Lab 146 - IOS XR IBGP Confederation

Pada lab sebelumnya kita telah belajar tentang IBGP Route Reflcetor pada IOS XR.. selanjutnya pada lab ini kita akan belajar tentang IBGP Confederation..

Berikut topologi yang akan kita gunakan

Pertama kita harus konfigurasi IP Address dan routing protocol IGP pada jaringan diatas.. pada lab ini kita akan menggunakan EIGRP yaaa.. jika ada yg belum bisa konfigurasi EIGRP di IOS XR bisa merujuk ke artikel berikut : Konfigurasi EIGRP di IOS XR..

Setelah konfigurasi EIGRP, hasilnya adalah sebagai berikut

RP/0/0/CPU0:IOS-XR1(config-eigrp-af-if)#do sh route eigrp
Wed Jun  7 06:47:34.279 UTC

D    2.2.2.2/32 [90/10752] via 12.12.12.2, 00:03:03, GigabitEthernet0/0/0/0
D    3.3.3.3/32 [90/15872] via 12.12.12.2, 00:01:12, GigabitEthernet0/0/0/0
D    4.4.4.4/32 [90/20992] via 12.12.12.2, 00:00:32, GigabitEthernet0/0/0/0
D    23.23.23.0/24 [90/15360] via 12.12.12.2, 00:03:03, GigabitEthernet0/0/0/0
D    34.34.34.0/24 [90/20480] via 12.12.12.2, 00:01:12, GigabitEthernet0/0/0/0

RP/0/0/CPU0:IOS-XR2(config-eigrp-af-if)#do sh route eigrp
Wed Jun  7 06:48:06.896 UTC

D    1.1.1.1/32 [90/10752] via 12.12.12.1, 00:03:17, GigabitEthernet0/0/0/0
D    3.3.3.3/32 [90/10752] via 23.23.23.3, 00:01:45, GigabitEthernet0/0/0/1
D    4.4.4.4/32 [90/15872] via 23.23.23.3, 00:01:05, GigabitEthernet0/0/0/1
D    34.34.34.0/24 [90/15360] via 23.23.23.3, 00:01:45, GigabitEthernet0/0/0/1

RP/0/0/CPU0:IOS-XR3(config-eigrp-af-if)#do sh route eigrp
Wed Jun  7 06:48:30.135 UTC

D    1.1.1.1/32 [90/15872] via 23.23.23.2, 00:01:54, GigabitEthernet0/0/0/0
D    2.2.2.2/32 [90/10752] via 23.23.23.2, 00:01:54, GigabitEthernet0/0/0/0
D    4.4.4.4/32 [90/10752] via 34.34.34.4, 00:01:29, GigabitEthernet0/0/0/1
D    12.12.12.0/24 [90/15360] via 23.23.23.2, 00:01:54, GigabitEthernet0/0/0/0

RP/0/0/CPU0:IOS-XR4(config-eigrp-af-if)#do sh route eigrp
Wed Jun  7 06:48:48.963 UTC

D    1.1.1.1/32 [90/20992] via 34.34.34.3, 00:01:29, GigabitEthernet0/0/0/0
D    2.2.2.2/32 [90/15872] via 34.34.34.3, 00:01:29, GigabitEthernet0/0/0/0
D    3.3.3.3/32 [90/10752] via 34.34.34.3, 00:01:29, GigabitEthernet0/0/0/0
D    12.12.12.0/24 [90/20480] via 34.34.34.3, 00:01:29, GigabitEthernet0/0/0/0
D    23.23.23.0/24 [90/15360] via 34.34.34.3, 00:01:29, GigabitEthernet0/0/0/0

Oke.. pastikan hasilnya sudah seperti itu ya.. pastikan juga masing-masing router sudah bisa ping ke loopback0 router lainnya.. berikut contoh ping dari IOS-XR1 ke loopback0 router lainnya

RP/0/0/CPU0:IOS-XR1(config-eigrp-af-if)#do ping ipv4 2.2.2.2
Wed Jun  7 06:51:23.093 UTC
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
RP/0/0/CPU0:IOS-XR1(config-eigrp-af-if)#do ping ipv4 3.3.3.3
Wed Jun  7 06:51:25.653 UTC
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 3.3.3.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/6/19 ms
RP/0/0/CPU0:IOS-XR1(config-eigrp-af-if)#do ping ipv4 4.4.4.4
Wed Jun  7 06:51:30.342 UTC
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 4.4.4.4, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/5/9 ms

Oke kalu sudah berhasil seperti diatas, selanjutnya kita akan konfigurasi IBGP dengan confederation..

Perhatikan topologi diatas, IOS-XR1 dan IOS-XR2 menggunaakn AS confederation 12 sedangkan IOS-XR3 dan IOS-XR4 menggunakan AS confederation 34..

Berikut konfigurasi pada IOS-XR1

RP/0/0/CPU0:IOS-XR1(config)#router bgp 12
RP/0/0/CPU0:IOS-XR1(config-bgp)#bgp confederation identifier 12

RP/0/0/CPU0:IOS-XR1(config-bgp)#address-family ipv4 unicast 
RP/0/0/CPU0:IOS-XR1(config-bgp-af)#network 11.11.11.11/32
RP/0/0/CPU0:IOS-XR1(config-bgp-af)#exit

RP/0/0/CPU0:IOS-XR1(config-bgp)#neighbor 2.2.2.2
RP/0/0/CPU0:IOS-XR1(config-bgp-nbr)#remote-as 12
RP/0/0/CPU0:IOS-XR1(config-bgp-nbr)#update-source lo0
RP/0/0/CPU0:IOS-XR1(config-bgp-nbr)#address-family ipv4 unicast 

RP/0/0/CPU0:IOS-XR1(config-bgp-nbr-af)#commit

Selanjutnya berikut konfigurasi pada IOS-XR2

RP/0/0/CPU0:IOS-XR2(config)#router bgp 12
RP/0/0/CPU0:IOS-XR2(config-bgp)#bgp confederation identifier 12
RP/0/0/CPU0:IOS-XR2(config-bgp)#bgp confederation peers 34

RP/0/0/CPU0:IOS-XR2(config-bgp)#address-family ipv4 unicast 
RP/0/0/CPU0:IOS-XR2(config-bgp-af)#network 22.22.22.22/32
RP/0/0/CPU0:IOS-XR2(config-bgp-af)#exit

RP/0/0/CPU0:IOS-XR2(config-bgp)#neighbor 1.1.1.1
RP/0/0/CPU0:IOS-XR2(config-bgp-nbr)#remote-as 12
RP/0/0/CPU0:IOS-XR2(config-bgp-nbr)#update-source lo0
RP/0/0/CPU0:IOS-XR2(config-bgp-nbr)#address-family ipv4 unicast 

RP/0/0/CPU0:IOS-XR2(config-bgp-nbr-af)#neighbor 3.3.3.3
RP/0/0/CPU0:IOS-XR2(config-bgp-nbr)#remote-as 34
RP/0/0/CPU0:IOS-XR2(config-bgp-nbr)#update-source lo0
RP/0/0/CPU0:IOS-XR2(config-bgp-nbr)#address-family ipv4 unicast 

RP/0/0/CPU0:IOS-XR2(config-bgp-nbr-af)#commit 

Perhatikan bahwa pada IOS-XR2 kita perlu mengkonfigurisakan ebgp-multihop saat neighbor 3.3.3.3.. ini dikarenakan IOS-XR2 menganggap IOS-XR3 seolah-olah adalah external AS.. sedangkan untuk peering EBGP nilai ttl nya adalah 1.. jadi kita harus memperbesar nilai ttl menggunakan perintah ebgp-multihop ini..

Selanjutnya berikut konfigurasi di IOS-XR3

RP/0/0/CPU0:IOS-XR3(config)#router bgp 34
RP/0/0/CPU0:IOS-XR3(config-bgp)#bgp confederation identifier 1234
RP/0/0/CPU0:IOS-XR3(config-bgp)#bgp confederation peers 12

RP/0/0/CPU0:IOS-XR3(config-bgp)#address-family ipv4 unicast 
RP/0/0/CPU0:IOS-XR3(config-bgp-af)#network 33.33.33.33/32
RP/0/0/CPU0:IOS-XR3(config-bgp-af)#exit

RP/0/0/CPU0:IOS-XR3(config-bgp)#neighbor 2.2.2.2
RP/0/0/CPU0:IOS-XR3(config-bgp-nbr)#remote-as 12
RP/0/0/CPU0:IOS-XR3(config-bgp-nbr)#update-source lo0
RP/0/0/CPU0:IOS-XR3(config-bgp-nbr)#address-family ipv4 unicast 

RP/0/0/CPU0:IOS-XR3(config-bgp-nbr-af)#neighbor 4.4.4.4
RP/0/0/CPU0:IOS-XR3(config-bgp-nbr)#remote-as 34
RP/0/0/CPU0:IOS-XR3(config-bgp-nbr)#update-source lo0
RP/0/0/CPU0:IOS-XR3(config-bgp-nbr)#address-family ipv4 unicast 

RP/0/0/CPU0:IOS-XR3(config-bgp-nbr-af)#commit

Perhatikan bahwa kita juga perlu mengkonfigurasikan ebgp-multihop pada IOS-XR3

Yang terahir, berikut konfigurasi pada IOS-XR4

RP/0/0/CPU0:IOS-XR4(config)#router bgp 34
RP/0/0/CPU0:IOS-XR4(config-bgp)#bgp confederation identifier 1234

RP/0/0/CPU0:IOS-XR4(config-bgp)#address-family ipv4 unicast 
RP/0/0/CPU0:IOS-XR4(config-bgp-af)#network 44.44.44.44/32
RP/0/0/CPU0:IOS-XR4(config-bgp-af)#exit 

RP/0/0/CPU0:IOS-XR4(config-bgp)#neighbor 3.3.3.3
RP/0/0/CPU0:IOS-XR4(config-bgp-nbr)#remote-as 34
RP/0/0/CPU0:IOS-XR4(config-bgp-nbr)#update-source lo0
RP/0/0/CPU0:IOS-XR4(config-bgp-nbr)#address-family ipv4 unicast 

