Tampilkan postingan dengan label OSPF. Tampilkan semua postingan
Tampilkan postingan dengan label OSPF. Tampilkan semua postingan

Sabtu, 03 Juni 2017

Lab 143 - IOS XR OSPF Routing

Pada lab sebelumnya kita sudah belajar tentang konfigurasi static routing di IOS XR.. Selanjutnya pada lab ini kita akan belajar konfigurasi routing OSPF pada IOS XR. Berikut topologi yang akan kita gunakan pada lab ini
Pada topologi diatas kita juga harus konfigurasi virtual link ya.. karena Area 2 tidak terhubung langsung dengan Area 0..

Oke pertama kita konfigurasikan ip address pada ketiga IOS XR sesuai topologi diatas
RP/0/0/CPU0:IOS-XR1(config)#int g0/0/0/0 RP/0/0/CPU0:IOS-XR1(config-if)#no sh RP/0/0/CPU0:IOS-XR1(config-if)#ipv4 add 12.12.12.1/24 RP/0/0/CPU0:IOS-XR1(config-if)#int l0 RP/0/0/CPU0:IOS-XR1(config-if)#ipv4 add 1.1.1.1/32 RP/0/0/CPU0:IOS-XR1(config-if)#int l1 RP/0/0/CPU0:IOS-XR1(config-if)#ipv4 add 11.11.11.11/32 RP/0/0/CPU0:IOS-XR1(config-if)#commit Sat Jun 3 15:06:51.991 UTC
RP/0/0/CPU0:IOS-XR2(config)#int g0/0/0/0 RP/0/0/CPU0:IOS-XR2(config-if)#no sh RP/0/0/CPU0:IOS-XR2(config-if)#ipv4 add 12.12.12.2/24 RP/0/0/CPU0:IOS-XR2(config-if)#int l0 RP/0/0/CPU0:IOS-XR2(config-if)#ipv4 add 2.2.2.2/32 RP/0/0/CPU0:IOS-XR2(config-if)#int l1 RP/0/0/CPU0:IOS-XR2(config-if)#ipv4 add 22.22.22.22/32 RP/0/0/CPU0:IOS-XR2(config-if)#int g0/0/0/1 RP/0/0/CPU0:IOS-XR2(config-if)#no sh RP/0/0/CPU0:IOS-XR2(config-if)#ipv4 add 23.23.23.2/24 RP/0/0/CPU0:IOS-XR2(config-if)#commit
RP/0/0/CPU0:IOS-XR3(config)#int g0/0/0/0 RP/0/0/CPU0:IOS-XR3(config-if)#no sh RP/0/0/CPU0:IOS-XR3(config-if)#ipv4 add 23.23.23.3/24 RP/0/0/CPU0:IOS-XR3(config-if)#int l0 RP/0/0/CPU0:IOS-XR3(config-if)#ipv4 add 3.3.3.3/32 RP/0/0/CPU0:IOS-XR3(config-if)#int l1 RP/0/0/CPU0:IOS-XR3(config-if)#ipv4 add 33.33.33.33/32 RP/0/0/CPU0:IOS-XR3(config-if)#commit
Oke.. konfigurasi ip address sudah selesai ya.. untuk pengujian, kita coba lakukan uji ping ke directly connected network masing2 router.. Berikut pengujian ping dari IOS-XR1 ke IOS-XR2
RP/0/0/CPU0:IOS-XR1(config-if)#do ping ipv4 12.12.12.2 Sat Jun 3 15:10:34.386 UTC Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 12.12.12.2, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/14/59 ms
Oke dari IOS-XR1 ke IOS-XR2 berhasil.. sekarang kita coba dari IOS-XR2 ke IOS-XR3
RP/0/0/CPU0:IOS-XR2(config-if)#do ping ipv4 23.23.23.3 Sat Jun 3 15:11:08.853 UTC Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 23.23.23.3, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/10/39 ms
Oke.. sudah berhasil juga ya..

Lanjut kita konfigurasi OSPF pada ketiga router tersebut.. perhatikan konfigurasinya harus sesuai topologi ya.. pada topologi kita diminta untuk mengkonfigurasi OSPF dengan 3 area..

