id lo0 force R3(config)#int e0/0 R3(config-if)#mpls ip
Terahir kita konfigurasikan xconnect antar router PE seperti berikut
R1(config-if)#int e0/1 R1(config-if)#no sh R1(config-if)#xconnect 3.3.3.3 45 encapsulation mpls R1(config-if-xconn)#end
R3(config-if)#int e0/1 R3(config-if)#no sh R3(config-if)#xconnect 1.1.1.1 45 encapsulation mpls R3(config-if-xconn)#end
Konfigurasi diatas digunakan untuk menghubungkan antara R4 dan R5. Untuk pengujian, bisa menggunakan perintah berikut
R1#show xconnect all Legend: XC ST=Xconnect State S1=Segment1 State S2=Segment2 State UP=Up DN=Down AD=Admin Down IA=Inactive SB=Standby RV=Recovering NH=No Hardware XC ST Segment 1 S1 Segment 2 S2 ------+---------------------------------+--+---------------------------------+-- UP ac Et0/1(Ethernet) UP mpls 3.3.3.3:45 UP
Perhatikan bahwa status nya sudah UP. selanjutnya kita konfigurasikan ip address pada R4 dan R5 menggunakan ip yang satu segment
R4(config)#int e0/0 R4(config-if)#no sh R4(config-if)#ip add 45.45.45.4 255.255.255.0
R5(config)#int e0/0 R5(config-if)#no sh R5(config-if)#ip add 45.45.45.5 255.255.255.0
Untuk pengujian, kita coba lakukan ping dari R4 ke R5.. pastikan hasilnya berhasil!
R4(config-if)#do ping 45.45.45.5 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 45.45.45.5, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/2 ms
Oke.. hasilnya adalah sukses!!!!

O yaa.. sekarang R4 dan R5 itu seolah-olah benar-benar terhubung langsung.. kalau ndak percaya coba kita lihat cdp neighbor
R4(config-if)#do sh cdp nei Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge S - Switch, H - Host, I - IGMP, r - Repeater, P - Phone, D - Remote, C - CVTA, M - Two-port Mac Relay Device ID Local Intrfce Holdtme Capability Platform Port ID R1 Eth 0/0 153 R Linux Uni Eth 0/1 R5 Eth 0/0 159 R Linux Uni Eth 0/0
Perhatikan bahwa R4 neighbor an dengan R5..

Oke.. konfigurasi antara R4 dan R5 sudah selesai.. sekarang kita konfigurasikan antara R6 dan R7.. disini kita akan menggunakan enkapsulasi PPP yaa..

Pertama konfigurasi antar PE dulu
R1(config)#int se2/0 R1(config-if)#no sh R1(config-if)#encapsulation ppp R1(config-if)#xconnect 3.3.3.3 67 enc mpls R1(config-if-xconn)#exit
R3(config-if)#int se2/0 R3(config-if)#no sh R3(config-if)#enc ppp R3(config-if)#xconnect 1.1.1.1 67 enc mpls R3(config-if-xconn)#exit
Untuk pengujian, kita cek status xconnect nya
R1(config-if)#do sh xcon all Legend: XC ST=Xconnect State S1=Segment1 State S2=Segment2 State UP=Up DN=Down AD=Admin Down IA=Inactive SB=Standby RV=Recovering NH=No Hardware XC ST Segment 1 S1 Segment 2 S2 ------+---------------------------------+--+---------------------------------+-- UP ac Et0/1(Ethernet) UP mpls 3.3.3.3:45 UP UP ac Se2/0(PPP) UP mpls 3.3.3.3:67 UP
Perhatikan bahwa status nya sudah up. Lanjut kita konfigurasikan disisi R6 dan R7
R6(config)#int se2/0 R6(config-if)#enc ppp R6(config-if)#ip add 67.67.67.6 255.255.255.0 R6(config-if)#exit
R7(config)#int se2/0 R7(config-if)#no sh R7(config-if)#enc ppp R7(config-if)#ip add 67.67.67.7 255.255.255.0 R7(config-if)#exit
Untuk pengujian, kita coba lakukan ping dari R6 ke R7
R6(config-if)#do ping 67.67.67.7 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 67.67.67.7, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 18/18/19 ms
Okee suksess. kita coba lihat cdp neighbor nya
R6(config-if)#do sh cdp nei Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge S - Switch, H - Host, I - IGMP, r - Repeater, P - Phone, D - Remote, C - CVTA, M - Two-port Mac Relay Device ID Local Intrfce Holdtme Capability Platform Port ID R7 Ser 2/0 128 R Linux Uni Ser 2/0
Perhatikan bahwa R6 dan R7 bertetangga secara langsung.. oke sampai disini dulu yaa.. semoga bermanfaat..
{ Read More }


Kamis, 27 April 2017

Lab 136 - Superlab L3VPN Cisco (Bagian 6 Pengujian)

Helloooo ketemu lagi nih.... sebenarnya di lab sebelumnya saya sudah bilang kalau itu adalah lab terahir dari seri superlab L3VPN Cisco.. tapi ternyata pada lab tersebut sudah terlalu panjang.. jadi saya putuskan untuk membuat satu lab tambahan lagi.. hehehe...

Pada lab ini kita hanya akan melakukan pengujian yaaa..
Oke.. untuk pengujian,, kita tinggal melihat dari sisi CE saja.. pertama kita akan cek di CE Kantor A.. kita lihat dari sisi R9 saja...

Intinya nanti R9 harus bisa ping ke Kantor A cabang 1, cabang 2, dan services.
R9#show ip route Gateway of last resort is not set 9.0.0.0/32 is subnetted, 1 subnets C 9.9.9.9 is directly connected, Loopback0 13.0.0.0/32 is subnetted, 1 subnets O IA 13.13.13.13 [110/21] via 69.69.69.6, 00:09:04, Ethernet0/0 19.0.0.0/32 is subnetted, 1 subnets O IA 19.19.19.19 [110/21] via 69.69.69.6, 00:09:04, Ethernet0/0 20.0.0.0/32 is subnetted, 1 subnets O E2 20.20.20.20 [110/1] via 69.69.69.6, 00:09:04, Ethernet0/0 69.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 69.69.69.0/24 is directly connected, Ethernet0/0 L 69.69.69.9/32 is directly connected, Ethernet0/0 138.138.0.0/24 is subnetted, 1 subnets O IA 138.138.138.0 [110/11] via 69.69.69.6, 00:09:04, Ethernet0/0 O IA 192.192.192.0/24 [110/11] via 69.69.69.6, 00:09:04, Ethernet0/0
Perhatikan bahwa R9 sudah memiliki tabel routing untuk menuju kantor A cabang 1 (13.13.13.13), kantor A cabang 2 (19.19.19.19), dan services (20.20.20.20). sekarang kita coba lakukan ping.
R9#ping 13.13.13.13 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 13.13.13.13, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/2 ms R9#ping 19.19.19.19 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 19.19.19.19, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms R9#ping 20.20.20.20 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 20.20.20.20, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/2 ms
Oke.. hasilnya sukses!!!