RP/0/0/CPU0:IOS-XR4(config-bgp-nbr-af)#commit

Oke.. konfigurasi sudah selesai.. Untuk pengujian,, pastikan IOS-XR1 menerima network dari IOS-XR2, IOS-XR3, dan IOS-XR4

RP/0/0/CPU0:IOS-XR1(config-bgp-nbr-af)#do sh bgp 
Wed Jun  7 07:31:04.430 UTC
BGP router identifier 1.1.1.1, local AS number 12
BGP generic scan interval 60 secs
Non-stop routing is enabled
BGP table state: Active
Table ID: 0xe0000000   RD version: 6
BGP main routing table version 6
BGP NSR Initial initsync version 2 (Reached)
BGP NSR/ISSU Sync-Group versions 0/0
BGP scan interval 60 secs

Status codes: s suppressed, d damped, h history, * valid, > best
              i - internal, r RIB-failure, S stale, N Nexthop-discard
Origin codes: i - IGP, e - EGP, ? - incomplete
   Network            Next Hop            Metric LocPrf Weight Path
*> 11.11.11.11/32     0.0.0.0                  0         32768 i
*>i22.22.22.22/32     2.2.2.2                  0    100      0 i
*>i33.33.33.33/32     3.3.3.3                  0    100      0 (34) i
*>i44.44.44.44/32     4.4.4.4                  0    100      0 (34) i

Processed 4 prefixes, 4 paths

Oke sudah berhasil ya.. untuk lebih memastikan, kita coba lihat tabel routing di IOS-XR1

RP/0/0/CPU0:IOS-XR1(config-bgp-nbr-af)#do sh route bgp
Wed Jun  7 07:31:43.497 UTC

B    22.22.22.22/32 [200/0] via 2.2.2.2, 00:11:32
B    33.33.33.33/32 [200/0] via 3.3.3.3, 00:09:05
B    44.44.44.44/32 [200/0] via 4.4.4.4, 00:08:35

Oke sudah lengkap... sekarang kita coba lakukan ping yaa

RP/0/0/CPU0:IOS-XR1(config-bgp-nbr-af)#do ping 22.22.22.22 sou l1
Wed Jun  7 07:32:10.695 UTC
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 22.22.22.22, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/9 ms
RP/0/0/CPU0:IOS-XR1(config-bgp-nbr-af)#do ping 33.33.33.33 sou l1
Wed Jun  7 07:32:14.505 UTC
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 33.33.33.33, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/9 ms
RP/0/0/CPU0:IOS-XR1(config-bgp-nbr-af)#do ping 44.44.44.44 sou l1
Wed Jun  7 07:32:18.435 UTC
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 44.44.44.44, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/9 ms

Oke sudah berhasil yaaa... Sampai saat ini kita sudah selesai dan berhasil melakukan konfigurasi IBGP confederation pada IOS XR.. sampai jumpa di artikel selanjutnya yaa.... In Syaa Allah masih akan membahas seputar IOS XR..

{ Read More }

Lab 145 - IOS XR IBGP Route Reflector

Sebelumnya kita telah belajar tentang IGP di IOS XR,,. yaitu OSPF dan EIGRP.. selanjutnya pada lab ini kita akan belajar tentang EGP,, yaitu BGP..

Kita akan ngelab IBGP dengan menggunakan Route Reflector.. berikut topologi yang akan kita gunakan

Perhatikan masing-masing router mempunyai dua IP Loopback.. nantinya interface loopback0 pada masing-masing router akan kita advertise ke OSPF.. selanjutnya interface loopback1 pada masing-masing router akan kita advertise ke IBGP..

Oke langsung saja, Diasumsikan kita sudah konfigurasi OSPF ya.. nanti hasilnya harus nya seperti ini..

RP/0/0/CPU0:IOS-XR1(config-ospf-ar-if)#do sh route ospf
Mon Jun  5 01:24:16.743 UTC

O    2.2.2.2/32 [110/2] via 12.12.12.2, 00:02:03, GigabitEthernet0/0/0/0
O    3.3.3.3/32 [110/3] via 12.12.12.2, 00:00:59, GigabitEthernet0/0/0/0
O    4.4.4.4/32 [110/4] via 12.12.12.2, 00:00:06, GigabitEthernet0/0/0/0
O    23.23.23.0/24 [110/2] via 12.12.12.2, 00:02:03, GigabitEthernet0/0/0/0
O    34.34.34.0/24 [110/3] via 12.12.12.2, 00:00:59, GigabitEthernet0/0/0/0

RP/0/0/CPU0:IOS-XR2(config-ospf-ar-if)#do sh route ospf
Mon Jun  5 01:24:41.661 UTC

O    1.1.1.1/32 [110/2] via 12.12.12.1, 00:02:27, GigabitEthernet0/0/0/0
O    3.3.3.3/32 [110/2] via 23.23.23.3, 00:01:28, GigabitEthernet0/0/0/1
O    4.4.4.4/32 [110/3] via 23.23.23.3, 00:00:30, GigabitEthernet0/0/0/1
O    34.34.34.0/24 [110/2] via 23.23.23.3, 00:01:28, GigabitEthernet0/0/0/1

RP/0/0/CPU0:IOS-XR3(config-ospf-ar-if)#do sh route ospf
Mon Jun  5 01:24:57.810 UTC

O    1.1.1.1/32 [110/3] via 23.23.23.2, 00:01:44, GigabitEthernet0/0/0/0
O    2.2.2.2/32 [110/2] via 23.23.23.2, 00:01:44, GigabitEthernet0/0/0/0
O    4.4.4.4/32 [110/2] via 34.34.34.4, 00:00:52, GigabitEthernet0/0/0/1
O    12.12.12.0/24 [110/2] via 23.23.23.2, 00:01:44, GigabitEthernet0/0/0/0

RP/0/0/CPU0:IOS-XR4(config-ospf-ar-if)#do sh route ospf
Mon Jun  5 01:25:11.609 UTC

O    1.1.1.1/32 [110/4] via 34.34.34.3, 00:01:06, GigabitEthernet0/0/0/0
O    2.2.2.2/32 [110/3] via 34.34.34.3, 00:01:06, GigabitEthernet0/0/0/0
O    3.3.3.3/32 [110/2] via 34.34.34.3, 00:01:06, GigabitEthernet0/0/0/0
O    12.12.12.0/24 [110/3] via 34.34.34.3, 00:01:06, GigabitEthernet0/0/0/0
O    23.23.23.0/24 [110/2] via 34.34.34.3, 00:01:06, GigabitEthernet0/0/0/0

Kalau masih ada yang belum bisa konfigurasi OSPF di IOS XR, bisa merujuk ke artikel berikut ya : Konfigurasi OSPF di IOS XR

Oke.. setelah konfigurasi OSPF selesai.. pastikan masing-masing router bisa ping ke loopback0 dari router lain ya.. kita coba ping dari IOS-XR1 ke loopback0 IOS-XR2-4

RP/0/0/CPU0:IOS-XR1(config-ospf-ar-if)#do ping 2.2.2.2
Mon Jun  5 01:26:51.382 UTC
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
RP/0/0/CPU0:IOS-XR1(config-ospf-ar-if)#do ping 3.3.3.3
Mon Jun  5 01:26:53.402 UTC
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 3.3.3.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/6/19 ms
RP/0/0/CPU0:IOS-XR1(config-ospf-ar-if)#do ping 4.4.4.4
Mon Jun  5 01:26:55.782 UTC
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 4.4.4.4, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/5/9 ms

Oke sudah jalan semua ya.. sekarang saatnya kita mengkonfigurasi IBGP... pada topologi ini IOS-XR4 akan menjadi Route Reflector ya.. jadi nanti IOS-XR1, 2, dan 3 hanya perlua peering ke IOS-XR4..

Oke langsung saja.. berikut konfigurasi di IOS-XR1

RP/0/0/CPU0:IOS-XR1(config)#router bgp 1234 
RP/0/0/CPU0:IOS-XR1(config-bgp)#address-family ipv4 unicast 
RP/0/0/CPU0:IOS-XR1(config-bgp-af)#network 11.11.11.11/32
RP/0/0/CPU0:IOS-XR1(config-bgp-af)#exit

RP/0/0/CPU0:IOS-XR1(config-bgp)#nei 4.4.4.4
RP/0/0/CPU0:IOS-XR1(config-bgp-nbr)#remote-as 1234
RP/0/0/CPU0:IOS-XR1(config-bgp-nbr)#update-source lo0
RP/0/0/CPU0:IOS-XR1(config-bgp-nbr)#address-family ipv4 unicast 
RP/0/0/CPU0:IOS-XR1(config-bgp-nbr-af)#commit

Berikut konfigurasi di IOS-XR2

RP/0/0/CPU0:IOS-XR2(config-ospf-ar-if)#router bgp 1234
RP/0/0/CPU0:IOS-XR2(config-bgp)#address-family ipv4 unicast 
RP/0/0/CPU0:IOS-XR2(config-bgp-af)#net 22.22.22.22/32
RP/0/0/CPU0:IOS-XR2(config-bgp-af)#exit

RP/0/0/CPU0:IOS-XR2(config-bgp)#nei 4.4.4.4
RP/0/0/CPU0:IOS-XR2(config-bgp-nbr)#remote-as 1234
RP/0/0/CPU0:IOS-XR2(config-bgp-nbr)#update-sou lo0
RP/0/0/CPU0:IOS-XR2(config-bgp-nbr)#address-family ipv4 unicast 
RP/0/0/CPU0:IOS-XR2(config-bgp-nbr-af)#commit

Berikut konfigurasi di IOS-XR3

RP/0/0/CPU0:IOS-XR3(config-ospf-ar-if)#router bgp 1234 
RP/0/0/CPU0:IOS-XR3(config-bgp)#address-family ipv4 unicast 
RP/0/0/CPU0:IOS-XR3(config-bgp-af)#net 33.33.33.33/32
RP/0/0/CPU0:IOS-XR3(config-bgp-af)#exit