Oke langsung saja, berikut konfigurasi OSPF pada IOS-XR1
RP/0/0/CPU0:IOS-XR1(config)#router ospf 1 RP/0/0/CPU0:IOS-XR1(config-ospf)#router-id 1.1.1.1 RP/0/0/CPU0:IOS-XR1(config-ospf)#area 0 RP/0/0/CPU0:IOS-XR1(config-ospf-ar)#interface lo0 RP/0/0/CPU0:IOS-XR1(config-ospf-ar-if)#int l1 RP/0/0/CPU0:IOS-XR1(config-ospf-ar-if)#area 1 RP/0/0/CPU0:IOS-XR1(config-ospf-ar)#int g0/0/0/0 RP/0/0/CPU0:IOS-XR1(config-ospf-ar-if)#commit
Perhatikan bahwa kita tidak menggunakan perintah network pada IOS XR, kita menggunakan perintah interface seperti diatas, untuk pengujian kita coba lihat running-config nya ya
RP/0/0/CPU0:IOS-XR1(config-ospf)#do sh run router ospf Sat Jun 3 15:21:25.241 UTC router ospf 1 router-id 1.1.1.1 area 0 interface Loopback0 interface Loopback1 ! ! area 1 interface GigabitEthernet0/0/0/0 ! !
Oke.. sekarang lanjut konfigurasi di IOS-XR2 yaa
RP/0/0/CPU0:IOS-XR2(config)#router ospf 2 RP/0/0/CPU0:IOS-XR2(config-ospf)#router-id 2.2.2.2 RP/0/0/CPU0:IOS-XR2(config-ospf)#area 1 RP/0/0/CPU0:IOS-XR2(config-ospf-ar)#int lo0 RP/0/0/CPU0:IOS-XR2(config-ospf-ar-if)#int g0/0/0/0 RP/0/0/CPU0:IOS-XR2(config-ospf-ar-if)#area 2 RP/0/0/CPU0:IOS-XR2(config-ospf-ar)#int lo1 RP/0/0/CPU0:IOS-XR2(config-ospf-ar-if)#int g0/0/0/1 RP/0/0/CPU0:IOS-XR2(config-ospf-ar-if)#commit Sat Jun 3 15:25:53.883 UTC RP/0/0/CPU0:IOS-XR2(config-ospf-ar-if)#do sh run router ospf Sat Jun 3 15:27:19.337 UTC router ospf 2 router-id 2.2.2.2 area 1 interface Loopback0 interface GigabitEthernet0/0/0/0 ! area 2 interface Loopback1 interface GigabitEthernet0/0/0/1 ! !
Setelah konfigurasi di IOS-XR1 dan IOS-XR2, seharusnya kedua router tersebut sudah adjacency OSPF.. kita coba lihat dulu yaa
RP/0/0/CPU0:IOS-XR2(config-ospf-ar-if)#do sh ospf neig Sat Jun 3 15:29:20.029 UTC * Indicates MADJ interface Neighbors for OSPF 2 Neighbor ID Pri State Dead Time Address Interface 1.1.1.1 1 FULL/DR 00:00:34 12.12.12.1 GigabitEth0/0/0/0 Neighbor is up for 00:03:15 Total neighbor count: 1
Perhatikan bahwa state nya sudah full... Sekarang kita lanjut konfigurasi di IOS-XR3 yaa
RP/0/0/CPU0:IOS-XR3(config)#router ospf 3 RP/0/0/CPU0:IOS-XR3(config-ospf)#router-id 3.3.3.3 RP/0/0/CPU0:IOS-XR3(config-ospf)#area 2 RP/0/0/CPU0:IOS-XR3(config-ospf-ar)#int g0/0/0/0 RP/0/0/CPU0:IOS-XR3(config-ospf-ar-if)#int l0 RP/0/0/CPU0:IOS-XR3(config-ospf-ar-if)#int l1 RP/0/0/CPU0:IOS-XR3(config-ospf-ar-if)#commit Sat Jun 3 15:32:09.727 UTC RP/0/0/CPU0:IOS-XR3(config-ospf-ar-if)#do sh run router ospf Sat Jun 3 15:32:18.186 UTC router ospf 3 router-id 3.3.3.3 area 2 interface Loopback0 interface Loopback1 interface GigabitEthernet0/0/0/0 ! !
Kita coba lihat neighbor tabel di IOS-XR2 ya.. seharusnya IOS-XR2 punya 2 neighbor
RP/0/0/CPU0:IOS-XR2(config-ospf-ar-if)#do sh ospf neigh Sat Jun 3 15:34:20.278 UTC * Indicates MADJ interface Neighbors for OSPF 2 Neighbor ID Pri State Dead Time Address Interface 1.1.1.1 1 FULL/DR 00:00:38 12.12.12.1 GigabitEth0/0/0/0 Neighbor is up for 00:08:15 3.3.3.3 1 FULL/BDR 00:00:35 23.23.23.3 GigabitEth0/0/0/1 Neighbor is up for 00:01:59 Total neighbor count: 2
Oke IOS-XR2 sudah punya 2 neighbor ya.. dan statenya sudah full semua.. terahir kita akan konfigurasikan virtual link antara IOS-XR1 dan IOS-XR2..
RP/0/0/CPU0:IOS-XR1(config)#router ospf 1 RP/0/0/CPU0:IOS-XR1(config-ospf)#area 1 RP/0/0/CPU0:IOS-XR1(config-ospf-ar)#virtual-link 2.2.2.2 RP/0/0/CPU0:IOS-XR1(config-ospf-ar-vl)#commit
RP/0/0/CPU0:IOS-XR2(config)#router ospf 2 RP/0/0/CPU0:IOS-XR2(config-ospf)#area 1 RP/0/0/CPU0:IOS-XR2(config-ospf-ar)#virtual-link 1.1.1.1 RP/0/0/CPU0:IOS-XR2(config-ospf-ar-vl)#commit
Oke, untuk pengujian, pastikan tabel routing di seluruh router sudah lengkap
RP/0/0/CPU0:IOS-XR1#show route ospf Sat Jun 3 15:56:53.025 UTC O 2.2.2.2/32 [110/2] via 12.12.12.2, 00:00:40, GigabitEthernet0/0/0/0 O IA 3.3.3.3/32 [110/3] via 12.12.12.2, 00:00:30, GigabitEthernet0/0/0/0 O IA 22.22.22.22/32 [110/2] via 12.12.12.2, 00:00:30, GigabitEthernet0/0/0/0 O IA 23.23.23.0/24 [110/2] via 12.12.12.2, 00:00:30, GigabitEthernet0/0/0/0 O IA 33.33.33.33/32 [110/3] via 12.12.12.2, 00:00:30, GigabitEthernet0/0/0/0
Perhatikan bahwa IOS XR1 sudah punya tabel routing OSPF lengkap, kita coba cek di IOS-XR2 dan IOS-XR3
RP/0/0/CPU0:IOS-XR2(config-ospf-ar-if)#do sh route ospf Sat Jun 3 15:58:15.940 UTC O 1.1.1.1/32 [110/2] via 12.12.12.1, 00:01:52, GigabitEthernet0/0/0/0 O 3.3.3.3/32 [110/2] via 23.23.23.3, 00:02:06, GigabitEthernet0/0/0/1 O 11.11.11.11/32 [110/2] via 12.12.12.1, 00:01:52, GigabitEthernet0/0/0/0 O 33.33.33.33/32 [110/2] via 23.23.23.3, 00:02:06, GigabitEthernet0/0/0/1
RP/0/0/CPU0:IOS-XR3#show route ospf Sat Jun 3 15:58:35.758 UTC O IA 1.1.1.1/32 [110/3] via 23.23.23.2, 00:02:12, GigabitEthernet0/0/0/0 O IA 2.2.2.2/32 [110/2] via 23.23.23.2, 00:02:22, GigabitEthernet0/0/0/0 O IA 11.11.11.11/32 [110/3] via 23.23.23.2, 00:02:12, GigabitEthernet0/0/0/0 O IA 12.12.12.0/24 [110/2] via 23.23.23.2, 00:02:22, GigabitEthernet0/0/0/0 O 22.22.22.22/32 [110/2] via 23.23.23.2, 00:02:26, GigabitEthernet0/0/0/0
Oke tabel routing di IOS-XR2 dan IOS-XR3 juga sudah lengkap.. Untuk lebih memastikan kita coba ping ya.. kita akan coba ping dari IOS-XR1 ke loopback XR2 dan XR3
RP/0/0/CPU0:IOS-XR1#ping 2.2.2.2 Sat Jun 3 16:02:21.183 UTC Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms RP/0/0/CPU0:IOS-XR1#ping 22.22.22.22 Sat Jun 3 16:02:23.943 UTC Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 22.22.22.22, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms RP/0/0/CPU0:IOS-XR1#ping 3.3.3.3 Sat Jun 3 16:02:25.882 UTC Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 3.3.3.3, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/6/19 ms RP/0/0/CPU0:IOS-XR1#ping 33.33.33.33 Sat Jun 3 16:02:28.582 UTC Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 33.33.33.33, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/5/9 ms
Oke ping sudah jalan semua ya...

Alhamdulillah lab kedua kita tentang IOS XR sudah berhasil.. sampai ketemu di artikel selanjutnya yaa.. In Syaa Allah masih akan tetap tentang IOS XR
{ Read More }


Kamis, 27 April 2017

Lab 132 - Superlab L3VPN Cisco (Bagian 2 Konfigurasi OSPF)