lanjut kita cek dari kantor B.. Kantor pusat B (R10) harus bisa melakukan ping ke Kantor Cabang 1 (R15), Cabang 2 (R18), dan services (R20).. kita coba lihat tabel routing di R10
R10(config)#do sh ip route Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP + - replicated route, % - next hop override Gateway of last resort is not set 10.0.0.0/32 is subnetted, 1 subnets C 10.10.10.10 is directly connected, Loopback0 15.0.0.0/32 is subnetted, 1 subnets O IA 15.15.15.15 [110/21] via 106.106.106.6, 00:11:51, Ethernet0/0 18.0.0.0/32 is subnetted, 1 subnets O IA 18.18.18.18 [110/21] via 106.106.106.6, 00:11:51, Ethernet0/0 20.0.0.0/32 is subnetted, 1 subnets O E2 20.20.20.20 [110/1] via 106.106.106.6, 00:11:51, Ethernet0/0 106.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 106.106.106.0/24 is directly connected, Ethernet0/0 L 106.106.106.10/32 is directly connected, Ethernet0/0 157.157.0.0/24 is subnetted, 1 subnets O IA 157.157.157.0 [110/11] via 106.106.106.6, 00:11:51, Ethernet0/0 182.182.0.0/24 is subnetted, 1 subnets O IA 182.182.182.0 [110/11] via 106.106.106.6, 00:11:51, Ethernet0/0
Oke.. tabel routingnya sudah lengkap.. sekarang kita coba lakukan ping
R10(config)#do ping 15.15.15.15 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 15.15.15.15, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/2 ms R10(config)#do ping 18.18.18.18 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 18.18.18.18, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/2 ms R10(config)#do ping 20.20.20.20 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 20.20.20.20, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/2 ms
Hasilnya berhasil!!!!

Lanjut kita coba cek dari Kantor pusat C (R11), pastikan Kantor pusat C bisa ping ke Kantor cabang 1 (R14), cabang 2 (R16), dan services (R20). kita cek tabel routing di R11
R11(config)#do sh ip route Gateway of last resort is not set 11.0.0.0/32 is subnetted, 1 subnets C 11.11.11.11 is directly connected, Loopback0 14.0.0.0/32 is subnetted, 1 subnets D 14.14.14.14 [90/435200] via 116.116.116.6, 00:13:47, Ethernet0/0 16.0.0.0/32 is subnetted, 1 subnets D 16.16.16.16 [90/435200] via 116.116.116.6, 00:13:47, Ethernet0/0 20.0.0.0/32 is subnetted, 1 subnets D EX 20.20.20.20 [170/2560025856] via 116.116.116.6, 00:13:47, Ethernet0/0 116.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 116.116.116.0/24 is directly connected, Ethernet0/0 L 116.116.116.11/32 is directly connected, Ethernet0/0 148.148.0.0/24 is subnetted, 1 subnets D 148.148.148.0 [90/307200] via 116.116.116.6, 00:13:47, Ethernet0/0 167.167.0.0/24 is subnetted, 1 subnets D 167.167.167.0 [90/307200] via 116.116.116.6, 00:13:47, Ethernet0/0
Oke tabel routing nya sudah lengkap.. kita coba ping
R11(config)#do ping 14.14.14.14 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 14.14.14.14, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms R11(config)#do ping 16.16.16.16 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 16.16.16.16, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/2 ms R11(config)#do ping 20.20.20.20 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 20.20.20.20, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/2 ms
Oke berhasill... terahir, kita coba cek dari Kantor D yaaa.. pastikan Kantor pusat D (R12) bisa ping ke Kantor Cabang 1 (R17) dan services (R20).. pertama kita coba lihat tabel routing
R12(config)#do sh ip route Gateway of last resort is not set 12.0.0.0/32 is subnetted, 1 subnets C 12.12.12.12 is directly connected, Loopback0 17.0.0.0/32 is subnetted, 1 subnets D 17.17.17.17 [90/435200] via 128.128.128.8, 00:23:53, Ethernet0/0 20.0.0.0/32 is subnetted, 1 subnets D EX 20.20.20.20 [170/2560025856] via 128.128.128.8, 00:48:49, Ethernet0/0 128.128.0.0/16 is variably subnetted, 2 subnets, 2 masks C 128.128.128.0/24 is directly connected, Ethernet0/0 L 128.128.128.12/32 is directly connected, Ethernet0/0 172.172.0.0/24 is subnetted, 1 subnets D 172.172.172.0 [90/307200] via 128.128.128.8, 00:23:53, Ethernet0/0
Tabel routing sudah lengkap.. sekarang kita coba lakukan ping
R12(config)#do ping 17.17.17.17 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 17.17.17.17, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/6 ms R12(config)#do ping 20.20.20.20 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 20.20.20.20, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/2 ms
Oke sudah berhasil!!!!! Alhamdulillah ini adalah postingan terahir dari seri Superlab L3VPN Cisco ini yaa... dan hasilnya in syaa allah sukses!!!!!! selamat mencoba!!!
{ Read More }


Lab 135 - Superlab L3VPN Cisco (Bagian 5 Konfigurasi PE&CE)

Pada lab sebelumnya kita sudah membahas konfigurasi IBGP pada seluruh router PE.. selanjutnya pada lab ini kita akan mengkonfigurasikan bagian PE dan CE.. sepertinya pembahasan ini akan menjadi pembahasan terahir dari superlab ini deh.. hehehe... siap2 berpisah lagi yaa... tapi doakan saja agar saya bisa segera menulis lagi di blog yaa.. hehe

Oke langsung saja yaa
Sebelum ke konfigurasi,, saya akan sampaikan konfigurasinya yaa... untuk RD nya nanti akan menggunakan list berikut