RP/0/0/CPU0:IOS-XR3(config-bgp)#nei 4.4.4.4
RP/0/0/CPU0:IOS-XR3(config-bgp-nbr)#remote-as 1234
RP/0/0/CPU0:IOS-XR3(config-bgp-nbr)#update-sou lo0
RP/0/0/CPU0:IOS-XR3(config-bgp-nbr)#address-family ipv4 unicast 
RP/0/0/CPU0:IOS-XR3(config-bgp-nbr-af)#commit

Berikut konfigurasi di IOS-XR4.. pada IOS-XR4 ini kita akan konfiguruasi peering group ya.. karena IOS-XR4 harus peering ke 3 router.. kalau peering satu-satu kelamaan.. jadi lebih baik pake group aja

RP/0/0/CPU0:IOS-XR4(config)#router bgp 1234
RP/0/0/CPU0:IOS-XR4(config-bgp)#address-family ipv4 unicast 
RP/0/0/CPU0:IOS-XR4(config-bgp-af)#net 44.44.44.44/32
RP/0/0/CPU0:IOS-XR4(config-bgp-af)#exit

RP/0/0/CPU0:IOS-XR4(config-bgp)#neighbor-group IBGP
RP/0/0/CPU0:IOS-XR4(config-bgp-nbrgrp)#remote-as 1234
RP/0/0/CPU0:IOS-XR4(config-bgp-nbrgrp)#update-source lo0
RP/0/0/CPU0:IOS-XR4(config-bgp-nbrgrp)#address-family ipv4 unicast 
RP/0/0/CPU0:IOS-XR4(config-bgp-nbrgrp-af)#route-reflector-client 
RP/0/0/CPU0:IOS-XR4(config-bgp-nbrgrp-af)#exit
RP/0/0/CPU0:IOS-XR4(config-bgp-nbrgrp)#exit

RP/0/0/CPU0:IOS-XR4(config-bgp)#neigh 1.1.1.1
RP/0/0/CPU0:IOS-XR4(config-bgp-nbr)#use neighbor-group IBGP

RP/0/0/CPU0:IOS-XR4(config-bgp-nbr)#nei 2.2.2.2
RP/0/0/CPU0:IOS-XR4(config-bgp-nbr)#use neighbor-group IBGP

RP/0/0/CPU0:IOS-XR4(config-bgp-nbr)#nei 3.3.3.3
RP/0/0/CPU0:IOS-XR4(config-bgp-nbr)#use neighbor-group IBGP
RP/0/0/CPU0:IOS-XR4(config-bgp-nbr)#commit

Oke untuk pengujian, kita bisa menggunakan perintah berikut

RP/0/0/CPU0:IOS-XR1(config-if)#do sh bgp sum
Mon Jun  5 01:50:04.631 UTC
BGP router identifier 1.1.1.1, local AS number 1234
BGP generic scan interval 60 secs
Non-stop routing is enabled
BGP table state: Active
Table ID: 0xe0000000   RD version: 6
BGP main routing table version 6
BGP NSR Initial initsync version 2 (Not Reached)
BGP NSR/ISSU Sync-Group versions 0/0
BGP scan interval 60 secs

BGP is operating in STANDALONE mode.


Process       RcvTblVer   bRIB/RIB   LabelVer  ImportVer  SendTblVer  StandbyVer
Speaker               6          6          6          6           6           0

Neighbor        Spk    AS MsgRcvd MsgSent   TblVer  InQ OutQ  Up/Down  St/PfxRcd
4.4.4.4           0  1234       9       5        6    0    0 00:01:21          3

Perhatikan bahwa IOS-XR1 sudah menerima 3 prefix dari IOS-XR4.. kita coba lihat prefix berapa saja yang dimaksud

RP/0/0/CPU0:IOS-XR1(config-if)#do sh bgp 
Mon Jun  5 01:51:25.296 UTC
BGP router identifier 1.1.1.1, local AS number 1234
BGP generic scan interval 60 secs
Non-stop routing is enabled
BGP table state: Active
Table ID: 0xe0000000   RD version: 6
BGP main routing table version 6
BGP NSR Initial initsync version 2 (Reached)
BGP NSR/ISSU Sync-Group versions 0/0
BGP scan interval 60 secs

Status codes: s suppressed, d damped, h history, * valid, > best
              i - internal, r RIB-failure, S stale, N Nexthop-discard
Origin codes: i - IGP, e - EGP, ? - incomplete
   Network            Next Hop            Metric LocPrf Weight Path
*> 11.11.11.11/32     0.0.0.0                  0         32768 i
*>i22.22.22.22/32     2.2.2.2                  0    100      0 i
*>i33.33.33.33/32     3.3.3.3                  0    100      0 i
*>i44.44.44.44/32     4.4.4.4                  0    100      0 i

Processed 4 prefixes, 4 paths

Perhatikan bahwa IOS-XR1 sudah menerima prefix yang lengkap.. kita coba lihat yang di Route Reflector ya

RP/0/0/CPU0:IOS-XR4(config-bgp-nbr)#do sh bgp sum
Mon Jun  5 01:52:49.450 UTC
BGP router identifier 4.4.4.4, local AS number 1234
BGP generic scan interval 60 secs
Non-stop routing is enabled
BGP table state: Active
Table ID: 0xe0000000   RD version: 6
BGP main routing table version 6
BGP NSR Initial initsync version 2 (Reached)
BGP NSR/ISSU Sync-Group versions 0/0
BGP scan interval 60 secs

BGP is operating in STANDALONE mode.


Process       RcvTblVer   bRIB/RIB   LabelVer  ImportVer  SendTblVer  StandbyVer
Speaker               6          6          6          6           6           0

Neighbor        Spk    AS MsgRcvd MsgSent   TblVer  InQ OutQ  Up/Down  St/PfxRcd
1.1.1.1           0  1234       8      12        6    0    0 00:04:06          1
2.2.2.2           0  1234      11      14        6    0    0 00:07:01          1
3.3.3.3           0  1234      11      15        6    0    0 00:07:03          1

Route Reflector peering dengan tiga router lainnya., dan menerima 1 prefix dari setiap router.. kita coba lihat prefix berapa saja yg diterima oleh IOS-XR4

RP/0/0/CPU0:IOS-XR4(config-bgp-nbr)#do sh bgp
Mon Jun  5 01:53:41.046 UTC
BGP router identifier 4.4.4.4, local AS number 1234
BGP generic scan interval 60 secs
Non-stop routing is enabled
BGP table state: Active
Table ID: 0xe0000000   RD version: 6
BGP main routing table version 6
BGP NSR Initial initsync version 2 (Reached)
BGP NSR/ISSU Sync-Group versions 0/0
BGP scan interval 60 secs

Status codes: s suppressed, d damped, h history, * valid, > best
              i - internal, r RIB-failure, S stale, N Nexthop-discard
Origin codes: i - IGP, e - EGP, ? - incomplete
   Network            Next Hop            Metric LocPrf Weight Path
*>i11.11.11.11/32     1.1.1.1                  0    100      0 i
*>i22.22.22.22/32     2.2.2.2                  0    100      0 i
*>i33.33.33.33/32     3.3.3.3                  0    100      0 i
*> 44.44.44.44/32     0.0.0.0                  0         32768 i

Processed 4 prefixes, 4 paths

Oke lengkap ya...

Untuk pengujian selanjutnya kita bisa mencoba untuk melihat tabel routing.. berikut tabel routing di IOS-XR1

RP/0/0/CPU0:IOS-XR1(config-if)#do sh route bgp
Mon Jun  5 01:54:26.033 UTC

B    22.22.22.22/32 [200/0] via 2.2.2.2, 00:05:37
B    33.33.33.33/32 [200/0] via 3.3.3.3, 00:05:37
B    44.44.44.44/32 [200/0] via 4.4.4.4, 00:05:37

Berikut tabel routing di IOS-XR2

RP/0/0/CPU0:IOS-XR2#sh route bgp
Mon Jun  5 01:54:59.551 UTC

B    11.11.11.11/32 [200/0] via 1.1.1.1, 00:06:11
B    33.33.33.33/32 [200/0] via 3.3.3.3, 00:07:13
B    44.44.44.44/32 [200/0] via 4.4.4.4, 00:07:13

Berikut tabel routing BGP di IOS-XR3

RP/0/0/CPU0:IOS-XR3#sh route bgp
Mon Jun  5 01:55:27.709 UTC

B    11.11.11.11/32 [200/0] via 1.1.1.1, 00:06:39
B    22.22.22.22/32 [200/0] via 2.2.2.2, 00:07:41
B    44.44.44.44/32 [200/0] via 4.4.4.4, 00:07:41

Berikut tabel routing BGP di IOS-XR4

RP/0/0/CPU0:IOS-XR4(config-bgp-nbr)#do sh route bgp
Mon Jun  5 01:55:48.918 UTC

B    11.11.11.11/32 [200/0] via 1.1.1.1, 00:07:00
B    22.22.22.22/32 [200/0] via 2.2.2.2, 00:08:02
B    33.33.33.33/32 [200/0] via 3.3.3.3, 00:08:02

Oke.. sudah lengkap semua kan ya...

Pengujain terahir, kita coba lakukan ping yaa.. Berikut percobaan ping dari IOS-XR1 ke loopback router lainnya

RP/0/0/CPU0:IOS-XR1(config-if)#do ping 22.22.22.22 sou l1
Mon Jun  5 01:56:32.855 UTC
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 22.22.22.22, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/9 ms
RP/0/0/CPU0:IOS-XR1(config-if)#do ping 33.33.33.33 sou l1 
Mon Jun  5 01:56:37.354 UTC
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 33.33.33.33, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
RP/0/0/CPU0:IOS-XR1(config-if)#do ping 44.44.44.44 sou l1
Mon Jun  5 01:56:41.684 UTC
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 44.44.44.44, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/9 ms

Oke jalan semua ya....