Oke.. sebelumnya saya sudah memperkenalkan superlab spesial tentang L3VPN di cisco. selanjutnya saat ini kita akan mulai perang nya yaa.. berikut full topologi dari superlab yang akan kita bahas
Pada postingan kali ini, kita hanya akan fokus pada konfigurasi routing protocol IGP pada bagian ISP. Adapun routing protocol IGP yang akan kita gunakan adalah OSPF.
Pertama konfigurasikan ip addressing pada seluruh router ISP. Untuk addressing, kita akan menggunakan addressing standard IDN seperti biasa yaaa
R1(config)#int e0/0 R1(config-if)#no sh R1(config-if)#ip add 14.14.14.1 255.255.255.0 R1(config-if)#int e0/1 R1(config-if)#no sh R1(config-if)#ip add 16.16.16.1 255.255.255.0 R1(config-if)#int e0/2 R1(config-if)#no sh R1(config-if)#ip add 15.15.15.1 255.255.255.0 R1(config-if)#int e0/3 R1(config-if)#no sh R1(config-if)#ip add 13.13.13.1 255.255.255.0 R1(config-if)#int lo0 R1(config-if)#ip add 1.1.1.1 255.255.255.255
R2(config)#int e0/0 R2(config-if)#no sh R2(config-if)#ip add 23.23.23.2 255.255.255.0 R2(config-if)#int lo0 R2(config-if)#ip add 2.2.2.2 255.255.255.255
R3(config)#int e0/0 R3(config-if)#no sh R3(config-if)#ip add 13.13.13.3 255.255.255.0 R3(config-if)#int e0/1 R3(config-if)#no sh R3(config-if)#ip add 34.34.34.3 255.255.255.0 R3(config-if)#int e0/2 R3(config-if)#no sh R3(config-if)#ip add 23.23.23.3 255.255.255.0 R3(config-if)#int lo0 R3(config-if)#ip add 3.3.3.3 255.255.255.255
R4(config)#int e0/0 R4(config-if)#no sh R4(config-if)#ip add 14.14.14.4 255.255.255.0 R4(config-if)#int e0/1 R4(config-if)#no sh R4(config-if)#ip add 47.47.47.4 255.255.255.0 R4(config-if)#int e0/2 R4(config-if)#no sh R4(config-if)#ip add 48.48.48.4 255.255.255.0 R4(config-if)#int e0/3 R4(config-if)#no sh R4(config-if)#ip add 34.34.34.4 255.255.255.0 R4(config-if)#int lo0 R4(config-if)#ip add 4.4.4.4 255.255.255.255
R5(config)#int e0/0 R5(config-if)#no sh R5(config-if)#ip add 15.15.15.5 255.255.255.0 R5(config-if)#int lo0 R5(config-if)#ip add 5.5.5.5 255.255.255.255
R6(config)#int e0/0 R6(config-if)#no sh R6(config-if)#ip add 16.16.16.6 255.255.255.0 R6(config-if)#int lo0 R6(config-if)#ip add 6.6.6.6 255.255.255.255
R7(config)#int e0/0 R7(config-if)#no sh R7(config-if)#ip add 47.47.47.7 255.255.255.0 R7(config-if)#int lo0 R7(config-if)#ip add 7.7.7.7 255.255.255.255
R8(config)#int e0/0 R8(config-if)#no sh R8(config-if)#ip add 48.48.48.8 255.255.255.0 R8(config-if)#int lo0 R8(config-if)#ip add 8.8.8.8 255.255.255.255
Oke konfigurasi ip address sudah selesai.. selanjutnya kita konfigurasikan ospf pada seluruh router ISP.
R1(config)#router ospf 1 R1(config-router)#net 14.14.14.1 0.0.0.0 are 0 R1(config-router)#net 16.16.16.1 0.0.0.0 are 0 R1(config-router)#net 15.15.15.1 0.0.0.0 are 0 R1(config-router)#net 13.13.13.1 0.0.0.0 are 0 R1(config-router)#net 1.1.1.1 0.0.0.0 are 0
R2(config-if)#router ospf 1 R2(config-router)#net 23.23.23.2 0.0.0.0 are 0 R2(config-router)#net 2.2.2.2 0.0.0.0 are 0
R3(config-if)#router ospf 1 R3(config-router)#net 13.13.13.3 0.0.0.0 are 0 R3(config-router)#net 34.34.34.3 0.0.0.0 are 0 R3(config-router)#net 23.23.23.3 0.0.0.0 are 0 R3(config-router)#net 3.3.3.3 0.0.0.0 are 0
R4(config-if)#router ospf 1 R4(config-router)#net 14.14.14.4 0.0.0.0 are 0 RR4(config-router)#net 47.47.47.4 0.0.0.0 are 0 R4(config-router)#net 48.48.48.4 0.0.0.0 are 0 R4(config-router)#net 34.34.34.4 0.0.0.0 are 0 R4(config-router)#net 4.4.4.4 0.0.0.0 are 0
R5(config-if)#router ospf 1 R5(config-router)#net 15.15.15.5 0.0.0.0 are 0 R5(config-router)#net 5.5.5.5 0.0.0.0 are 0
R6(config-if)#router ospf 1 R6(config-router)#net 16.16.16.6 0.0.0.0 are 0 R6(config-router)#net 6.6.6.6 0.0.0.0 are 0
R7(config-if)#router ospf 1 R7(config-router)#net 47.47.47.7 0.0.0.0 are 0 R7(config-router)#net 7.7.7.7 0.0.0.0 are 0
R8(config-if)#router ospf 1 R8(config-router)#net 48.48.48.8 0.0.0.0 are 0 R8(config-router)#net 8.8.8.8 0.0.0.0 are 0
Okeee.. konfigurasi OSPF sudah selesai.. pastikan seluruh router mempunyai tabel routing yang lengkap. berikut tabel routing di R1
R1(config-router)#do sh ip route Gateway of last resort is not set 1.0.0.0/32 is subnetted, 1 subnets C 1.1.1.1 is directly connected, Loopback0 2.0.0.0/32 is subnetted, 1 subnets O 2.2.2.2 [110/21] via 13.13.13.3, 00:03:13, Ethernet0/3 3.0.0.0/32 is subnetted, 1 subnets O 3.3.3.3 [110/11] via 13.13.13.3, 00:03:23, Ethernet0/3 4.0.0.0/32 is subnetted, 1 subnets O 4.4.4.4 [110/11] via 14.14.14.4, 00:02:31, Ethernet0/0 5.0.0.0/32 is subnetted, 1 subnets O 5.5.5.5 [110/11] via 15.15.15.5, 00:02:00, Ethernet0/2 6.0.0.0/32 is subnetted, 1 subnets O 6.6.6.6 [110/11] via 16.16.16.6, 00:01:30, Ethernet0/1 7.0.0.0/32 is subnetted, 1 subnets O 7.7.7.7 [110/21] via 14.14.14.4, 00:00:55, Ethernet0/0 8.0.0.0/32 is subnetted, 1 subnets O 8.8.8.8 [110/21] via 14.14.14.4, 00:00:21, Ethernet0/0 13.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 13.13.13.0/24 is directly connected, Ethernet0/3 L 13.13.13.1/32 is directly connected, Ethernet0/3 14.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 14.14.14.0/24 is directly connected, Ethernet0/0 L 14.14.14.1/32 is directly connected, Ethernet0/0 15.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 15.15.15.0/24 is directly connected, Ethernet0/2 L 15.15.15.1/32 is directly connected, Ethernet0/2 16.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 16.16.16.0/24 is directly connected, Ethernet0/1 L 16.16.16.1/32 is directly connected, Ethernet0/1 23.0.0.0/24 is subnetted, 1 subnets O 23.23.23.0 [110/20] via 13.13.13.3, 00:03:13, Ethernet0/3 34.0.0.0/24 is subnetted, 1 subnets O 34.34.34.0 [110/20] via 14.14.14.4, 00:02:31, Ethernet0/0 [110/20] via 13.13.13.3, 00:03:33, Ethernet0/3 47.0.0.0/24 is subnetted, 1 subnets O 47.47.47.0 [110/20] via 14.14.14.4, 00:02:42, Ethernet0/0 48.0.0.0/24 is subnetted, 1 subnets O 48.48.48.0 [110/20] via 14.14.14.4, 00:02:42, Ethernet0/0
Oke.. untuk saat ini sampai disini dulu yaa.. sampai jumpa di postingan selanjutnya.. di postingan selanjutnya in syaa allah kita akan membahas konfigurasi MPLS di jaringan ISP
{ Read More }


Selasa, 28 Februari 2017

Lab 130 - Multi Area OSPF Juniper

Wihh semangat nih belajarnya... kemarin kita sudah belajar Basic OSPF di Juniper.. hari ini kita lanjut belajar OSPF yang lebih advanced ya.. kita akan konfig Multi Area OSPF.. Oke langsung aja ya.. kita akan pake topologi berikut
Wishh.. lumayan komplek nih topologi nya.. hehe.. nantinya kita akan membuat masing-masing satu interface loopback pada seluruh router.. Perhatikan bahwa kita nanti juga perlu membuat virtual link ya antara R3 dan R4..