  • Services -> 10:100
  • Kantor A -> 10:200
  • Kantor B -> 10:300
  • Kantor C -> 10:400
  • Kantod D-> 10:500
Adapun untuk routing protocol, kita akan menggunakan sesuai list berikut
  • Services -> Static
  • Kantor A -> OSPF
  • Kantor B -> OSPF
  • Kantor C -> EIGRP
  • Kantod D -> EIGRP
Oke.. pertama kita akan konfigurasi PE1 yaa.. yaitu di R5.. pertama kita konfigurasikan dulu vrf nya,
R5(config)#ip vrf Services R5(config-vrf)#rd 10:100 R5(config-vrf)#route-target export 10:100 R5(config-vrf)#route-target import 10:200 R5(config-vrf)#route-target import 10:300 R5(config-vrf)#route-target import 10:400 R5(config-vrf)#route-target import 10:500 R5(config-vrf)#int e0/1 R5(config-if)#ip vrf forwarding Services R5(config-if)#ip add 205.205.205.5 255.255.255.0
Selanjutnya kita konfigurasi addressing di bagian CE
R20(config)#int e0/0 R20(config-if)#no sh R20(config-if)#ip add 205.205.205.20 255.255.255.0 R20(config-if)#int lo0 R20(config-if)#ip add 20.20.20.20 255.255.255.255
Oke.. lanjut kita konfigurasikan static routing di bagian PE untuk menuju CE yaa.. ingat bahwa dibagian Service kita menggunakan static routing..
R5(config)#ip route vrf Services 20.20.20.20 255.255.255.255 205.205.205.20
Untuk pengujian.. kita lakukan ping dari router PE ke ip loopback CE
R5(config)#do ping vrf Services 20.20.20.20 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 20.20.20.20, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
Oke.. selanjutnya kita konfigurasikan default route di router CE
R20(config-if)#ip route 0.0.0.0 0.0.0.0 205.205.205.5
Sekarang kita redistribute static routing yang ada di PE ke IBGP..
R5(config)#router bgp 10 R5(config-router)#address-family ipv4 vrf Services R5(config-router-af)#redistribute static
Oke.. konfigurasi di PE1 done!!!

Lanjut kita konfigurasi di PE2 yaaa.. pertama kita konfigurasikan vrf nya dulu yaa
R6(config)#ip vrf A R6(config-vrf)#rd 10:200 R6(config-vrf)#route-target export 10:200 R6(config-vrf)#route-target import 10:200 R6(config-vrf)#route-target import 10:100 R6(config-vrf)#exit R6(config)#ip vrf B R6(config-vrf)#rd 10:300 R6(config-vrf)#route-target export 10:300 R6(config-vrf)#route-target import 10:300 R6(config-vrf)#route-target import 10:100 R6(config-vrf)#exit R6(config)#ip vrf C R6(config-vrf)#rd 10:400 R6(config-vrf)#route-target export 10:400 R6(config-vrf)#route-target import 10:400 R6(config-vrf)#route-target import 10:100 R6(config-vrf)#exit R6(config)#int e0/1 R6(config-if)#ip vrf forwarding A R6(config-if)#no sh R6(config-if)#ip add 69.69.69.6 255.255.255.0 R6(config-if)#int e0/2 R6(config-if)#ip vrf forwarding B R6(config-if)#no sh R6(config-if)#ip add 106.106.106.6 255.255.255.0 R6(config-if)#int e0/3 R6(config-if)#ip vrf forwarding C R6(config-if)#no sh R6(config-if)#ip add 116.116.116.6 255.255.255.0
Lanjut kita konfigurasikan routing protocolnya yaa.. ingat bahwa kantor A dan B menggunakan OSPF sedangkan kantor C menggunakan EIGRP.
R6(config)#router ospf 200 vrf A R6(config-router)# *Apr 27 14:01:50.405: %OSPF-4-NORTRID: OSPF process 200 failed to allocate unique router-id and cannot start R6(config-router)#router-id 200.200.200.200 R6(config-router)#net 69.69.69.6 0.0.0.0 are 0 R6(config-router)#exit R6(config)#router ospf 300 vrf B *Apr 27 14:03:00.368: %OSPF-4-NORTRID: OSPF process 300 failed to allocate unique router-id and cannot start R6(config-router)#router-id 30.30.30.30 R6(config-router)#net 106.106.106.6 0.0.0.0 are 0 R6(config-router)#exit R6(config)#router eigrp 400 R6(config-router)#address-family ipv4 vrf C autonomous-system 400 R6(config-router-af)#network 116.116.116.6 0.0.0.0
Oke.. sekarang kita konfigurasi di bagian CE yaa
R9(config)#int e0/0 R9(config-if)#no sh R9(config-if)#ip add 69.69.69.9 255.255.255.0 R9(config-if)#int lo0 R9(config-if)#ip add 9.9.9.9 255.255.255.255 R9(config-if)#router ospf 200 R9(config-router)#net 69.69.69.9 0.0.0.0 are 0 R9(config-router)#net 9.9.9.9 0.0.0.0 are 0
R10(config)#int e0/0 R10(config-if)#no sh R10(config-if)#ip add 106.106.106.10 255.255.255.0 R10(config-if)#int lo0 R10(config-if)#ip add 10.10.10.10 255.255.255.255 R10(config-if)#router ospf 300 R10(config-router)#net 106.106.106.10 0.0.0.0 are 0 R10(config-router)#net 10.10.10.10 0.0.0.0 are 0
R11(config)#int e0/0 R11(config-if)#no sh R11(config-if)#ip add 116.116.116.11 255.255.255.0 R11(config-if)#int lo0 R11(config-if)#ip add 11.11.11.11 255.255.255.255 R11(config-if)#router ei 400 R11(config-router)#net 116.116.116.11 0.0.0.0 R11(config-router)#net 11.11.11.11 0.0.0.0
Oke.. terahir kita konfigurasikan redistribution nya di router PE
R6(config)#router bgp 10 R6(config-router)#address-family ipv4 vrf A R6(config-router-af)#redistribute ospf 200 R6(config-router-af)#address-family ipv4 vrf B R6(config-router-af)#redistribute ospf 300 R6(config-router-af)#address-family ipv4 vrf C R6(config-router-af)#redistribute eigrp 400
R6(config)#router ospf 200 R6(config-router)#redistribute bgp 10 subnets R6(config-router)#router ospf 300 R6(config-router)#redistribute bgp 10 subnets R6(config)#router ei 400 R6(config-router)#address-family ipv4 vrf C autonomous-system 400 R6(config-router-af)#redistribute bgp 10 metric 1 1 1 1 1
Oke.. kita sudah selesai.. untuk pengujian, kita coba lihat tabel routing masing-masing vrf
R6(config-router-af)#do sh ip rou vrf A Routing Table: A Gateway of last resort is not set 9.0.0.0/32 is subnetted, 1 subnets O 9.9.9.9 [110/11] via 69.69.69.9, 00:14:46, Ethernet0/1 69.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 69.69.69.0/24 is directly connected, Ethernet0/1 L 69.69.69.6/32 is directly connected, Ethernet0/1
R6(config-router-af)#do sh ip rou vrf B Routing Table: B Gateway of last resort is not set 10.0.0.0/32 is subnetted, 1 subnets O 10.10.10.10 [110/11] via 106.106.106.10, 00:15:01, Ethernet0/2 106.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 106.106.106.0/24 is directly connected, Ethernet0/2 L 106.106.106.6/32 is directly connected, Ethernet0/2
R6(config-router-af)#do sh ip rou vrf C Routing Table: C Gateway of last resort is not set 11.0.0.0/32 is subnetted, 1 subnets D 11.11.11.11 [90/409600] via 116.116.116.11, 00:02:05, Ethernet0/3 116.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 116.116.116.0/24 is directly connected, Ethernet0/3 L 116.116.116.6/32 is directly connected, Ethernet0/3
Oke.. sudah berhasill..