Alhamdulillah Lab IBGP pada IOS XR kita sudah selesai... In Syaa Allah selanjutnya kita masih akan membahas tentang IBGP pada IOS XR.. namun menggunakan Confederation.. Oke sampai ketemu di artikel selanjutnya yaaa

{ Read More }

Lab 134 - Superlab L3VPN Cisco (Bagian 4 Konfigurasi BGP)

Pada pembahasan sebelumnya kita sudah selesai dan berhasil mengkonfigurasi MPLS pada jaringan ISP.. selanjutnya pada postingan kali ini kita akan membahas konfigurasi IBGP antar router PE yaa..

Oke langsung saja kita konfigurasikan IBGP yaa.. ingat bahwa kita hanya akan melakukan konfigurasi IBGP pada router PE yaa

R2(config)#router bgp 10
R2(config-router)#neighbor PE peer-group 
R2(config-router)#nei PE remote-as 10
R2(config-router)#neighbor PE update-source lo0
R2(config-router)#nei 5.5.5.5 peer-group PE
R2(config-router)#nei 6.6.6.6 peer-group PE
R2(config-router)#nei 7.7.7.7 peer-group PE
R2(config-router)#nei 8.8.8.8 peer-group PE

R2(config-router)#address-family vpnv4
R2(config-router-af)#neighbor 5.5.5.5 activate 
R2(config-router-af)#neighbor 6.6.6.6 activate 
R2(config-router-af)#neighbor 7.7.7.7 activate 
R2(config-router-af)#neighbor 8.8.8.8 activate 

R5(config)#router bgp 10
R5(config-router)#nei PE pee
R5(config-router)#nei PE peer-group 
R5(config-router)#nei PE remote-as 10
R5(config-router)#nei PE update-sou lo0
R5(config-router)#nei 2.2.2.2 peer-group PE
R5(config-router)#nei 6.6.6.6 peer-group PE
R5(config-router)#nei 7.7.7.7 peer-group PE
R5(config-router)#nei 8.8.8.8 peer-group PE

R5(config-router)#address-family vpnv4
R5(config-router-af)#nei 2.2.2.2 activate
R5(config-router-af)#nei 5.5.5.5 activate
R5(config-router-af)#nei 6.6.6.6 activate
R5(config-router-af)#nei 7.7.7.7 activate
R5(config-router-af)#nei 8.8.8.8 activate

R6(config)#router bgp 10
R6(config-router)#nei PE pee
R6(config-router)#nei PE peer-group 
R6(config-router)#nei PE remote-as 10
R6(config-router)#nei PE update-sou lo0
R6(config-router)#nei 2.2.2.2 peer-group PE
R6(config-router)#nei 5.5.5.5 peer-group PE
R6(config-router)#nei 7.7.7.7 peer-group PE
R6(config-router)#nei 8.8.8.8 peer-group PE

R6(config-router)#address-family vpnv4
R6(config-router-af)#nei 2.2.2.2 activate
R6(config-router-af)#nei 5.5.5.5 activate
R6(config-router-af)#nei 7.7.7.7 activate
R6(config-router-af)#nei 8.8.8.8 activate

R7(config)#router bgp 10
R7(config-router)#nei PE pee
R7(config-router)#nei PE peer-group 
R7(config-router)#nei PE remote-as 10
R7(config-router)#nei PE update-sou lo0
R7(config-router)#nei 2.2.2.2 peer-group PE
R7(config-router)#nei 5.5.5.5 peer-group PE
R7(config-router)#nei 6.6.6.6 peer-group PE
R7(config-router)#nei 8.8.8.8 peer-group PE

R7(config-router)#address-family vpnv4
R7(config-router-af)#nei 2.2.2.2 activate
R7(config-router-af)#nei 5.5.5.5 activate
R7(config-router-af)#nei 6.6.6.6 activate
R7(config-router-af)#nei 8.8.8.8 activate

R8(config)#router bgp 10
R8(config-router)#nei PE pee
R8(config-router)#nei PE peer-group 
R8(config-router)#nei PE remote-as 10
R8(config-router)#nei PE update-sou lo0
R8(config-router)#nei 2.2.2.2 peer-group PE
R8(config-router)#nei 5.5.5.5 peer-group PE
R8(config-router)#nei 6.6.6.6 peer-group PE
R8(config-router)#nei 7.7.7.7 peer-group PE

R8(config-router)#address-family vpnv4
R8(config-router-af)#nei 2.2.2.2 activate
R8(config-router-af)#nei 5.5.5.5 activate
R8(config-router-af)#nei 6.6.6.6 activate
R8(config-router-af)#nei 7.7.7.7 activate

Oke sampai saat ini kita sudah selesai konfigurasi IBGP pada seluruh router PE.. untuk pengujian kita bisa menggunakan perintah berikut

R2(config-router-af)#do sh ip bgp vpnv4 all sum
BGP router identifier 2.2.2.2, local AS number 10
BGP table version is 1, main routing table version 1

Neighbor        V     AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd
5.5.5.5         4     10      10      10        1    0    0 00:05:51        0
6.6.6.6         4     10       8       7        1    0    0 00:05:17        0
7.7.7.7         4     10       6       5        1    0    0 00:03:02        0
8.8.8.8         4     10       2       2        1    0    0 00:00:12        0

Pastikan bahwa setiap router PE sudah bertetangga dengan keempat router PE lainnya..

R5(config-router-af)#do sh ip bgp vpnv4 all sum
BGP router identifier 5.5.5.5, local AS number 10
BGP table version is 1, main routing table version 1

Neighbor        V     AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd
2.2.2.2         4     10      11      11        1    0    0 00:06:56        0
6.6.6.6         4     10       9       8        1    0    0 00:06:19        0
7.7.7.7         4     10       7       6        1    0    0 00:04:05        0
8.8.8.8         4     10       4       3        1    0    0 00:01:12        0

R6(config-router-af)#do sh ip bgp vpnv4 all sum
BGP router identifier 6.6.6.6, local AS number 10
BGP table version is 1, main routing table version 1

Neighbor        V     AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd
2.2.2.2         4     10       9       9        1    0    0 00:06:40        0
5.5.5.5         4     10       9      10        1    0    0 00:06:37        0
7.7.7.7         4     10       7       6        1    0    0 00:04:21        0
8.8.8.8         4     10       4       3        1    0    0 00:01:28        0

R7(config-router-af)#do sh ip bgp vpnv4 all sum
BGP router identifier 7.7.7.7, local AS number 10
BGP table version is 1, main routing table version 1

Neighbor        V     AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd
2.2.2.2         4     10       7       7        1    0    0 00:04:41        0
5.5.5.5         4     10       7       7        1    0    0 00:04:39        0
6.6.6.6         4     10       7       7        1    0    0 00:04:37        0
8.8.8.8         4     10       4       3        1    0    0 00:01:42        0

R8(config-router-af)#do sh ip bgp vpnv4 all sum
BGP router identifier 8.8.8.8, local AS number 10
BGP table version is 1, main routing table version 1

Neighbor        V     AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd
2.2.2.2         4     10       4       5        1    0    0 00:02:06        0
5.5.5.5         4     10       4       5        1    0    0 00:02:01        0
6.6.6.6         4     10       4       5        1    0    0 00:01:59        0
7.7.7.7         4     10       3       4        1    0    0 00:01:57        0

Okeee.. kita sudah selesai dan berhasil.. karena sudah berhasil, artinya pertemuan kita akan berahir lagi yaa.. hehe.. tapi jangan hawatir.. kita akan segera ketemu lagi kog.. karena memang seri superlab ini belum berahir.. hehehe.. pada episode selanjutnya in syaa allah kita akan membahas konfigurasi PE dan CE.. oke sampai jumpa lagi yaa..!!

{ Read More }

Lab 126 - BGP Local AS No Prepend Replace AS

Pada lab sebelumnya kita telah belajar tentang BGP Local AS No Prepend.. nah sekarang di lab ini kita akan bahas materi tentang BGP Local AS No Prepend Replace AS.. Yuppp.. lab ini merupakan solusi untuk masalah terahir yang saya tunjukkan di lab BGP Local AS No Prepend..

Mungkin ada yang belum tau nih masalahnya.. kalau belum tau saya sarankan baca dulu deh lab sebelumnya.. Sekedar mengingatkan ya.. di lab sebelumnya kita punya topologi kayak gini..

Nah tapi masalahnya di R1 ganti AS dari 1 jadi 100.. jadi kita perlu mengkonfigurasikan BGP Local AS agar di R2 tidak perlu mengubah konfigurasi.. tapi ada masalah tuh.. di R2, route untuk menuju 1.1.1.1 AS Pathnya jadi doble, yaitu 1 (AS lama) dan juga 100 (AS baru).. kayak gini nih..

R2(config-router)#do sh ip bgp
BGP table version is 16, local router ID is 2.2.2.2
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, 
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, 
              x best-external, a additional-path, c RIB-compressed, 
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path
 *>  1.1.1.1/32       12.12.12.1               0             0 1 100 i
 *>  2.2.2.2/32       0.0.0.0                  0         32768 i
 *>  3.3.3.3/32       23.23.23.3               0             0 3 i

nah lhooo ada masalah juga tuh.. masak R2 kalo pengen ke 1.1.1.1 AS Path nya dobel gitu.. 1 dan 100.. bukannya AS 1 itu AS nya R1 yang lama dan AS 100 itu AS nya R1 yang baru.. kog bisa kedua AS tersebut muncul di AS Path ya.. hehehe

Mau lihat juga di R3?? kita coba lihat yaa

R3(config-router)#do sh ip bgp
BGP table version is 20, local router ID is 3.3.3.3
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, 
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, 
              x best-external, a additional-path, c RIB-compressed, 
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path
 *>  1.1.1.1/32       23.23.23.2                             0 2 1 100 i
 *>  2.2.2.2/32       23.23.23.2               0             0 2 i
 *>  3.3.3.3/32       0.0.0.0                  0         32768 i

Hahahaha ternyata di R3 juga bermasalah tuh..

Untuk mengatasi masalah tersebut.. kita bisa mengkonfigurasikan BGP Local AS no prepend replace as... kyak gini nih konfig nya..