Oke langsung aja ya.. pertama kita harus konfig addressing nya yaa.. berikut konfigurasi addressing pada R1
[edit] root# run show configuration logical-systems R1 interfaces { em0 { unit 13 { vlan-id 13; family inet { address 13.13.13.1/24; } } } lo0 { unit 1 { family inet { address 1.1.1.1/32; } } } }
Berikut konfigurasi R2
[edit] root# run show configuration logical-systems R2 interfaces { em0 { unit 23 { vlan-id 23; family inet { address 23.23.23.2/24; } } unit 24 { vlan-id 24; family inet { address 24.24.24.2/24; } } } lo0 { unit 2 { family inet { address 2.2.2.2/32; } } } }
Berikut konfigurasi di R3
[edit] root# run show configuration logical-systems R3 interfaces { em1 { unit 13 { vlan-id 13; family inet { address 13.13.13.3/24; } } unit 23 { vlan-id 23; family inet { address 23.23.23.3/24; } } unit 34 { vlan-id 34; family inet { address 34.34.34.3/24; } } } lo0 { unit 3 { family inet { address 3.3.3.3/32; } } } }
Berikut konfigurasi di R4
[edit] root# run show configuration logical-systems R4 interfaces { em0 { unit 34 { vlan-id 34; family inet { address 34.34.34.4/24; } } unit 45 { vlan-id 45; family inet { address 45.45.45.4/24; } } } em1 { unit 24 { vlan-id 24; family inet { address 24.24.24.4/24; } } } lo0 { unit 4 { family inet { address 4.4.4.4/32; } } } }
Berikut konfigurasi di R5
[edit] root# run show configuration logical-systems R5 interfaces { em1 { unit 45 { vlan-id 45; family inet { address 45.45.45.5/24; } } } lo0 { unit 5 { family inet { address 5.5.5.5/32; } } } }
Okeee.. konfigurasi addressing sudah selesai.. lanjut kita konfigurasi OSPF nya yaaa.. berikut konfigurasi OSPF di R1
[edit] root# run show configuration logical-systems R1 protocols ospf { area 0.0.0.0 { interface em0.13; interface lo0.1 { passive; } } }
Berikut konfigurasi OSPF di R2
[edit] root# run show configuration logical-systems R2 protocols ospf { area 0.0.0.1 { interface em0.23; interface em0.24; interface lo0.2 { passive; } } }
Berikut konfigurasi OSPF di R3
[edit] root# run show configuration logical-systems R3 protocols ospf { area 0.0.0.0 { interface em1.13; } area 0.0.0.1 { interface em1.23; interface em1.34; interface lo0.3 { passive; } } }
Berikut konfigurasi OSPF di R4
[edit] root# run show configuration logical-systems R4 protocols ospf { area 0.0.0.1 { interface em0.34; interface em1.24; interface lo0.4 { passive; } } area 0.0.0.2 { interface em0.45; } }
Berikut konfigurasi OSPF di R5
[edit] root# run show configuration logical-systems R5 protocols ospf { area 0.0.0.2 { interface em1.45; interface lo0.5 { passive; } } }
Okeee.. konfigurasi OSPF sudah selesai.. untuk pengujian.. kita coba lihat tabel routing di R1 yaa
[edit] root# run show route logical-system R1 inet.0: 10 destinations, 10 routes (10 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both 1.1.1.1/32 *[Direct/0] 00:14:28 > via lo0.1 2.2.2.2/32 *[OSPF/10] 00:07:07, metric 2 > to 13.13.13.3 via em0.13 3.3.3.3/32 *[OSPF/10] 00:07:17, metric 1 > to 13.13.13.3 via em0.13 4.4.4.4/32 *[OSPF/10] 00:07:17, metric 2 > to 13.13.13.3 via em0.13 13.13.13.0/24 *[Direct/0] 00:08:15 > via em0.13 13.13.13.1/32 *[Local/0] 00:08:15 Local via em0.13 23.23.23.0/24 *[OSPF/10] 00:07:17, metric 2 > to 13.13.13.3 via em0.13 24.24.24.0/24 *[OSPF/10] 00:07:17, metric 3 > to 13.13.13.3 via em0.13 34.34.34.0/24 *[OSPF/10] 00:07:17, metric 2 > to 13.13.13.3 via em0.13 224.0.0.5/32 *[OSPF/10] 00:08:15, metric 1 MultiRecv
Oke.. R1 sudah memiliki bebara route melalui OSPF.. namun ada yang kurang nih.. R1 belum punya route untuk ke R5.. kenapa deimikian?? karena R5 berada di Area yang tidak terhubung langsung dengan area backbone.. jadu harus kita konfigurasikan virtual link yaa..