lanjut kita konfigurasi di PE3 yaa... seperti biasa, pertama kita konfigurasikan vrf nya dulu
R8(config)#ip vrf C R8(config-vrf)#rd 10:400 R8(config-vrf)#route-target export 10:400 R8(config-vrf)#route-target import 10:100 R8(config-vrf)#route-target import 10:400 R8(config-vrf)#exit R8(config)#ip vrf A R8(config-vrf)#rd 10:200 R8(config-vrf)#route-target export 10:200 R8(config-vrf)#route-target import 10:200 R8(config-vrf)#route-target import 10:100 R8(config-vrf)#exit R8(config)#ip vrf D R8(config-vrf)#rd 10:500 R8(config-vrf)#route-target export 10:500 R8(config-vrf)#route-target import 10:500 R8(config-vrf)#route-target import 10:100 R8(config-vrf)#exit R8(config)#int e0/1 R8(config-if)#ip vrf forwarding C R8(config-if)#ip add 148.148.148.8 255.255.255.0 R8(config-if)#int e0/2 R8(config-if)#ip vrf forwarding A R8(config-if)#ip add 138.138.138.8 255.255.255.0 R8(config-if)#int e0/3 R8(config-if)#ip vrf forwarding D R8(config-if)#ip add 128.128.128.8 255.255.255.0 R8(config-if)#int rang e0/1-3 R8(config-if-range)#no sh
oke konfigurasi vrf sudah selesai.. lanjut kita konfigurasikan routing protocol di PE.. untuk kantor A akan menggunakan OSPF, sedangkan kantor C dan D menggunakan EIGRP
R8(config)#router eigrp 400 R8(config-router)#address-family ipv4 vrf C autonomous-system 400 R8(config-router-af)#network 148.148.148.8 0.0.0.0 R8(config-router-af)#exit R8(config)#router ospf 200 vrf A R8(config-router)#router-id 200.200.200.200 R8(config-router)#network 138.138.138.8 0.0.0.0 are 0 R8(config-router)#exit R8(config)#router eigrp 500 R8(config-router)#address-family ipv4 vrf D autonomous-system 500 R8(config-router-af)#network 128.128.128.8 0.0.0.0 R8(config-router-af)#exit
Oke.. konfigurasi di PE sudah selesai.. lanjut kita konfigurasikan di bagian CE
R14(config)#int e0/0 R14(config-if)#no sh R14(config-if)#ip add 148.148.148.14 255.255.255.0 R14(config-if)#int lo0 R14(config-if)#ip add 14.14.14.14 255.255.255.255 R14(config-if)#router eigrp 400 R14(config-router)#net 148.148.148.14 0.0.0.0 R14(config-router)#net 14.14.14.14 0.0.0.0
R13(config)#int e0/0 R13(config-if)#no sh R13(config-if)#ip add 138.138.138.13 255.255.255.0 R13(config-if)#int lo0 R13(config-if)#ip add 13.13.13.13 255.255.255.255 R13(config-if)#router ospf 200 R13(config-router)#net 138.138.138.13 0.0.0.0 are 0 R13(config-router)#net 13.13.13.13 0.0.0.0 are 0
R12(config)#int e0/0 R12(config-if)#no sh R12(config-if)#ip add 128.128.128.12 255.255.255.0 R12(config-if)#int lo0 R12(config-if)#ip add 12.12.12.12 255.255.255.255 R12(config-if)#router eigrp 500 R12(config-router)#net 128.128.128.12 0.0.0.0 R12(config-router)#net 12.12.12.12 0.0.0.0
Lanjut kita konfigurasikan redistributionnya di router PE
R8(config)#router bgp 10 R8(config-router)#address-family ipv4 vrf C R8(config-router-af)#redistribute eigrp 400 R8(config-router-af)#address-family ipv4 vrf A R8(config-router-af)#redistribute ospf 200 R8(config-router-af)#address-family ipv4 vrf D R8(config-router-af)#redistribute eigrp 500 R8(config-router-af)#exit R8(config-router)#router eigrp 400 R8(config-router)#address-family ipv4 vrf C autonomous-system 400 R8(config-router-af)#redistribute bgp 10 metric 1 1 1 1 1 R8(config-router-af)#exit R8(config-router)#router ospf 200 vrf A R8(config-router)#redistribute bgp 10 subnets R8(config-router)#exit R8(config)#router eigrp 500 R8(config-router)#address-family ipv4 vrf D autonomous-system 500 R8(config-router-af)#redistribute bgp 10 metric 1 1 1 1 1 R8(config-router-af)#exit
Okkeeee konfigurasi di PE3 sudah selesai..

Lanjut kita konfigurasi di PE4..
R7(config)#ip vrf C R7(config-vrf)#rd 10:400 R7(config-vrf)#route-target export 10:400 R7(config-vrf)#route-target import 10:400 R7(config-vrf)#route-target import 10:100 R7(config-vrf)#exit R7(config)#ip vrf B R7(config-vrf)#rd 10:300 R7(config-vrf)#route-target export 10:300 R7(config-vrf)#route-target import 10:300 R7(config-vrf)#route-target import 10:100 R7(config-vrf)#exit R7(config)#int e0/2 R7(config-if)#ip vrf forwarding C R7(config-if)#no sh R7(config-if)#ip add 167.167.167.7 255.255.255.0 R7(config-if)#int e0/1 R7(config-if)#ip vrf forwarding B R7(config-if)#no sh R7(config-if)#ip add 157.157.157.7 255.255.255.0
R7(config)#router eigrp 400 R7(config-router)#address-family ipv4 vrf C autonomous-system 400 R7(config-router-af)#network 167.167.167.7 0.0.0.0 R7(config-router-af)#exit R7(config-router)#exit R7(config)#router ospf 300 vrf B R7(config-router)#router-id 30.30.30.30 R7(config-router)#network 157.157.157.7 0.0.0.0 are 0 R7(config-router)#exit
Oke.. kita lanjut konfig di CE
R16(config)#int e0/0 R16(config-if)#no sh R16(config-if)#ip add 167.167.167.16 255.255.255.0 R16(config-if)#int lo0 R16(config-if)#ip add 16.16.16.16 255.255.255.255 R16(config-if)#router ei 400 R16(config-router)#net 167.167.167.16 0.0.0.0 R16(config-router)#net 16.16.16.16 0.0.0.0
R15(config)#int e0/0 R15(config-if)#no sh R15(config-if)#ip add 157.157.157.15 255.255.255.0 R15(config-if)#int lo0 R15(config-if)#ip add 15.15.15.15 255.255.255.255 R15(config-if)#router ospf 300 R15(config-router)#net 157.157.157.15 0.0.0.0 are 0 R15(config-router)#net 15.15.15.15 0.0.0.0 are 0
Terahir kita konfigurasikan redistribution di PE
R7(config)#router bgp 10 R7(config-router)#address-family ipv4 vrf C R7(config-router-af)#redistribute eigrp 400 R7(config-router-af)#exit R7(config-router)#address-family ipv4 vrf B R7(config-router-af)#redistribute ospf 300 R7(config-router-af)#exit R7(config-router)#router eigrp 400 R7(config-router)#address-family ipv4 vrf C autonomous-system 400 R7(config-router-af)#redistribute bgp 10 metric 1 1 1 1 1 R7(config-router-af)#exit R7(config-router)#exit R7(config)#router ospf 300 vrf B R7(config-router)#redistribute bgp 10 subnets R7(config-router)#exit
Oke.. konfigurasi di PE4 sudah selesai...