R1(config)#router bgp 100
R1(config-router)#neighbor 12.12.12.2 local-as 1 no-prepend replace-as 

Sekarang kita coba cek lagi di R2 yaa

R2(config-router)#do sh ip bgp
BGP table version is 18, local router ID is 2.2.2.2
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, 
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, 
              x best-external, a additional-path, c RIB-compressed, 
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path
 *>  1.1.1.1/32       12.12.12.1               0             0 1 i
 *>  2.2.2.2/32       0.0.0.0                  0         32768 i
 *>  3.3.3.3/32       23.23.23.3               0             0 3 i

Tuh.. udah bener kan.. sekarang AS Pathnya sudah bener tuh.. gak dua duanya di pake (1 dan 100).. yang kepake jadinya tinggal yang local as aja (yang AS 1).. gimana nih kalau di R3?? mau lihat??

R3(config-router)#do sh ip bgp
BGP table version is 18, local router ID is 3.3.3.3
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, 
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, 
              x best-external, a additional-path, c RIB-compressed, 
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path
 *>  1.1.1.1/32       23.23.23.2                             0 2 1 i
 *>  2.2.2.2/32       23.23.23.2               0             0 2 i
 *>  3.3.3.3/32       0.0.0.0                  0         32768 i

tuh.. udah bener juga yaaa.. oke udah ngerti kan?? sip2.. sampai disini dulu yaa.. semoga bermanfaat..

{ Read More }

Lab 125 - BGP Local AS No Prepend

Wahhhhh masih lanjut terus nih lab BGP nya.. hehehe.. kali ini kita akan belajar tentang BGP local AS ya.. sebenarnya dulu sudah pernah saya bahas sih tentang apa itu BGP Local AS.. tapi pembahasan pada lab yang dulu masih belum mendetail.. masih banyak fitur-fitur BGP Local AS yang belum saya jelaskan.. jadi sekarang saya akan membahas tentang BGP Local AS kembali..

Ada yang masih ingat apa itu BGP Local AS?? Lupa?? oke ndak masalah.. kita akan bahas dari dasar deh.. pertama kita buat dulu topologi seperti ini yaaa

Asumsinya kita udah konfig ip address standard IDN ya.. sekarang tinggal kita konfig BGP nya..

R1(config-router)#do sh run | s r b
router bgp 1
 bgp log-neighbor-changes
 network 1.1.1.1 mask 255.255.255.255
 neighbor 12.12.12.2 remote-as 2

R2(config-router)#do sh run | s r b
router bgp 2
 bgp log-neighbor-changes
 network 2.2.2.2 mask 255.255.255.255
 neighbor 12.12.12.1 remote-as 1
 neighbor 23.23.23.3 remote-as 3

R3(config-router)#do sh run | s r b
router bgp 3
 bgp log-neighbor-changes
 network 3.3.3.3 mask 255.255.255.255
 neighbor 23.23.23.2 remote-as 2

Sekarang kita coba lihat hasilnya di seluruh router..

R1(config-router)#do sh ip bgp
BGP table version is 4, local router ID is 1.1.1.1
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, 
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, 
              x best-external, a additional-path, c RIB-compressed, 
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path
 *>  1.1.1.1/32       0.0.0.0                  0         32768 i
 *>  2.2.2.2/32       12.12.12.2               0             0 2 i
 *>  3.3.3.3/32       12.12.12.2                             0 2 3 i

R2(config-router)#do sh ip bgp 
BGP table version is 12, local router ID is 2.2.2.2
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, 
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, 
              x best-external, a additional-path, c RIB-compressed, 
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path
 *>  1.1.1.1/32       12.12.12.1               0             0 1 i
 *>  2.2.2.2/32       0.0.0.0                  0         32768 i
 *>  3.3.3.3/32       23.23.23.3               0             0 3 i

R3(config-router)#do sh ip bgp
BGP table version is 12, local router ID is 3.3.3.3
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, 
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, 
              x best-external, a additional-path, c RIB-compressed, 
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path
 *>  1.1.1.1/32       23.23.23.2                             0 2 1 i
 *>  2.2.2.2/32       23.23.23.2               0             0 2 i
 *>  3.3.3.3/32       0.0.0.0                  0         32768 i

Okeee normal yaa... tabel routing di seluruh router sudah lengkap yaaa...

Sekarang tiba2 ada sebuah masalah nih di kantor A (AS 1).. Kantor A ternyata berganti AS dari 1 ke 100.. oke kita tinggal ganti AS nya di R1 yaa

R1(config)#no router bgp 1

R1(config)#router bgp 100
R1(config-router)#neigh 12.12.12.2 remote-as 2
R1(config-router)#net 1.1.1.1 mask 255.255.255.255

Kira2 giaman hasilnya?? tentu saja R1 dan R2 tidak akan adjacency... kenapa?? kan di R2 kita konfignya neighbor 12.12.12.1 remote-as 1 bukan remote-as 100.. sedangkan di R1 AS nya sudah berganti menjadi 100... nah lhoo.. gimana nih?? masak iya saat kantor A berganti AS,kita harus menyuruh kantor lain (AS Lain) mengganti konfigurasi juga?? sepertinya ndak mungkin deh..

Jadi solusinya, kita bisa menggunakan local AS.. gini nih konfig nya..

R1(config)#router bgp 100
R1(config-router)#neighbor 12.12.12.2 local-as 1

nah setelah konfig bgp local-as.. baru deh nda error lagi..

R1(config-router)#do sh ip bgp summ
BGP router identifier 1.1.1.1, local AS number 100
BGP table version is 4, main routing table version 4
3 network entries using 444 bytes of memory
3 path entries using 192 bytes of memory
3/3 BGP path/bestpath attribute entries using 408 bytes of memory
2 BGP AS-PATH entries using 48 bytes of memory
0 BGP route-map cache entries using 0 bytes of memory
0 BGP filter-list cache entries using 0 bytes of memory
BGP using 1092 total bytes of memory
BGP activity 3/0 prefixes, 3/0 paths, scan interval 60 secs

Neighbor        V     AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd
12.12.12.2      4      2      10       6        4    0    0 00:01:53        2

Tuh.. udah adjacency kan antara R1 dan R2.. R1 juga sudah menerima 2 prefix dari R2.. sekarang kita coba cek tabel routing BGP di R1

R1(config-router)#do sh ip bgp
BGP table version is 4, local router ID is 1.1.1.1
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, 
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, 
              x best-external, a additional-path, c RIB-compressed, 
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path
 *>  1.1.1.1/32       0.0.0.0                  0         32768 i
 *>  2.2.2.2/32       12.12.12.2               0             0 1 2 i
 *>  3.3.3.3/32       12.12.12.2                             0 1 2 3 i

nah lhooo.. tau gak kalau sebenarnya disini ada masalah?? coba deh bandingin dengan tabel routing BGP di R1 saat AS nya masih 1..

R1(config-router)#do sh ip bgp
BGP table version is 4, local router ID is 1.1.1.1
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, 
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, 
              x best-external, a additional-path, c RIB-compressed, 
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path
 *>  1.1.1.1/32       0.0.0.0                  0         32768 i
 *>  2.2.2.2/32       12.12.12.2               0             0 2 i
 *>  3.3.3.3/32       12.12.12.2                             0 2 3 i

Oke.. ngerti kan bedanya?? pada tabel routing BGP R1 setelah berganti AS.. terdapat AS 1 (AS nya sendiri) pada AS path.. nah untuk mengatasi masalah ini.. kita bisa menggunakan Local AS No Prepend seperti ini ..

R1(config)#router bgp 100
R1(config-router)#nei 12.12.12.2 local-as 1 no-prepend 

Kita coba cek hasilnya di R1 yaaa

R1(config-router)#do sh ip bgp
BGP table version is 8, local router ID is 1.1.1.1
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, 
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, 
              x best-external, a additional-path, c RIB-compressed, 
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path
 *>  1.1.1.1/32       0.0.0.0                  0         32768 i
 *>  2.2.2.2/32       12.12.12.2               0             0 2 i
 *>  3.3.3.3/32       12.12.12.2                             0 2 3 i

Oke sudah bener kan.. sekarang AS 1 sudah gak ada di AS Path..

Oh yaa..kita baru cek tabel routing BGP di R1.. kita belum cek di R2 nih.. coba kita cek yaa.. kira2 ada masalah juga nda ya?? hehe penuh masalah nih kayaknya BGP nya.. hehe

R2(config-router)#do sh ip bgp
BGP table version is 16, local router ID is 2.2.2.2
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, 
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, 
              x best-external, a additional-path, c RIB-compressed, 
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path
 *>  1.1.1.1/32       12.12.12.1               0             0 1 100 i
 *>  2.2.2.2/32       0.0.0.0                  0         32768 i
 *>  3.3.3.3/32       23.23.23.3               0             0 3 i

nah lhooo ada masalah juga tuh.. masak R2 kalo pengen ke 1.1.1.1 AS Path nya dobel gitu.. 1 dan 100.. bukannya AS 1 itu AS nya R1 yang lama dan AS 100 itu AS nya R1 yang baru.. kog bisa kedua AS tersebut muncul di AS Path ya.. hehehe

Untuk mengatasi masalah ini kita bisa mengkonfigurasikan BGP Local AS No Prepend Replace AS.. materi tersebut akan saya bahas pada lab selanjutnya, lab 126, In Syaa Allah.. Untuk lab ini sampai disini dulu ya.. hehe.. semoga bermanfaat...

{ Read More }

Lab 124 - BGP Aggregation Advertise Map

Lanjtut yaaa belajar BGP nya.. sekarang kita akan belajar fitur advertise map pada aggregation BGP.. langsung lab aja ya.. nanti teorinya saya jelaskan sambil ngelab nya.. Berikut topologi yang akan kita gunakan pada lab ini

Pertama kita konfig BGP nya dulu ya.. oya diasumsikan ip address sudah di konfig standard idn ya..