Oke sekarang kita konfigurasikan virtual link antara R3 dan R4.. berikut konfigurasi virtual link di R3
[edit] root# edit logical-systems R3 [edit logical-systems R3] root# set routing-options router-id 3.3.3.3 [edit logical-systems R3] root# edit protocols ospf area 0.0.0.0 [edit logical-systems R3 protocols ospf area 0.0.0.0] root# set virtual-link neighbor-id 4.4.4.4 transit-area 0.0.0.1 [edit logical-systems R3 protocols ospf area 0.0.0.0] root# up [edit logical-systems R3 protocols ospf] root# show area 0.0.0.0 { virtual-link neighbor-id 4.4.4.4 transit-area 0.0.0.1; interface em1.13; } area 0.0.0.1 { interface em1.23; interface em1.34; interface lo0.3 { passive; } }
Berikut konfigurasi virtual link di R4
[edit] root# edit logical-systems R4 [edit logical-systems R4] root# set routing-options router-id 4.4.4.4 [edit logical-systems R4] root# edit protocols ospf area 0.0.0.0 [edit logical-systems R4 protocols ospf area 0.0.0.0] root# set virtual-link neighbor-id 3.3.3.3 transit-area 0.0.0.1 [edit logical-systems R4 protocols ospf area 0.0.0.0] root# up [edit logical-systems R4 protocols ospf] root# show area 0.0.0.1 { interface em0.34; interface em1.24; interface lo0.4 { passive; } } area 0.0.0.2 { interface em0.45; } area 0.0.0.0 { virtual-link neighbor-id 3.3.3.3 transit-area 0.0.0.1; }
Okeee.. sudah selesai nih... kita coba cek yaa
[edit] root# run show ospf neighbor logical-system R3 Address Interface State ID Pri Dead 13.13.13.1 em1.13 Full 1.1.1.1 128 33 34.34.34.4 vl-4.4.4.4 Full 4.4.4.4 0 35 23.23.23.2 em1.23 Full 2.2.2.2 128 32 34.34.34.4 em1.34 Full 4.4.4.4 128 32
Perhatikan bahwa R3 sudah bertetangga dengan R4 melalui virtual link.. sekarang kita coba cek tabel routing di R1 yaa
[edit] root# run show route logical-system R1 inet.0: 12 destinations, 12 routes (12 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both 1.1.1.1/32 *[Direct/0] 00:22:21 > via lo0.1 2.2.2.2/32 *[OSPF/10] 00:01:42, metric 2 > to 13.13.13.3 via em0.13 3.3.3.3/32 *[OSPF/10] 00:01:42, metric 1 > to 13.13.13.3 via em0.13 4.4.4.4/32 *[OSPF/10] 00:01:42, metric 2 > to 13.13.13.3 via em0.13 5.5.5.5/32 *[OSPF/10] 00:01:42, metric 3 > to 13.13.13.3 via em0.13 13.13.13.0/24 *[Direct/0] 00:02:23 > via em0.13 13.13.13.1/32 *[Local/0] 00:02:23 Local via em0.13 23.23.23.0/24 *[OSPF/10] 00:01:42, metric 2 > to 13.13.13.3 via em0.13 24.24.24.0/24 *[OSPF/10] 00:01:42, metric 3 > to 13.13.13.3 via em0.13 34.34.34.0/24 *[OSPF/10] 00:01:42, metric 2 > to 13.13.13.3 via em0.13 45.45.45.0/24 *[OSPF/10] 00:01:42, metric 3 > to 13.13.13.3 via em0.13 224.0.0.5/32 *[OSPF/10] 00:16:08, metric 1 MultiRecv
Okeee.. sekarang tabel routing di R1 sudah lengkap yaaaa... sekarang kita coba lakukan ping dari R1 ke interface loopback seluruh router
[edit] root# run ping 2.2.2.2 logical-system R1 count 1 PING 2.2.2.2 (2.2.2.2): 56 data bytes 64 bytes from 2.2.2.2: icmp_seq=0 ttl=63 time=0.860 ms --- 2.2.2.2 ping statistics --- 1 packets transmitted, 1 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.860/0.860/0.860/0.000 ms [edit] root# run ping 3.3.3.3 logical-system R1 count 1 PING 3.3.3.3 (3.3.3.3): 56 data bytes 64 bytes from 3.3.3.3: icmp_seq=0 ttl=64 time=0.797 ms --- 3.3.3.3 ping statistics --- 1 packets transmitted, 1 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.797/0.797/0.797/0.000 ms [edit] root# run ping 4.4.4.4 logical-system R1 count 1 PING 4.4.4.4 (4.4.4.4): 56 data bytes 64 bytes from 4.4.4.4: icmp_seq=0 ttl=63 time=1.420 ms --- 4.4.4.4 ping statistics --- 1 packets transmitted, 1 packets received, 0% packet loss round-trip min/avg/max/stddev = 1.420/1.420/1.420/0.000 ms [edit] root# run ping 5.5.5.5 logical-system R1 count 1 PING 5.5.5.5 (5.5.5.5): 56 data bytes 64 bytes from 5.5.5.5: icmp_seq=0 ttl=62 time=1.696 ms --- 5.5.5.5 ping statistics --- 1 packets transmitted, 1 packets received, 0% packet loss round-trip min/avg/max/stddev = 1.696/1.696/1.696/0.000 ms
Okeee.. ping nya sukses semua yaa... oke sampai disini dulu ya.. sampai jumpa di artikel artikel selanjutnya.. semoga bermanfaat...
{ Read More }


Senin, 27 Februari 2017

Lab 129 - Basic OSPF in Juniper

Lanjut seri Juniper nya yaaa.. sekarang gilirannya OSPF nih buat kita hajar di Juniper.. langsung aja kali ya.. kita akan pake topologi ini yaa

O yaaa.. disini kita akan pake logical system ya.. masih ada yang belum tau apa itu logical system di juniper?? monggo dibaca artikel sebelumnya dulu ya tentang Logical System di Juniper

Oke.. saya akan langsung tunjuikkin konfigurasinya yaa... berikut konfigurasi untuk logical system R1
[edit] root# run show configuration logical-systems R1 interfaces { em0 { unit 12 { vlan-id 12; family inet { address 12.12.12.1/24; } } } lo0 { unit 1 { family inet { address 1.1.1.1/32; } } } }
Berikut konfigurasi logical system R2
[edit] root# run show configuration logical-systems R2 interfaces { em1 { unit 12 { vlan-id 12; family inet { address 12.12.12.2/24; } } unit 23 { vlan-id 23; family inet { address 23.23.23.2/24; } } unit 24 { vlan-id 24; family inet { address 24.24.24.2/24; } } } lo0 { unit 2 { family inet { address 2.2.2.2/32; } } } }
Berikut konfigurasi logical system R3
[edit] root# run show configuration logical-systems R3 interfaces { em0 { unit 23 { vlan-id 23; family inet { address 23.23.23.3/24; } } unit 34 { vlan-id 34; family inet { address 34.34.34.3/24; } } } lo0 { unit 3 { family inet { address 3.3.3.3/32; } } } }
Berikut konfigurasi logical system R4
[edit] root# run show configuration logical-systems R4 interfaces { em0 { unit 24 { vlan-id 24; family inet { address 24.24.24.4/24; } } } em1 { unit 34 { vlan-id 34; family inet { address 34.34.34.4/24; } } } lo0 { unit 4 { family inet { address 4.4.4.4/32; } } } }
Okeee.. konfigurasi addressing pada seluruh logical system sudah selesai.. o yaaa.. jangan lupa di commit lho ya. hehe

Okeoke langsung aja kita konfig OSPF nya ya.. berikut konfigurasi OSPF di logical system R1
[edit] root# edit logical-systems R1 protocols ospf area 0.0.0.0 [edit logical-systems R1 protocols ospf area 0.0.0.0] root# set interface em0.12 [edit logical-systems R1 protocols ospf area 0.0.0.0] root# set interface lo0.1 passive
Bingung ya baca nya?? kayaknya lebih jelas kalau saya tampilkan show nya deh..
[edit] root# run show configuration logical-systems R1 protocols ospf { area 0.0.0.0 { interface em0.12; interface lo0.1 { passive; } } }
Oke di R1 sudah selesai.. lanjut kita konfig di R2.. saya tampilkan show nya aja yaaa.. untuk perintahnya sama seperti yang di R1 kog..
[edit] root# run show configuration logical-systems R2 protocols ospf { area 0.0.0.0 { interface em1.12; interface em1.24; interface em1.23; interface lo0.2 { passive; } } }
Lanjut berikut konfigurasi di R3
[edit] root# run show configuration logical-systems R3 protocols ospf { area 0.0.0.0 { interface em0.23; interface em0.34; interface lo0.3 { passive; } } }
Terahir kita konfig OSPF di R4 yaa
[edit] root# run show configuration logical-systems R4 protocols ospf { area 0.0.0.0 { interface em0.24; interface em1.34; interface lo0.4 { passive; } } }
Nah lhooo udah semua.. cepet banget yaa.. hehehe

Untuk pengujian.. kita bisa melihat neighbor tabel dengan perintah berikut
[edit] root# run show ospf neighbor logical-system R2 Address Interface State ID Pri Dead 12.12.12.1 em1.12 Full 1.1.1.1 128 38 23.23.23.3 em1.23 Full 3.3.3.3 128 35 24.24.24.4 em1.24 Full 4.4.4.4 128 37
Oke.. di R2 sudah full semua.. R2 sudah adjacency dengan ketiga router.. kita coba lihat neighbor tabel di R4 juga yaa
[edit] root# run show ospf neighbor logical-system R4 Address Interface State ID Pri Dead 24.24.24.2 em0.24 Full 2.2.2.2 128 39 34.34.34.3 em1.34 Full 3.3.3.3 128 36
Alhamdulillah R4 juga sudah adjacency dengan R2 dan R3..