lanjut kita konfigurasi di PE5 yaa.. ahirnya ini terahir juga..hehe udah lumayan capek nih.. hehe
R2(config)#ip vrf A R2(config-vrf)#rd 10:200 R2(config-vrf)#route-target export 10:200 R2(config-vrf)#route-target import 10:200 R2(config-vrf)#route-target import 10:100 R2(config-vrf)#exit R2(config)#ip vrf B R2(config-vrf)#rd 10:300 R2(config-vrf)#route-target export 10:300 R2(config-vrf)#route-target import 10:300 R2(config-vrf)#route-target import 10:100 R2(config-vrf)#exit R2(config)#ip vrf D R2(config-vrf)#rd 10:500 R2(config-vrf)#route-target export 10:500 R2(config-vrf)#route-target import 10:500 R2(config-vrf)#route-target import 10:100 R2(config-vrf)#exit R2(config)#int e0/3 R2(config-if)#no sh R2(config-if)#ip vrf forwarding A R2(config-if)#ip add 192.192.192.2 255.255.255.0 R2(config-if)#int e0/2 R2(config-if)#no sh R2(config-if)#ip vrf forwarding B R2(config-if)#ip add 182.182.182.2 255.255.255.0 R2(config-if)#int e0/1 R2(config-if)#no sh R2(config-if)#ip vrf forwarding D R2(config-if)#ip add 172.172.172.2 255.255.255.0 R2(config-if)#exit
R2(config)#router ospf 200 vrf A R2(config-router)#router-id 200.200.200.200 R2(config-router)#net 192.192.192.2 0.0.0.0 are 0 R2(config-router)#exit R2(config)#router ospf 300 vrf B R2(config-router)#router-id 30.30.30.30 R2(config-router)#net 182.182.182.2 0.0.0.0 are 0 R2(config-router)#exit R2(config)#router eigrp 500 R2(config-router)#address-family ipv4 vrf D autonomous-system 500 R2(config-router-af)#network 172.172.172.2 0.0.0.0 R2(config-router-af)#exit
Oke.. lanjut kita konfigurasikan di bagian CE
R19(config)#int e0/0 R19(config-if)#no sh R19(config-if)#ip add 192.192.192.19 255.255.255.0 R19(config-if)#int lo0 R19(config-if)#ip add 19.19.19.19 255.255.255.255 R19(config-if)#router ospf 200 R19(config-router)#network 192.192.192.19 0.0.0.0 are 0 R19(config-router)#net 19.19.19.19 0.0.0.0 are 0
R18(config)#int e0/0 R18(config-if)#no sh R18(config-if)#ip add 182.182.182.18 255.255.255.0 R18(config-if)#int lo0 R18(config-if)#ip add 18.18.18.18 255.255.255.255 R18(config-if)#router ospf 300 R18(config-router)#network 182.182.182.18 0.0.0.0 are 0 R18(config-router)#net 18.18.18.18 0.0.0.0 are 0
R17(config)#int e0/0 R17(config-if)#no sh R17(config-if)#ip add 172.172.172.17 255.255.255.0 R17(config-if)#int lo0 R17(config-if)#ip add 17.17.17.17 255.255.255.255 R17(config-if)#router ei 500 R17(config-router)#net 172.172.172.17 0.0.0.0 R17(config-router)#net 17.17.17.17 0.0.0.0
Oke.. terahir kita lakukan redistribution di router PE
R2(config)#router bgp 10 R2(config-router)#address-family ipv4 vrf A R2(config-router-af)#redistribute ospf 200 R2(config-router-af)#exit R2(config-router)#address-family ipv4 vrf B R2(config-router-af)#redistribute ospf 300 R2(config-router-af)#exit R2(config-router)#address-family ipv4 vrf D R2(config-router-af)#redistribute eigrp 500 R2(config-router-af)#exit R2(config-router)#router ospf 200 vrf A R2(config-router)#redistribute bgp 10 subnets R2(config-router)#exit R2(config)#router ospf 300 vrf B R2(config-router)#redistribute bgp 10 subnets R2(config-router)#exit R2(config)#router eigrp 500 R2(config-router)#address-family ipv4 vrf D autonomous-system 500 R2(config-router-af)#redistribute bgp 10 metric 1 1 1 1 1 R2(config-router-af)#exit
Oke.. sepertinya sudah selesai deh semuanya.. hehee

sebenarnya pengen nya sih postingan ini postingan terahir dari seri superlab L3VPN Cisco.. tapi karena sudah terlalu panjang.. kita sudahi dulu sampai disini yaa.. kita akan lanjut di lab berikutnya untuk pengujian... oke sampai jumpa lagi yaaa
{ Read More }


Lab 134 - Superlab L3VPN Cisco (Bagian 4 Konfigurasi BGP)