R1(config)#do sh run | s r b
router bgp 12
 bgp log-neighbor-changes
 network 1.1.0.0 mask 255.255.255.0
 network 1.1.1.0 mask 255.255.255.0
 network 1.1.2.0 mask 255.255.255.0
 network 1.1.3.0 mask 255.255.255.0
 neighbor 13.13.13.3 remote-as 3

neighbor 12.12.12.2 remote-as 12

R2(config-router)#do sh run | s r b
router bgp 12
 bgp log-neighbor-changes
 network 1.1.4.0 mask 255.255.255.0
 network 1.1.5.0 mask 255.255.255.0
 network 1.1.6.0 mask 255.255.255.0
 network 1.1.7.0 mask 255.255.255.0
 neighbor 23.23.23.3 remote-as 3

neighbor 12.12.12.1 remote-as 12

R3(config-router)#do sh run | s r b
router bgp 3
 bgp log-neighbor-changes
 neighbor 13.13.13.1 remote-as 12
 neighbor 23.23.23.2 remote-as 12
 neighbor 34.34.34.4 remote-as 4

R4(config-router)#do sh run | s r b
router bgp 4
 bgp log-neighbor-changes
 neighbor 34.34.34.3 remote-as 3

Kita lihat hasilnya di R3 yaa

R4(config-router)#do sh ip bgp
BGP table version is 27, local router ID is 34.34.34.4
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, 
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, 
              x best-external, a additional-path, c RIB-compressed, 
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path
 *>  1.1.0.0/24       34.34.34.3                             0 3 12 i
 *>  1.1.1.0/24       34.34.34.3                             0 3 12 i
 *>  1.1.2.0/24       34.34.34.3                             0 3 12 i
 *>  1.1.3.0/24       34.34.34.3                             0 3 12 i
 *>  1.1.4.0/24       34.34.34.3                             0 3 12 i
 *>  1.1.5.0/24       34.34.34.3                             0 3 12 i
 *>  1.1.6.0/24       34.34.34.3                             0 3 12 i
 *>  1.1.7.0/24       34.34.34.3                             0 3 12 i

Oke R3 sudah punya informasi prefix yang lengkap dalam BGP..

Sekarang kita lakukan summarization di R3 yaa

R3(config)#router bgp 3
R3(config-router)#aggregate-address 1.1.0.0 255.255.248.0 as-set summary-only 

Kita coba lihat hasilnya di R4..

R4(config-router)#do sh ip bgp
BGP table version is 38, local router ID is 34.34.34.4
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, 
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, 
              x best-external, a additional-path, c RIB-compressed, 
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path
 *>  1.1.0.0/21       34.34.34.3               0             0 3 12 i

Oke hasilnya normal ya...

Sekarang ada sedikit masalah nih.. R1 akan mengkonfigurasikan prefix 1.1.0.0/24 dengan community no-advertise

R1(config)#access-list 1 permit 1.1.0.0 0.0.0.255
R1(config)#route-map set-com
R1(config-route-map)#match ip address 1
R1(config-route-map)#set community no-advertise

R1(config-route-map)#router bgp 12
R1(config-router)#nei 13.13.13.3 route-map set-com out
R1(config-router)#nei 13.13.13.3 send-community
R1(config-router)#do cle ip bgp * soft

Sebenarnya ini masalah sepele.. tapi akibatnya bisa besar lho.. kita coba lihat R3 yaa

R4(config-router)#do sh ip bgp
R4(config-router)#

Tuh kannn.... di R4 jadi hilang prefix hasil summary nya.. kenapa demikian?? karena R3 melakukan summary pada network 1.1.0.0/21,, dan salah satu prefix nya (1.1.0.0/24) memiliki community no-advertise.. jadi akibatnya semua prefix akan terpengaruhi dan tidak akan diadvertise kemanapun...

Untuk mengatasi masalah ini.. kita bisa melakukan summary pada beberapa prefix saja menggunakan advertisemap pada R3 seperti berikut

R3(config)#ip prefix-list advertise-map deny 1.1.0.0/24 
R3(config)#ip prefix-list advertise-map permit 1.1.0.0/21 ge 24 le 24
R3(config)#route-map to-aggregate
R3(config-route-map)#match ip address prefix-list advertise-map

R3(config-route-map)#router bgp 3
R3(config-router)# aggregate-address 1.1.0.0 255.255.248.0 as-set summary-only 
advertise-map to-aggregate

Perhatikan bahwa kita membuat prefix list.. pertama mendeny network 1.1.0.0/24.. artinya nanti prefix 1.1.0.0/24 tidak akan diikutkan dalam summarization..

Kita coba cek hasilnya di R4 yaa

R4(config-router)#do sh ip bgp
BGP table version is 42, local router ID is 34.34.34.4
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, 
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, 
              x best-external, a additional-path, c RIB-compressed, 
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path
 *>  1.1.0.0/21       34.34.34.3               0             0 3 12 i

Okeee sudah berhasil kan..

Oke sampai disini dulu ya.. semoga bermanfaat..

{ Read More }

Lab 123 - BGP Aggregation Attribute MAP

Wihh banyak banget nih fitur-fitur nya BGP.. bahas BGP ga habis2 nih.. hehe.. kali ini kita akan belajar tentang attribute map pada BGP.. makanan apa lagi nih attribute map??? seperti biasa yaa... kita langsung ngelab aja.. nanti stelah ngelab tmen2 juga tau sendiri apa itu attribute map.. kelamaan kalau bahas teori.. hehe

Okeoke kita akan pake topologi ini yaa

Pertama kita konfig BGP nya dulu ya.. asumsinya kita udah konfig ip address standard IDN yaa.. berikut konfig BGP nya..

R1
access-list 1 permit 1.1.0.0 0.0.0.255
access-list 1 permit 1.1.1.0 0.0.0.255
access-list 1 permit 1.1.2.0 0.0.0.255
access-list 1 permit 1.1.3.0 0.0.0.255
!
route-map loopback permit 10
 match ip address 1
!
router bgp 1
 bgp log-neighbor-changes
 redistribute connected route-map loopback
 neighbor 12.12.12.2 remote-as 2

R2(config-router)#do sh run | s r b
router bgp 2
 bgp log-neighbor-changes
 neighbor 12.12.12.1 remote-as 1
 neighbor 23.23.23.3 remote-as 3

R3(config-router)#do sh run | s r b
router bgp 3
 bgp log-neighbor-changes
 neighbor 23.23.23.2 remote-as 2

Sekarang kita lihat hasilnya yaa

R3(config-router)#do sh ip bgp
BGP table version is 5, local router ID is 23.23.23.3
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, 
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, 
              x best-external, a additional-path, c RIB-compressed, 
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path
 *>  1.1.0.0/24       23.23.23.2                             0 2 1 ?
 *>  1.1.1.0/24       23.23.23.2                             0 2 1 ?
 *>  1.1.2.0/24       23.23.23.2                             0 2 1 ?
 *>  1.1.3.0/24       23.23.23.2                             0 2 1 ?

Oke masih normal yaa... sekarang kita akan mengkonfigurasikan summarization dengan aggregation di R2

R2(config)#router bgp 2
R2(config-router)#aggregate-address 1.1.0.0 255.255.252.0 summary-only as-set 
R2(config-router)#do cle ip bgp * soft

Masih ada yang belum tau tentang perintah as-set diatas?? kalo belum.. silahkan baca lab sebelumnya disini yaa..

Kita lihat hasilnya di R3

R3(config-router)#do sh ip bg
BGP table version is 10, local router ID is 23.23.23.3
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, 
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, 
              x best-external, a additional-path, c RIB-compressed, 
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path
 *>  1.1.0.0/22       23.23.23.2               0             0 2 1 ?

Oke.. di R3 sudah tersummary ya.. sekarang kita mau konfig attribute map nih.. attribute map ini bisa kita gunakan untuk memodifikasi attribute dari prefix yang di aggregate menggunakan as-set..

Pada contoh diatas, origin dari prefix yang kita aggregate di R2 adalah incomplate.. nah dengan menggunakan attribute map ini kita bisa memodifikasi origin nya menjadi IGP.. kita coba yaa

R2(config)#route-map manipulate-origin
R2(config-route-map)#set origin igp
R2(config-route-map)#exit
R2(config)#router bgp 2
R2(config-router)# aggregate-address 1.1.0.0 255.255.252.0 as-set summary-only 
attribute-map manipulate-origin

perhatikan bahwa kita membuat route-map di R2, namun tidak ada parameter match. kalau seperti ini artinya untuk semuanya..

sekarang kita coba lihat hasilnya lagi di R3 yaa

R3(config-router)#do sh ip bgp
BGP table version is 11, local router ID is 23.23.23.3
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, 
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, 
              x best-external, a additional-path, c RIB-compressed, 
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path
 *>  1.1.0.0/22       23.23.23.2               0             0 2 1 i

Nah perhatikan sekarang origin nya sudah berganti menjadi IGP...

Sekarang kita buat contoh kasus lain.. misal kita mengkonfigurasikan community no-advertise pada R1..

R1(config)#ip prefix-list prefix-24 permit 1.1.0.0/22 ge 24 le 24

R1(config)#route-map com-no-advertise
R1(config-route-map)#match ip address prefix-list prefix-24
R1(config-route-map)#set community no-advertise 
R1(config-route-map)#exit

R1(config)#router bgp 1
R1(config-router)#nei 12.12.12.2 route-map com-no-advertise out
R1(config-router)#nei 12.12.12.2 send-community 

Kita lihat hasilnya di R2

R2(config)#do sh ip bgp 1.1.0.0
BGP routing table entry for 1.1.0.0/24, version 12
Paths: (1 available, best #1, table default, not advertised to any peer, 
Advertisements suppressed by an aggregate.)
  Not advertised to any peer
  Refresh Epoch 1
  1
    12.12.12.1 from 12.12.12.1 (1.1.3.1)
      Origin incomplete, metric 0, localpref 100, valid, external, best
      Community: no-advertise

Perhatikan bahwa community nya no-advertise, jadi prefix ini tidak akan diadvertise kemanapun.. alhasil R3 pun tidak akan punya informasi tentang prefix ini

R3(config-router)#do sh ip bgp
R3(config-router)#

Teruss bagaimana dong??? tenang... kita bisa manipulasi prefix ini menggunakan attribute map pada R2...