Kita juga bisa melihat tabel routing untuk melakukan pengujian.. kita coba cek tabel routing di R1 yaa
[edit] root# run show route logical-system R1 inet.0: 10 destinations, 10 routes (10 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both 1.1.1.1/32 *[Direct/0] 00:12:04 > via lo0.1 2.2.2.2/32 *[OSPF/10] 00:02:00, metric 1 > to 12.12.12.2 via em0.12 3.3.3.3/32 *[OSPF/10] 00:02:00, metric 2 > to 12.12.12.2 via em0.12 4.4.4.4/32 *[OSPF/10] 00:01:58, metric 2 > to 12.12.12.2 via em0.12 12.12.12.0/24 *[Direct/0] 00:02:50 > via em0.12 12.12.12.1/32 *[Local/0] 00:02:50 Local via em0.12 23.23.23.0/24 *[OSPF/10] 00:02:00, metric 2 > to 12.12.12.2 via em0.12 24.24.24.0/24 *[OSPF/10] 00:02:00, metric 2 > to 12.12.12.2 via em0.12 34.34.34.0/24 *[OSPF/10] 00:02:00, metric 3 > to 12.12.12.2 via em0.12 224.0.0.5/32 *[OSPF/10] 00:07:49, metric 1 MultiRecv
Oke.. R1 sudah memiliki route ke seluruh network ya... wahhh.. sukses nih OSPF nya.. hehehe

Kita coba ping deh biar lebih pasti.. hehe
[edit] root# run ping 2.2.2.2 logical-system R1 count 2 PING 2.2.2.2 (2.2.2.2): 56 data bytes 64 bytes from 2.2.2.2: icmp_seq=0 ttl=64 time=1.377 ms 64 bytes from 2.2.2.2: icmp_seq=1 ttl=64 time=0.469 ms --- 2.2.2.2 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.469/0.923/1.377/0.454 ms [edit] root# run ping 3.3.3.3 logical-system R1 count 2 PING 3.3.3.3 (3.3.3.3): 56 data bytes 64 bytes from 3.3.3.3: icmp_seq=0 ttl=63 time=2.200 ms 64 bytes from 3.3.3.3: icmp_seq=1 ttl=63 time=1.118 ms --- 3.3.3.3 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max/stddev = 1.118/1.659/2.200/0.541 ms [edit] root# run ping 4.4.4.4 logical-system R1 count 2 PING 4.4.4.4 (4.4.4.4): 56 data bytes 64 bytes from 4.4.4.4: icmp_seq=0 ttl=63 time=1.294 ms 64 bytes from 4.4.4.4: icmp_seq=1 ttl=63 time=0.467 ms --- 4.4.4.4 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.467/0.881/1.294/0.413 ms
Alhamdulillah... R1 bisa ping ke IP loopback seluruh router lain ya... oyaaaa kita coba traceroute yaa dari R1 ke ip loopback R4
[edit] root# run traceroute 4.4.4.4 logical-system R1 traceroute to 4.4.4.4 (4.4.4.4), 30 hops max, 40 byte packets 1 12.12.12.2 (12.12.12.2) 0.934 ms 0.796 ms 0.657 ms 2 4.4.4.4 (4.4.4.4) 1.013 ms 0.704 ms 0.636 ms
Oke ... R1 memilih jalur via R2 untuk menjangkau IP loopback R4.. Okeee.. karena konfigurasi OSPF nya sudah jalan.. sampai disini dulu yaa.. sampai jumpa di artikel artikel selanjutnya..
{ Read More }


Jumat, 11 November 2016

Lab 76 - Mutual Redistribution


Pada lab-lab sebelumnya, kita hanya melakukan one way redistribution. Misal redistribution antara EIGRP dengan RIP, kita hanya melakukan konfigurasi redistribution pada EIGRP, begitu juga dengan OSPF. Selanjutnya pada lab ini kita akan belajar melakukan two way redistribution. Berikut topologi yang akan kita gunakan pada lab ini