Pada pembahasan sebelumnya kita sudah selesai dan berhasil mengkonfigurasi MPLS pada jaringan ISP.. selanjutnya pada postingan kali ini kita akan membahas konfigurasi IBGP antar router PE yaa..
Oke langsung saja kita konfigurasikan IBGP yaa.. ingat bahwa kita hanya akan melakukan konfigurasi IBGP pada router PE yaa
R2(config)#router bgp 10 R2(config-router)#neighbor PE peer-group R2(config-router)#nei PE remote-as 10 R2(config-router)#neighbor PE update-source lo0 R2(config-router)#nei 5.5.5.5 peer-group PE R2(config-router)#nei 6.6.6.6 peer-group PE R2(config-router)#nei 7.7.7.7 peer-group PE R2(config-router)#nei 8.8.8.8 peer-group PE R2(config-router)#address-family vpnv4 R2(config-router-af)#neighbor 5.5.5.5 activate R2(config-router-af)#neighbor 6.6.6.6 activate R2(config-router-af)#neighbor 7.7.7.7 activate R2(config-router-af)#neighbor 8.8.8.8 activate
R5(config)#router bgp 10 R5(config-router)#nei PE pee R5(config-router)#nei PE peer-group R5(config-router)#nei PE remote-as 10 R5(config-router)#nei PE update-sou lo0 R5(config-router)#nei 2.2.2.2 peer-group PE R5(config-router)#nei 6.6.6.6 peer-group PE R5(config-router)#nei 7.7.7.7 peer-group PE R5(config-router)#nei 8.8.8.8 peer-group PE R5(config-router)#address-family vpnv4 R5(config-router-af)#nei 2.2.2.2 activate R5(config-router-af)#nei 5.5.5.5 activate R5(config-router-af)#nei 6.6.6.6 activate R5(config-router-af)#nei 7.7.7.7 activate R5(config-router-af)#nei 8.8.8.8 activate
R6(config)#router bgp 10 R6(config-router)#nei PE pee R6(config-router)#nei PE peer-group R6(config-router)#nei PE remote-as 10 R6(config-router)#nei PE update-sou lo0 R6(config-router)#nei 2.2.2.2 peer-group PE R6(config-router)#nei 5.5.5.5 peer-group PE R6(config-router)#nei 7.7.7.7 peer-group PE R6(config-router)#nei 8.8.8.8 peer-group PE R6(config-router)#address-family vpnv4 R6(config-router-af)#nei 2.2.2.2 activate R6(config-router-af)#nei 5.5.5.5 activate R6(config-router-af)#nei 7.7.7.7 activate R6(config-router-af)#nei 8.8.8.8 activate
R7(config)#router bgp 10 R7(config-router)#nei PE pee R7(config-router)#nei PE peer-group R7(config-router)#nei PE remote-as 10 R7(config-router)#nei PE update-sou lo0 R7(config-router)#nei 2.2.2.2 peer-group PE R7(config-router)#nei 5.5.5.5 peer-group PE R7(config-router)#nei 6.6.6.6 peer-group PE R7(config-router)#nei 8.8.8.8 peer-group PE R7(config-router)#address-family vpnv4 R7(config-router-af)#nei 2.2.2.2 activate R7(config-router-af)#nei 5.5.5.5 activate R7(config-router-af)#nei 6.6.6.6 activate R7(config-router-af)#nei 8.8.8.8 activate
R8(config)#router bgp 10 R8(config-router)#nei PE pee R8(config-router)#nei PE peer-group R8(config-router)#nei PE remote-as 10 R8(config-router)#nei PE update-sou lo0 R8(config-router)#nei 2.2.2.2 peer-group PE R8(config-router)#nei 5.5.5.5 peer-group PE R8(config-router)#nei 6.6.6.6 peer-group PE R8(config-router)#nei 7.7.7.7 peer-group PE R8(config-router)#address-family vpnv4 R8(config-router-af)#nei 2.2.2.2 activate R8(config-router-af)#nei 5.5.5.5 activate R8(config-router-af)#nei 6.6.6.6 activate R8(config-router-af)#nei 7.7.7.7 activate
Oke sampai saat ini kita sudah selesai konfigurasi IBGP pada seluruh router PE.. untuk pengujian kita bisa menggunakan perintah berikut
R2(config-router-af)#do sh ip bgp vpnv4 all sum BGP router identifier 2.2.2.2, local AS number 10 BGP table version is 1, main routing table version 1 Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd 5.5.5.5 4 10 10 10 1 0 0 00:05:51 0 6.6.6.6 4 10 8 7 1 0 0 00:05:17 0 7.7.7.7 4 10 6 5 1 0 0 00:03:02 0 8.8.8.8 4 10 2 2 1 0 0 00:00:12 0
Pastikan bahwa setiap router PE sudah bertetangga dengan keempat router PE lainnya..
R5(config-router-af)#do sh ip bgp vpnv4 all sum BGP router identifier 5.5.5.5, local AS number 10 BGP table version is 1, main routing table version 1 Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd 2.2.2.2 4 10 11 11 1 0 0 00:06:56 0 6.6.6.6 4 10 9 8 1 0 0 00:06:19 0 7.7.7.7 4 10 7 6 1 0 0 00:04:05 0 8.8.8.8 4 10 4 3 1 0 0 00:01:12 0
R6(config-router-af)#do sh ip bgp vpnv4 all sum BGP router identifier 6.6.6.6, local AS number 10 BGP table version is 1, main routing table version 1 Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd 2.2.2.2 4 10 9 9 1 0 0 00:06:40 0 5.5.5.5 4 10 9 10 1 0 0 00:06:37 0 7.7.7.7 4 10 7 6 1 0 0 00:04:21 0 8.8.8.8 4 10 4 3 1 0 0 00:01:28 0
R7(config-router-af)#do sh ip bgp vpnv4 all sum BGP router identifier 7.7.7.7, local AS number 10 BGP table version is 1, main routing table version 1 Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd 2.2.2.2 4 10 7 7 1 0 0 00:04:41 0 5.5.5.5 4 10 7 7 1 0 0 00:04:39 0 6.6.6.6 4 10 7 7 1 0 0 00:04:37 0 8.8.8.8 4 10 4 3 1 0 0 00:01:42 0
R8(config-router-af)#do sh ip bgp vpnv4 all sum BGP router identifier 8.8.8.8, local AS number 10 BGP table version is 1, main routing table version 1 Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd 2.2.2.2 4 10 4 5 1 0 0 00:02:06 0 5.5.5.5 4 10 4 5 1 0 0 00:02:01 0 6.6.6.6 4 10 4 5 1 0 0 00:01:59 0 7.7.7.7 4 10 3 4 1 0 0 00:01:57 0
Okeee.. kita sudah selesai dan berhasil.. karena sudah berhasil, artinya pertemuan kita akan berahir lagi yaa.. hehe.. tapi jangan hawatir.. kita akan segera ketemu lagi kog.. karena memang seri superlab ini belum berahir.. hehehe.. pada episode selanjutnya in syaa allah kita akan membahas konfigurasi PE dan CE.. oke sampai jumpa lagi yaa..!!
{ Read More }


Lab 133 - Superlab L3VPN Cisco (Bagian 3 Konfigurasi MPLS)