R2(config)#route-map remove-community
R2(config-route-map)#set community none
R2(config-route-map)#exit

R2(config)#router bgp 2
R2(config-router)#aggregate-address 1.1.0.0 255.255.252.0 as-set summary-only
attribute-map remove-community
R2(config-router)#do cle ip bgp * soft

Sekarang kita coba lihat lagi di R2

R2(config-router)#do sh ip bgp 1.1.0.0
BGP routing table entry for 1.1.0.0/24, version 12
Paths: (1 available, best #1, table default, not advertised to any peer, 
Advertisements suppressed by an aggregate.)
  Not advertised to any peer
  Refresh Epoch 2
  1
    12.12.12.1 from 12.12.12.1 (1.1.3.1)
      Origin incomplete, metric 0, localpref 100, valid, external, best
      Community: no-advertise

Perhatikan bahwa keterangan di R2 masih tetap tidak diadvertise kemanapun,,, karena community nya no-advertise.. tapi coba kita lihat di R3..

R3(config-router)#do sh ip bgp
BGP table version is 13, local router ID is 23.23.23.3
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, 
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, 
              x best-external, a additional-path, c RIB-compressed, 
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path
 *>  1.1.0.0/22       23.23.23.2               0             0 2 1 ?

Perhatikan bahwa R3 sudah punya informasi tentang prefix 1.1.0.0/22... Oke kira2 bisa dimengerti ya?? intinya attribute map BGP itu fungsinya untuk menghilangkan atau memodifikasi attribute pada prefix yang diaggregate...

{ Read More }

Lab 122 - BGP Aggregation AS-Set

Masih lanjut belajar BGP yaaa.. lab lab sebelumnya kita sudah membahas tentang summarization.. nah lab ini masih ada hubungannya nih dengan summarization..

Saya bingung nih kalau mau jelasin teorinya.. mending langsung ngelab aja ya.. nanti tmen2 juga paham sendiri kalu udah selesai lab nya.. hehe.. kita pake topologi ini yaa

Pertama kita konfigurasikan BGP yang normal-normal aja dulu ya.. asumsinya kita udah konfigurasi IP address standard IDN yaa

R1(config-router)#do sh run | s r b
router bgp 1
 bgp log-neighbor-changes
 network 1.1.0.1 mask 255.255.255.255
 network 1.1.1.1 mask 255.255.255.255
 network 1.1.2.1 mask 255.255.255.255
 network 1.1.3.1 mask 255.255.255.255
 neighbor 12.12.12.2 remote-as 2

R2(config-router)#do sh run | s r b
router bgp 2
 bgp log-neighbor-changes
 neighbor 12.12.12.1 remote-as 1
 neighbor 23.23.23.3 remote-as 3

R3(config-router)#do sh run | s r b
router bgp 3
 bgp log-neighbor-changes
 neighbor 23.23.23.2 remote-as 2

Oke.. kita lihat hasilnya yaa

R2(config-router)#do sh ip bgp
BGP table version is 25, local router ID is 23.23.23.2
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, 
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, 
              x best-external, a additional-path, c RIB-compressed, 
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path
 *>  1.1.0.1/32       12.12.12.1               0             0 1 i
 *>  1.1.1.1/32       12.12.12.1               0             0 1 i
 *>  1.1.2.1/32       12.12.12.1               0             0 1 i
 *>  1.1.3.1/32       12.12.12.1               0             0 1 i

R3(config-router)#do sh ip bgp
BGP table version is 25, local router ID is 23.23.23.3
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, 
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, 
              x best-external, a additional-path, c RIB-compressed, 
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path
 *>  1.1.0.1/32       23.23.23.2                             0 2 1 i
 *>  1.1.1.1/32       23.23.23.2                             0 2 1 i
 *>  1.1.2.1/32       23.23.23.2                             0 2 1 i
 *>  1.1.3.1/32       23.23.23.2                             0 2 1 i

Sip2.. R2 dan R3 sudah mempunyai route ke seluruh IP loopback R1. Nah sekarang contoh kasusnya adalah, kita pengen agar R2 tetap memiliki full route seperti diatas, namun R3 hanya memiliki route summary saja..

Untuk itu kita harus melakukan summarization di R2, jika kita melakukan summarization di R1, nantinya R2 juga hanya memiliki route hasil summary saja.. padahal kan kita pengen agar R2 masih punya full route.. Oke langsung saja kita konfigurasikan summarization di R2

R2(config)#router bgp 2
R2(config-router)#aggregate-address 1.1.0.0 255.255.252.0 summary-only

R2(config-router)#do cle ip bgp * soft

Kita lihat hasilnya di R2 dan R3 yaa

R2(config-router)#do sh ip bgp
BGP table version is 30, local router ID is 23.23.23.2
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, 
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, 
              x best-external, a additional-path, c RIB-compressed, 
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path
 *>  1.1.0.0/22       0.0.0.0                            32768 i
 s>  1.1.0.1/32       12.12.12.1               0             0 1 i
 s>  1.1.1.1/32       12.12.12.1               0             0 1 i
 s>  1.1.2.1/32       12.12.12.1               0             0 1 i
 s>  1.1.3.1/32       12.12.12.1               0             0 1 i

R3(config-router)#do sh ip bgp
BGP table version is 30, local router ID is 23.23.23.3
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, 
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, 
              x best-external, a additional-path, c RIB-compressed, 
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path
 *>  1.1.0.0/22       23.23.23.2               0             0 2 i

Perhatikan bahwa R2 masih punya full route, sedangkan R3 hanya punya 1 ruote hasil summary saja.. sesuai dengan contoh kasusnya ya..

Tapi ada sedikit masalah nih di R3.. coba lihat AS Path nya.. AS Path di R3 untuk menuju 1.1.0.0/22 hanya melalui AS 2 saja.. bukannya yang mengadvertise network 1.1.0.0/22 ini harusnya R1?? kog AS 1 tidak masuk dalam AS Path??

Coba kita lihat lebih detail ya

R3(config-router)#do sh ip bgp 1.1.0.0
BGP routing table entry for 1.1.0.0/22, version 26
Paths: (1 available, best #1, table default)
  Not advertised to any peer
  Refresh Epoch 5
  2, (aggregated by 2 23.23.23.2)
    23.23.23.2 from 23.23.23.2 (23.23.23.2)
      Origin IGP, metric 0, localpref 100, valid, external, atomic-aggregate, best

Perhatikan bahwa AS Path nya hanya berhenti sampai AS nya aggregator saja, yaitu R2 (AS 2).. ini bisa jadi masalah nih.. AS Path ini bisa digunakan untuk looping prevention.. jadi kalau seperti ini, nanti ada beberapa kasus yang bisa menyebabkan looping..

ingat peraturan ini "router BGP akan mereject prefix yang dalam as pathnya ada AS nya sendiri".. nah masalahnya bagaimana jika suatu saat R1 menerima prefix 1.1.0.0/22 dari R3?? kan prefix tersebut tidak mengandung AS 1? jadi R1 akan menerimanya.. padahal kan 1.1.0.0/22 itu dari R1 sendiri?? wah looping dong??? Iya.. bisa2 loopoing!!

Untuk mencegahnya, kita harus menambahkan parameter as-set saat melakukan aggregation di R2.. seperti ini nih..

R2(config)#router bgp 2
R2(config-router)#aggregate-address 1.1.0.0 255.255.252.0 summary-only as-set
R2(config-router)#do cle ip bgp * soft

Kita lihat hasilnya di R3 ya....

R3(config-router)#do sh ip bgp
BGP table version is 31, local router ID is 23.23.23.3
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, 
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, 
              x best-external, a additional-path, c RIB-compressed, 
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path
 *>  1.1.0.0/22       23.23.23.2               0             0 2 1 i

Oke... sekarang AS Pathnya sudah lengkap.. ngerti kan bedanya?? sip2 mantab...

Kita coba lihat lebih detail yaa..

R3(config-router)#do sh ip bgp 1.1.0.0 
BGP routing table entry for 1.1.0.0/22, version 31
Paths: (1 available, best #1, table default)
  Not advertised to any peer
  Refresh Epoch 6
  2 1, (aggregated by 2 23.23.23.2)
    23.23.23.2 from 23.23.23.2 (23.23.23.2)
      Origin IGP, metric 0, localpref 100, valid, external, best

Perhatikan bahwa yang menjadi aggregator tetap 23.23.23.2 (R2) dengan AS 2. namun sekarang AS Pathnya sudah lengkap..

Oke sampai disini dulu ya.. semoga bermanfaat...

{ Read More }

Lab 121 - BGP Suppress & UnSuppress-Map

Wah rajin banget ini belajar BGP nya.. hehe.. masih lanjut dengan BGP ya... sekarang kita akan belajar tentang Suppress & UnSuppress Map pada BGP..

Sebenarnya dulu saya telah membahas tentang apa itu suppress map BGP pada lab summarization dengan Agregation. Tapi pada lab ini saya akan menunjukkan lagi tentang apa itu suppress map.. agar tmen-tmen semua bisa membandingkan antara suppress map dan unsuppress map..