Gambar 1 Topologi jaringan mutual redistribution
Pertama kita konfigurasikan IP Address dan routing RIP di R1
R1(config)#int e0/0 R1(config-if)#no sh R1(config-if)#ip add 12.12.12.1 255.255.255.0 R1(config-if)#router rip R1(config-router)#ve 2 R1(config-router)#no aut R1(config-router)#net 12.12.12.0
Selanjutnya kita konfigurasi pada R2, perhatikan bahwa R2 terletak pada jaringan RIP dan OSPF sekaligus. Oleh karena itu kita harus melakukan redistribution pada router ini
R2(config)#int e0/0
R2(config-if)#no sh R2(config-if)#ip add 12.12.12.2 255.255.255.0 R2(config-if)#int e0/1 R2(config-if)#no sh R2(config-if)#ip add 23.23.23.2 255.255.255.0 R2(config-if)#router rip R2(config-router)#ve 2 R2(config-router)#no au R2(config-router)#net 12.12.12.0 R2(config-router)#redistribute ospf 1 metric 1 R2(config-router)#router ospf 1 R2(config-router)#net 23.23.23.0 0.0.0.255 are 0 R2(config-router)#redistribute rip subnets
Lanjut konfigurasi pada R3, perhatikan bahwa R3 juga terletak pada dua jaringan sekaligus, yaitu OSPF dan EIGRP. Jadi kita juga harus konfigurasi redistribution di router ini
R3(config)#int e0/0 R3(config-if)#no sh R3(config-if)#ip add 23.23.23.3 255.255.255.0 R3(config-if)#int e0/1 R3(config-if)#no sh R3(config-if)#ip add 34.34.34.3 255.255.255.0 R3(config-if)#router ospf 1 R3(config-router)#net 23.23.23.0 0.0.0.255 are 0 R3(config-router)#redistribute eigrp 1 subnets R3(config-router)#router eigrp 1 R3(config-router)#no auto R3(config-router)#net 34.34.34.0 R3(config-router)#redistribute ospf 1 metric 1 1 1 1 1
Sekarang kita konfig di R4. disini kita juga harus melakukan redistribution antara EIGRP dan RIP
R4(config)#int e0/0 R4(config-if)#no sh R4(config-if)#ip add 34.34.34.4 255.255.255.0 R4(config-if)#int e0/1 R4(config-if)#no sh R4(config-if)#ip add 45.45.45.4 255.255.255.0 R4(config-if)#router eigrp 1 R4(config-router)#no auto R4(config-router)#net 34.34.34.0 R4(config-router)#redistribute rip metric 1 1 1 1 1 R4(config-router)#router rip R4(config-router)#ve 2 R4(config-router)#no auto R4(config-router)#net 45.45.45.0 R4(config-router)#redistribute eigrp 1 metric 1
Terahir kita konfigurasi pada R5, disini kita hanya perlu konfigurasi RIP
R5(config)#int e0/0 R5(config-if)#no sh R5(config-if)#ip add 45.45.45.5 255.255.255.0 R5(config-if)#router rip R5(config-router)#ve 2 R5(config-router)#no auto R5(config-router)#net 45.45.45.0
Untuk pengujian, kita coba lihat tabel routing pada masing-masing router, pastikan setiap router sudah memiliki informasi tentang seluruh remote networknya
R1(config-router)#do sh ip ro
12.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 12.12.12.0/24 is directly connected, Ethernet0/0 23.0.0.0/24 is subnetted, 1 subnets R 23.23.23.0 [120/1] via 12.12.12.2, 00:00:11, Ethernet0/0 34.0.0.0/24 is subnetted, 1 subnets R 34.34.34.0 [120/1] via 12.12.12.2, 00:00:11, Ethernet0/0 45.0.0.0/24 is subnetted, 1 subnets R 45.45.45.0 [120/1] via 12.12.12.2, 00:00:11, Ethernet0/0
R2(config-router)#do sh ip ro 12.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 12.12.12.0/24 is directly connected, Ethernet0/0 23.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 23.23.23.0/24 is directly connected, Ethernet0/1 34.0.0.0/24 is subnetted, 1 subnets O E2 34.34.34.0 [110/20] via 23.23.23.3, 00:04:58, Ethernet0/1 45.0.0.0/24 is subnetted, 1 subnets O E2 45.45.45.0 [110/20] via 23.23.23.3, 00:03:01, Ethernet0/1
R3(config-router)#do sh ip ro 12.0.0.0/24 is subnetted, 1 subnets O E2 12.12.12.0 [110/20] via 23.23.23.2, 00:05:30, Ethernet0/0 23.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 23.23.23.0/24 is directly connected, Ethernet0/0 34.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 34.34.34.0/24 is directly connected, Ethernet0/1 45.0.0.0/24 is subnetted, 1 subnets D EX 45.45.45.0 [170/2560025856] via 34.34.34.4, 00:03:26, Ethernet0/1
R4(config-router)#do sh ip ro 12.0.0.0/24 is subnetted, 1 subnets D EX 12.12.12.0 [170/2560025856] via 34.34.34.3, 00:04:06, Ethernet0/0 23.0.0.0/24 is subnetted, 1 subnets D EX 23.23.23.0 [170/2560025856] via 34.34.34.3, 00:04:06, Ethernet0/0 34.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 34.34.34.0/24 is directly connected, Ethernet0/0 45.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 45.45.45.0/24 is directly connected, Ethernet0/1
R5(config-router)#do sh ip ro 12.0.0.0/24 is subnetted, 1 subnets R 12.12.12.0 [120/1] via 45.45.45.4, 00:00:04, Ethernet0/0 23.0.0.0/24 is subnetted, 1 subnets R 23.23.23.0 [120/1] via 45.45.45.4, 00:00:04, Ethernet0/0 34.0.0.0/24 is subnetted, 1 subnets R 34.34.34.0 [120/1] via 45.45.45.4, 00:00:04, Ethernet0/0 45.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 45.45.45.0/24 is directly connected, Ethernet0/0
Perhatikan bahwa setiap router sudah memiliki tabel routing yang lengkap
{ Read More }


Lab 75 - OSPF Authentication per-Area


Pada lab sebelumnya kita telah belajar konfigurasi OSPF Authentication per-Interface. Selanjutnya pada lab ini kita akan belajar OSPF Authentication per area. Berikut topologi yang kita gunakan pada lab ini

Gambar 1 Topologi jaringan OSPF
Diasumsikan kita telah mengkonfigurasi authentikasi pada R1 dan R2 seperti yang kita lakukan pada lab sebelumnya. Selanjutnya pada lab ini kita akan mengkonfigurasi OSPF authentication pada link antara R2 dan R3.

Apa bedanya konfigurasi OSPF Authentication per-interface dengan per-area?? jika kita menggunakan OSPF Authentication per-interface, maka kita harus mengkonfigurasi authentication pada setiap interface satu-persatu. Namun jika kita mengguanakan authentication per-area, maka kita hanya perlu mengkonfigurasi authentikasi pada area, tidak perlu ke interface satu-persatu. Namun demkian konfigurasi per-area ini hanya berlaku untuk metode authentikasinya saja. Untuk passwordny kita tetap harus konfig pada setiap interface

Sebagai contoh, kita akan mengaktifkan OSPF authentication per-area di R2.
R2(config)#router ospf 1 R2(config-router)#area 0 authentication message-digest R2(config-router)#int e0/1 R2(config-if)#ip ospf message-digest-key 1 md5 P4ssword
Sesaat setelah melakukan konfigurasi tersebut, akan ada peringatan bahwa neighborship antara R2 dan R3 dihapus
R2(config-router)#
*Oct 24 06:48:58.435: %OSPF-5-ADJCHG: Process 1, Nbr 23.23.23.3 on Ethernet0/1 from FULL to DOWN, Neighbor Down: Dead timer expired
Oke.. disini berarti kita harus konfigurasi OSPF authentication juga di R3
R3(config)#int e0/0 R3(config-if)#ip ospf message-digest-key 1 md5 P4ssword
Setelah mengkonfigurasi authentication di R3, maka akan ada peringatan bahwa djacency sudah terbentuk lagi
R2(config-if)# *Oct 24 07:00:36.315: %OSPF-5-ADJCHG: Process 1, Nbr 23.23.23.3 on Ethernet0/1 from LOADING to FULL, Loading Done
{ Read More }