Oke.. ketemu lagi nih... di postingan sebelumnya kita telah melakukan konfigurasi OSPF di jaringan ISP.. sekarang kita akan konfigurasi MPLS nya yaa..
Okee.. langsung saja yaa kita konfigurasi MPLS di jarignan ISP
R1(config)#mpls label protocol ldp R1(config)#mpls ldp router-id lo0 force R1(config)#int rang e0/0-3 R1(config-if-range)#mpls ip
R2(config)#mpls label protocol ldp R2(config)#mpls ldp router-id lo0 force R2(config)#int e0/0 R2(config-if)#mpls ip
R3(config)#mpls label protocol ldp R3(config)#mpls ldp router-id lo0 force R3(config)#int rang e0/0-2 R3(config-if-range)#mpls ip
R4(config)#mpls label protocol ldp R4(config)#mpls ldp router-id lo0 force R4(config)#int rang e0/0-3 R4(config-if-range)#mpls ip
R5(config)#mpls label protocol ldp R5(config)#mpls ldp router-id lo0 force R5(config)#int e0/0 R5(config-if)#mpls ip
R6(config)#mpls label protocol ldp R6(config)#mpls ldp router-id lo0 force R6(config)#int e0/0 R6(config-if)#mpls ip
R7(config)#mpls label protocol ldp R7(config)#mpls ldp router-id lo0 force R7(config)#int e0/0 R7(config-if)#mpls ip
R8(config)#mpls label protocol ldp R8(config)#mpls ldp router-id lo0 force R8(config)#int e0/0 R8(config-if)#mpls ip
Oke sampai saat ini kita sudah selesai mengkonfigurasi MPLS di seluruh router ISP.. untuk pengujian kita bisa menggunakan perintah show mpls ldp neighbor. pastikan setiap router sudah berhasil adjacency MPLS dengan tetangganya masing-masing. Berikut hasil di R1
R1#show mpls ldp neighbor Peer LDP Ident: 3.3.3.3:0; Local LDP Ident 1.1.1.1:0 TCP connection: 3.3.3.3.16131 - 1.1.1.1.646 State: Oper; Msgs sent/rcvd: 26/25; Downstream Up time: 00:06:04 LDP discovery sources: Ethernet0/3, Src IP addr: 13.13.13.3 Addresses bound to peer LDP Ident: 13.13.13.3 34.34.34.3 23.23.23.3 3.3.3.3 Peer LDP Ident: 4.4.4.4:0; Local LDP Ident 1.1.1.1:0 TCP connection: 4.4.4.4.25996 - 1.1.1.1.646 State: Oper; Msgs sent/rcvd: 24/25; Downstream Up time: 00:05:19 LDP discovery sources: Ethernet0/0, Src IP addr: 14.14.14.4 Addresses bound to peer LDP Ident: 14.14.14.4 47.47.47.4 48.48.48.4 34.34.34.4 4.4.4.4 Peer LDP Ident: 5.5.5.5:0; Local LDP Ident 1.1.1.1:0 TCP connection: 5.5.5.5.46649 - 1.1.1.1.646 State: Oper; Msgs sent/rcvd: 24/24; Downstream Up time: 00:04:41 LDP discovery sources: Ethernet0/2, Src IP addr: 15.15.15.5 Addresses bound to peer LDP Ident: 15.15.15.5 5.5.5.5 Peer LDP Ident: 6.6.6.6:0; Local LDP Ident 1.1.1.1:0 TCP connection: 6.6.6.6.39786 - 1.1.1.1.646 State: Oper; Msgs sent/rcvd: 23/23; Downstream Up time: 00:04:01 LDP discovery sources: Ethernet0/1, Src IP addr: 16.16.16.6 Addresses bound to peer LDP Ident: 16.16.16.6 6.6.6.6
Oke sampai disini kita sudah berhasil dan selesai mengkonfigurasi MPLS pada jaringan ISP.. sehingga pertemuan kita cukup sampai disini yaa.. hehehe.... santai aja.. kita bakalan ketemu lagi kog.. selanjutnya kita akan konfigurasikan BGP antar router PE yaa.. oke sampai jumpa lagi..!
{ Read More }


Lab 132 - Superlab L3VPN Cisco (Bagian 2 Konfigurasi OSPF)