Oke langsung aja kita ngelab ya.. ini topologinya

Kita akan coba praktikkan suppress map dulu ya.. Berikut konfigurasi di R1

access-list 1 permit 1.1.1.0 0.0.0.255
access-list 1 permit 1.1.4.0 0.0.0.255
access-list 1 permit 1.1.5.0 0.0.0.255
access-list 1 permit 1.1.6.0 0.0.0.255
access-list 1 permit 1.1.7.0 0.0.0.255

route-map supres permit 10
 match ip address 1

router bgp 1
 bgp log-neighbor-changes
 network 1.1.0.0 mask 255.255.255.0
 network 1.1.1.0 mask 255.255.255.0
 network 1.1.2.0 mask 255.255.255.0
 network 1.1.3.0 mask 255.255.255.0
 network 1.1.4.0 mask 255.255.255.0
 network 1.1.5.0 mask 255.255.255.0
 network 1.1.6.0 mask 255.255.255.0
 network 1.1.7.0 mask 255.255.255.0
 aggregate-address 1.1.0.0 255.255.248.0 suppress-map supres
 neighbor 12.12.12.2 remote-as 2

Berikut konfigurasi di R2

router bgp 2
 bgp log-neighbor-changes
 neighbor 12.12.12.1 remote-as 1

Kita coba lihat hasilnya yaa

R2(config-router)#do sh ip bgp
BGP table version is 43, local router ID is 12.12.12.2
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, 
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, 
              x best-external, a additional-path, c RIB-compressed, 
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path
 *>  1.1.0.0/24       12.12.12.1               0             0 1 i
 *>  1.1.0.0/21       12.12.12.1               0             0 1 i
 *>  1.1.2.0/24       12.12.12.1               0             0 1 i
 *>  1.1.3.0/24       12.12.12.1               0             0 1 i

Perhatikan bahwa R2 punya route ke 1.1.0.0/21 (hasil summary) dan ke 1.1.0.0/24, 1.1.2.0/24, dan 1.1.3.0/24.. Perhatikan bahwa pada R1 kita melakukan konfigurasi suppress map.. suppress map itu artinya kita ingin mensummary ip berapa saja gitu.. di R1 kita bikin acl tentang 1.1.1.0, terus 1.1.3.0, 1.1.4.0, 1.1.5.0, 1.1.6.0, dan 1.1.7.0.. jadi yang di summary yang ip yang di permit di acl itu aja.. yang lain ga di summary..

Nah sekarang apa itu unsuppress map?? unsuppress map itu ya kebalikannya dari suppress map.. kalau suppress map itu ip berapa saja yang pengen kita summary, kalau unsuppressmap itu ip berapa saja yang ga pengen kita summary..

Misal nih.. kita pengen agar ip loopback R1 disummary semua kecuali 1.1.0.0/24, 1.1.2.0/24, dan 1.1.3.0/24.. nah untuk mengerjakan kasus tersebut, kita bisa aja pake suppress map kayak contoh diatas.. tapi lebih evisien pake unsuppress map.. nih kalau ndak percaya.. kita akan ubah konfigurasi di R1 ya..

access-list 2 permit 1.1.0.0 0.0.0.255
access-list 2 permit 1.1.2.0 0.0.0.255
access-list 2 permit 1.1.3.0 0.0.0.255

route-map unsupres permit 10
 match ip address 2


router bgp 1
 bgp log-neighbor-changes
 network 1.1.0.0 mask 255.255.255.0
 network 1.1.1.0 mask 255.255.255.0
 network 1.1.2.0 mask 255.255.255.0
 network 1.1.3.0 mask 255.255.255.0
 network 1.1.4.0 mask 255.255.255.0
 network 1.1.5.0 mask 255.255.255.0
 network 1.1.6.0 mask 255.255.255.0
 network 1.1.7.0 mask 255.255.255.0
 aggregate-address 1.1.0.0 255.255.248.0 summary-only
 neighbor 12.12.12.2 remote-as 2
 neighbor 12.12.12.2 unsuppress-map unsupres

Kita coba lihat hasilnya di R2..

R2(config-router)#do sh ip bgp
BGP table version is 5, local router ID is 12.12.12.2
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, 
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, 
              x best-external, a additional-path, c RIB-compressed, 
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path
 *>  1.1.0.0/24       12.12.12.1               0             0 1 i
 *>  1.1.0.0/21       12.12.12.1               0             0 1 i
 *>  1.1.2.0/24       12.12.12.1               0             0 1 i
 *>  1.1.3.0/24       12.12.12.1               0             0 1 i

Perhatikan bahwa hasil di R2 sudah sesuai dengan contoh kasusnya...

Perhatikan baik dengan suppress map maupun dengan unsupress map, hasilnya sama saja.. namun dengan suppressmap, kita harus membuat acl sebanyak 5 kali.. sedangkan dengan unsuppress map kita hanya perlu membuat 3 acl.. jadi lebih baik pake suppress map atau unsuppress map?? jawabannya adalah sesuai kebutuhan!!

O ya.. kita mau sedikit belajar mengamati route nih di R1..

R1(config-router)#do sh ip bgp 1.1.1.0
BGP routing table entry for 1.1.1.0/24, version 54
Paths: (1 available, best #1, table default, Advertisements suppressed by an 
aggregate.)
  Not advertised to any peer
  Refresh Epoch 1
  Local
    0.0.0.0 from 0.0.0.0 (1.1.7.1)
    Origin IGP, metric 0, localpref 100, weight 32768, valid, sourced, local,best
R1(config-router)#do sh ip bgp 1.1.2.0
BGP routing table entry for 1.1.2.0/24, version 55
Paths: (1 available, best #1, table default, Advertisements suppressed by an 
aggregate.)
  Advertised to update-groups:
     5         
  Refresh Epoch 1
  Local
    0.0.0.0 from 0.0.0.0 (1.1.7.1)
   Origin IGP, metric 0, localpref 100, weight 32768, valid, sourced, local, best
R1(config-router)#do sh ip bgp update-group 5
BGP version 4 update-group 5, external, Address Family: IPv4 Unicast
  BGP Update version : 60/0, messages 0
  Route map for selective unsuppress is unsupres
  Topology: global, highest version: 60, tail marker: 60
  Format state: Current working (OK, last minimum advertisement interval)
                Refresh blocked (not in list, last not in list)
  Update messages formatted 2, replicated 2, current 0, refresh 0, limit 1000
  Number of NLRIs in the update sent: max 3, min 0
  Minimum time between advertisement runs is 30 seconds
  Has 1 member:
   12.12.12.2      

Perhatikan bahwa network 1.1.1.0 tidak diadvertise kemanapun oleh R1, sedangkan network 1.1.2.0 diadvertise ke group 5, dimana update-group 5 tersebut memiliki anggota 12.12.12.2 (R2). artinya 1.1.2.0 akan diadvertise ke R2.

Oke sampai disini dulu ya.. semoga bermanfaat..

{ Read More }

Lab 120 - Manual BGP Summarization Null0

Belum bosen kan dengan BGP?? hehehe.. asik banget belajar BGP, banyak banget fitur nya.. jadi jangan bosen yaaaa..

Masih lanjut sama BGP ya.. sekarang kita akan belajar summarization pada BGP nih.. ternyata ada banyak cara yang bisa kita gunakan untuk melakukan summarization di BGP.. dulu pernah nulis BGP Summarization dengan cara Agregation.. Sekarang kita akan belajar melakukan summarization pada BGP dengan cara lain.

Oke langsung aja ngelab ya.. berikut topologi yang akan kita gunakan

Pada topologi ditas, saya akan melakukan summary pada R1, agar R2 tidak perlu memiliki entry route sebanyak 8, namun cukup 1 tapi sudah mencangkup ke delapan ip loopback R1.

Oke langsung saja kita konfigurasikan,,, berikut konfigurasinya

R1(config)#ip route 1.1.0.0 255.255.248.0 null0

R1(config)#router bgp 1
R1(config-router)#nei 12.12.12.2 remote-as 2
R1(config-router)#net 1.1.0.0 mask 255.255.248.0

R2(config-if)#router bgp 2
R2(config-router)#nei 12.12.12.1 remote-as 1

Pada R1, kita mengadvertise 1.1.0.0 dengan netmask 255.255.248.0.. network dan subnetmask tersebut merupakan hasil penghitungan summarization dari ip loopback R1...

Perhatikan bahwa kita perlu menambahkan static route dengan gateway null0.. kenapa ini perlu di tambahkan?? dulu saya sudah pernah membahas apa sih null0 pada summary??

Kita coba lihat hasilnya di R2

R2(config-router)#do sh ip bgp
BGP table version is 2, local router ID is 12.12.12.2
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, 
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, 
              x best-external, a additional-path, c RIB-compressed, 
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path
 *>  1.1.0.0/21       12.12.12.1               0             0 1 i

Oke R2 sudah tau tentang 1.1.0.0/21 ya... sekarang kita coba lakukan ping dari R2 ke seluruh IP loopback R1

R2(config-router)#do ping 1.1.0.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1.1.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/5 ms
R2(config-router)#do ping 1.1.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
R2(config-router)#do ping 1.1.2.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1.1.2.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
R2(config-router)#do ping 1.1.3.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1.1.3.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
R2(config-router)#do ping 1.1.4.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1.1.4.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
R2(config-router)#do ping 1.1.5.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1.1.5.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
R2(config-router)#do ping 1.1.6.1 
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1.1.6.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
R2(config-router)#do ping 1.1.7.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1.1.7.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/5 ms

Oke semua sukses...

O ya.. .. misal kita tidak menambahkan static route di R1 dengan gateway null0, apa yang terjadi????

Yang terjadi adalah R1 tidak akan mengadvertise network 1.1.0.0 255.255.248.0.. kenapa?? BGP tidak akan mengadvertise network yang tidak ada ditabel routingnya!! kalau kita tidak menambahkan static routing di R1, R1 tidak akan punya route ke 1.1.0.0 255.255.248.0 pada tabel routingny..

Kita coba yaaa

R1(config)#no ip route 1.1.0.0 255.255.248.0 null0

Kita coba lihat di R2

R2(config-router)#do sh ip bgp
R2(config-router)#

Tuh kan hilang... jadi kita wajib menambahkan static routing pada R1 ya.. kita coba balikkan lagi ya static routing nya

R1(config)#ip route 1.1.0.0 255.255.248.0 null0   

Kita coba lihat hasilnya di R2

R2(config-router)#do sh ip bgp
BGP table version is 4, local router ID is 12.12.12.2
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, 
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, 
              x best-external, a additional-path, c RIB-compressed, 
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path
 *>  1.1.0.0/21       12.12.12.1               0             0 1 i

Tuh kan sudah balik..... oke bisa difahami ya??

Sampai disini dulu ya.. semoga bermanfaat..

{ Read More }