Oke.. sebelumnya saya sudah memperkenalkan superlab spesial tentang L3VPN di cisco. selanjutnya saat ini kita akan mulai perang nya yaa.. berikut full topologi dari superlab yang akan kita bahas
Pada postingan kali ini, kita hanya akan fokus pada konfigurasi routing protocol IGP pada bagian ISP. Adapun routing protocol IGP yang akan kita gunakan adalah OSPF.
Pertama konfigurasikan ip addressing pada seluruh router ISP. Untuk addressing, kita akan menggunakan addressing standard IDN seperti biasa yaaa
R1(config)#int e0/0 R1(config-if)#no sh R1(config-if)#ip add 14.14.14.1 255.255.255.0 R1(config-if)#int e0/1 R1(config-if)#no sh R1(config-if)#ip add 16.16.16.1 255.255.255.0 R1(config-if)#int e0/2 R1(config-if)#no sh R1(config-if)#ip add 15.15.15.1 255.255.255.0 R1(config-if)#int e0/3 R1(config-if)#no sh R1(config-if)#ip add 13.13.13.1 255.255.255.0 R1(config-if)#int lo0 R1(config-if)#ip add 1.1.1.1 255.255.255.255
R2(config)#int e0/0 R2(config-if)#no sh R2(config-if)#ip add 23.23.23.2 255.255.255.0 R2(config-if)#int lo0 R2(config-if)#ip add 2.2.2.2 255.255.255.255
R3(config)#int e0/0 R3(config-if)#no sh R3(config-if)#ip add 13.13.13.3 255.255.255.0 R3(config-if)#int e0/1 R3(config-if)#no sh R3(config-if)#ip add 34.34.34.3 255.255.255.0 R3(config-if)#int e0/2 R3(config-if)#no sh R3(config-if)#ip add 23.23.23.3 255.255.255.0 R3(config-if)#int lo0 R3(config-if)#ip add 3.3.3.3 255.255.255.255
R4(config)#int e0/0 R4(config-if)#no sh R4(config-if)#ip add 14.14.14.4 255.255.255.0 R4(config-if)#int e0/1 R4(config-if)#no sh R4(config-if)#ip add 47.47.47.4 255.255.255.0 R4(config-if)#int e0/2 R4(config-if)#no sh R4(config-if)#ip add 48.48.48.4 255.255.255.0 R4(config-if)#int e0/3 R4(config-if)#no sh R4(config-if)#ip add 34.34.34.4 255.255.255.0 R4(config-if)#int lo0 R4(config-if)#ip add 4.4.4.4 255.255.255.255
R5(config)#int e0/0 R5(config-if)#no sh R5(config-if)#ip add 15.15.15.5 255.255.255.0 R5(config-if)#int lo0 R5(config-if)#ip add 5.5.5.5 255.255.255.255
R6(config)#int e0/0 R6(config-if)#no sh R6(config-if)#ip add 16.16.16.6 255.255.255.0 R6(config-if)#int lo0 R6(config-if)#ip add 6.6.6.6 255.255.255.255
R7(config)#int e0/0 R7(config-if)#no sh R7(config-if)#ip add 47.47.47.7 255.255.255.0 R7(config-if)#int lo0 R7(config-if)#ip add 7.7.7.7 255.255.255.255
R8(config)#int e0/0 R8(config-if)#no sh R8(config-if)#ip add 48.48.48.8 255.255.255.0 R8(config-if)#int lo0 R8(config-if)#ip add 8.8.8.8 255.255.255.255
Oke konfigurasi ip address sudah selesai.. selanjutnya kita konfigurasikan ospf pada seluruh router ISP.
R1(config)#router ospf 1 R1(config-router)#net 14.14.14.1 0.0.0.0 are 0 R1(config-router)#net 16.16.16.1 0.0.0.0 are 0 R1(config-router)#net 15.15.15.1 0.0.0.0 are 0 R1(config-router)#net 13.13.13.1 0.0.0.0 are 0 R1(config-router)#net 1.1.1.1 0.0.0.0 are 0
R2(config-if)#router ospf 1 R2(config-router)#net 23.23.23.2 0.0.0.0 are 0 R2(config-router)#net 2.2.2.2 0.0.0.0 are 0
R3(config-if)#router ospf 1 R3(config-router)#net 13.13.13.3 0.0.0.0 are 0 R3(config-router)#net 34.34.34.3 0.0.0.0 are 0 R3(config-router)#net 23.23.23.3 0.0.0.0 are 0 R3(config-router)#net 3.3.3.3 0.0.0.0 are 0
R4(config-if)#router ospf 1 R4(config-router)#net 14.14.14.4 0.0.0.0 are 0 RR4(config-router)#net 47.47.47.4 0.0.0.0 are 0 R4(config-router)#net 48.48.48.4 0.0.0.0 are 0 R4(config-router)#net 34.34.34.4 0.0.0.0 are 0 R4(config-router)#net 4.4.4.4 0.0.0.0 are 0
R5(config-if)#router ospf 1 R5(config-router)#net 15.15.15.5 0.0.0.0 are 0 R5(config-router)#net 5.5.5.5 0.0.0.0 are 0
R6(config-if)#router ospf 1 R6(config-router)#net 16.16.16.6 0.0.0.0 are 0 R6(config-router)#net 6.6.6.6 0.0.0.0 are 0
R7(config-if)#router ospf 1 R7(config-router)#net 47.47.47.7 0.0.0.0 are 0 R7(config-router)#net 7.7.7.7 0.0.0.0 are 0
R8(config-if)#router ospf 1 R8(config-router)#net 48.48.48.8 0.0.0.0 are 0 R8(config-router)#net 8.8.8.8 0.0.0.0 are 0
Okeee.. konfigurasi OSPF sudah selesai.. pastikan seluruh router mempunyai tabel routing yang lengkap. berikut tabel routing di R1
R1(config-router)#do sh ip route Gateway of last resort is not set 1.0.0.0/32 is subnetted, 1 subnets C 1.1.1.1 is directly connected, Loopback0 2.0.0.0/32 is subnetted, 1 subnets O 2.2.2.2 [110/21] via 13.13.13.3, 00:03:13, Ethernet0/3 3.0.0.0/32 is subnetted, 1 subnets O 3.3.3.3 [110/11] via 13.13.13.3, 00:03:23, Ethernet0/3 4.0.0.0/32 is subnetted, 1 subnets O 4.4.4.4 [110/11] via 14.14.14.4, 00:02:31, Ethernet0/0 5.0.0.0/32 is subnetted, 1 subnets O 5.5.5.5 [110/11] via 15.15.15.5, 00:02:00, Ethernet0/2 6.0.0.0/32 is subnetted, 1 subnets O 6.6.6.6 [110/11] via 16.16.16.6, 00:01:30, Ethernet0/1 7.0.0.0/32 is subnetted, 1 subnets O 7.7.7.7 [110/21] via 14.14.14.4, 00:00:55, Ethernet0/0 8.0.0.0/32 is subnetted, 1 subnets O 8.8.8.8 [110/21] via 14.14.14.4, 00:00:21, Ethernet0/0 13.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 13.13.13.0/24 is directly connected, Ethernet0/3 L 13.13.13.1/32 is directly connected, Ethernet0/3 14.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 14.14.14.0/24 is directly connected, Ethernet0/0 L 14.14.14.1/32 is directly connected, Ethernet0/0 15.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 15.15.15.0/24 is directly connected, Ethernet0/2 L 15.15.15.1/32 is directly connected, Ethernet0/2 16.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 16.16.16.0/24 is directly connected, Ethernet0/1 L 16.16.16.1/32 is directly connected, Ethernet0/1 23.0.0.0/24 is subnetted, 1 subnets O 23.23.23.0 [110/20] via 13.13.13.3, 00:03:13, Ethernet0/3 34.0.0.0/24 is subnetted, 1 subnets O 34.34.34.0 [110/20] via 14.14.14.4, 00:02:31, Ethernet0/0 [110/20] via 13.13.13.3, 00:03:33, Ethernet0/3 47.0.0.0/24 is subnetted, 1 subnets O 47.47.47.0 [110/20] via 14.14.14.4, 00:02:42, Ethernet0/0 48.0.0.0/24 is subnetted, 1 subnets O 48.48.48.0 [110/20] via 14.14.14.4, 00:02:42, Ethernet0/0
Oke.. untuk saat ini sampai disini dulu yaa.. sampai jumpa di postingan selanjutnya.. di postingan selanjutnya in syaa allah kita akan membahas konfigurasi MPLS di jaringan ISP
{ Read More }


Lab 131 - Superlab L3VPN Cisco (Bagian 1 Overview)

Sudah lama ndak nulis di blog, Alhamdulillah ada kesempatan untuk menulis lagi.. Karena sudah lama nda nulis, saya pengen memberikan hadiah yang spesial nih..

TARAAAAAAAA... Superlab MPLS L3VPN di Cisco!!!!!

Kurang lebih berikut topologi dari superlab yang akan kita bahas
Pada postingan kali ini, kita belum akan ngelab yaa.. saya hanya mau memberikan berita bahagia aja sih sebenarnya,, hehehe

Tujuan utama pada lab ini adalah, nantinya setiap kantor dapat berkomunikasi dengan kantor cabang nya masing-masing.. misal seluruh kantor cabang dan kantor pusat dari kantor A bisa berkomunikasi satu sama lain. begitu juga dengan kantor B, C, dan D.

Selain itu, seluruh kantor harus bisa mengakses Service....

Berikut index pembahasan dari Superlab L3VPN Cisco ini..


Oke.. sampai disini dulu ya pertemuan kita kali ini.. hehehe.. pertemuan yang singkat.. tapi jangan hawatir.. kita akan bertemu lagi di postingan selanjutnya.. jangan lupa mempersiapkan diri ya.. karena di postingan selanjutnya kita akan perang nih!! hehe.. oke sampai jumpa,,!!
{ Read More }


FeedBack

Jika Anda merasa terbantu dengan artikel dari Coretan Bocah IT, silahkan berlangganan GRATIS via email. Dengan begitu, Anda akan mendapat kiriman artikel setiap ada artikel baru yang terbit di Coretan Bocah IT

Masukkan Email :

IconIconIconFollow Me on Pinterest