Lab 74 - OSPF Authentication per-Interface


Pada lab ini kita akan belajar mengkonfigurasi authentikasi pada jaringan OSPF. Berikut topologi yang akan kita gunakan pada lab ini
Gambar 1 Topologi jaringan OSPF
Diasumsikan kita telah mengkonfigurasi OSPF di R1, R2, dan R3. Tujuan kita pada lab ini adalah agar komunikasi OSPF antara R1 dan R2 dilindungi dengan authentikasi. Berikut konfig yang perlu kita lakukan di R1 dan R2
R1(config)#int e0/0
R1(config-if)#ip ospf authentication message-digest R1(config-if)#ip ospf message-digest-key 1 md5 P4ssword
Sesaat setelah mengkonfigurasi authentikasi di R1, maka akan ada peringatan bahwa neighbor telah dihapus
R1(config-if)#
*Oct 24 06:32:31.815: %OSPF-5-ADJCHG: Process 1, Nbr 23.23.23.2 on Ethernet0/0 from FULL to DOWN, Neighbor Down: Dead timer expired R1(config-if)#do sh ip os nei R1(config-if)#
Untuk itu kita harus konfigurasi authentikasi juga di R2. Perlu diketahui bahwa konfigurasi authentikasi di R2 harus memiliki key id dan string yang sama dengan yang kita konfigurasikan di R1
R2(config)#int e0/0
R2(config-if)#ip ospf authentication message-digest R2(config-if)#ip ospf message-digest-key 1 md5 P4ssword
Setelah mengkonfigurasi authentkasi di R2, akan ada peringatan bawah adjacency sudah up kembali dan tabel OSPF neighbor pun sudah terbentuk lagi
R1(config-if)#
*Oct 24 06:33:27.303: %OSPF-5-ADJCHG: Process 1, Nbr 23.23.23.2 on Ethernet0/0 from LOADING to FULL, Loading Done R1(config-if)#do sh ip os nei Neighbor ID Pri State Dead Time Address Interface 23.23.23.2 1 FULL/DR 00:00:31 12.12.12.2 Ethernet0/0
Oke sip kita sudah berhasil. Untuk melihat apakah OSPF menggunakan authentikasi atau tidak, kita bisa menggunakan perintah berikut
R1(config-if)#do sh ip ospf int e0/0
Ethernet0/0 is up, line protocol is up Internet Address 12.12.12.1/24, Area 0 Process ID 1, Router ID 11.11.11.6, Network Type BROADCAST, Cost: 10 Topology-MTID Cost Disabled Shutdown Topology Name 0 10 no no Base Transmit Delay is 1 sec, State BDR, Priority 1 Designated Router (ID) 23.23.23.2, Interface address 12.12.12.2 Backup Designated router (ID) 11.11.11.6, Interface address 12.12.12.1 Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5 oob-resync timeout 40 Hello due in 00:00:02 Supports Link-local Signaling (LLS) Cisco NSF helper support enabled IETF NSF helper support enabled Index 1/1, flood queue length 0 Next 0x0(0)/0x0(0) Last flood scan length is 1, maximum is 1 Last flood scan time is 0 msec, maximum is 0 msec Neighbor Count is 1, Adjacent neighbor count is 1 Adjacent with neighbor 23.23.23.2 (Designated Router) Suppress hello for 0 neighbor(s) Message digest authentication enabled Youngest key id is 1
R2(config-if)#do sh ip os int e0/0 Ethernet0/0 is up, line protocol is up Internet Address 12.12.12.2/24, Area 0 Process ID 1, Router ID 23.23.23.2, Network Type BROADCAST, Cost: 10 Topology-MTID Cost Disabled Shutdown Topology Name 0 10 no no Base Transmit Delay is 1 sec, State DR, Priority 1 Designated Router (ID) 23.23.23.2, Interface address 12.12.12.2 Backup Designated router (ID) 11.11.11.6, Interface address 12.12.12.1 Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5 oob-resync timeout 40 Hello due in 00:00:00 Supports Link-local Signaling (LLS) Cisco NSF helper support enabled IETF NSF helper support enabled Index 1/1, flood queue length 0 Next 0x0(0)/0x0(0) Last flood scan length is 1, maximum is 2 Last flood scan time is 0 msec, maximum is 0 msec Neighbor Count is 1, Adjacent neighbor count is 1 Adjacent with neighbor 11.11.11.6 (Backup Designated Router) Suppress hello for 0 neighbor(s) Message digest authentication enabled Youngest key id is 1
{ Read More }


Lab 73 - OSPF Null0 in Summarization


Pada lab sebelumnya kita telah belajar tentang OSPF Summarization. Selanjutnya pada lab ini kita akan mencoba mengamati dan memahami apa yang dilakukan oleh router yang melakukan summary. Adapun topologi yang akan kita gunakan pada lab ini adalah sama dengan yang kita gunakan pada lab sebelumnya.

Gambar 1 Topologi OSPF Summarization
Diasumsikan kita telah melakukan summarization pada R1 seperti yang kita lakukan pada lab sebelumnya, sehingga R2 dan R3 sudah menerima summary dari R1
R2(config-router)#do sh ip ro
11.0.0.0/29 is subnetted, 1 subnets O E2 11.11.11.0 [110/20] via 12.12.12.1, 00:00:03, Ethernet0/0 12.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 12.12.12.0/24 is directly connected, Ethernet0/0 23.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 23.23.23.0/24 is directly connected, Ethernet0/1
R3(config-router)#do sh ip ro 11.0.0.0/29 is subnetted, 1 subnets O E2 11.11.11.0 [110/20] via 23.23.23.2, 00:00:52, Ethernet0/0 12.0.0.0/24 is subnetted, 1 subnets O 12.12.12.0 [110/20] via 23.23.23.2, 00:01:26, Ethernet0/0 23.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 23.23.23.0/24 is directly connected, Ethernet0/0
Oke R2 dan R3 sudah memiliki route yang tersummary. Sekarang kita coba lihat tabel routing di R1
R1(config-router)#do sh ip ro
11.0.0.0/8 is variably subnetted, 7 subnets, 2 masks O 11.11.11.0/29 is a summary, 00:01:59, Null0 C 11.11.11.1/32 is directly connected, Loopback0 C 11.11.11.2/32 is directly connected, Loopback1 C 11.11.11.3/32 is directly connected, Loopback2 C 11.11.11.4/32 is directly connected, Loopback3 C 11.11.11.5/32 is directly connected, Loopback4 C 11.11.11.6/32 is directly connected, Loopback5 12.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 12.12.12.0/24 is directly connected, Ethernet0/0 23.0.0.0/24 is subnetted, 1 subnets O 23.23.23.0 [110/20] via 12.12.12.2, 00:00:28, Ethernet0/0
Perhatikan bahwa R1 juga memiliki IP summary, hanya saja gatewaynya adalah Null0. Apa sih tujuan route yang gatewaynya null0 ini?

Oke contoh kasusnya gini, sekarang R3 terhubung dengan internet dan tentunya R3 harus memiliki default route. Selanjutnya R3 mengadvertise default route tersebut ke OSPF.
R3(config-if)#ip add 10.10.10.2 255.255.255.0
R3(config-if)#ip route 0.0.0.0 0.0.0.0 10.10.10.1 R3(config)#router ospf 1 R3(config-router)#default-information originate
Konfig diatas hanya seolah-oalh R3 terhubung ke internet, meskipun sebenarnya tidak ada IP 10.10.10.1, tenang saja... poin kita bukan disini. Poin kita adalah agar R2 dan R1 memiliki default route
R2(config-router)#do sh ip ro
O*E2 0.0.0.0/0 [110/1] via 23.23.23.3, 00:00:02, Ethernet0/1 11.0.0.0/29 is subnetted, 1 subnets O E2 11.11.11.0 [110/20] via 12.12.12.1, 00:03:25, Ethernet0/0 12.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 12.12.12.0/24 is directly connected, Ethernet0/0 23.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 23.23.23.0/24 is directly connected, Ethernet0/1
R1(config-router)#do sh ip ro O*E2 0.0.0.0/0 [110/1] via 12.12.12.2, 00:00:06, Ethernet0/0 11.0.0.0/8 is variably subnetted, 7 subnets, 2 masks O 11.11.11.0/29 is a summary, 00:04:42, Null0 C 11.11.11.1/32 is directly connected, Loopback0 C 11.11.11.2/32 is directly connected, Loopback1 C 11.11.11.3/32 is directly connected, Loopback2 C 11.11.11.4/32 is directly connected, Loopback3 C 11.11.11.5/32 is directly connected, Loopback4 C 11.11.11.6/32 is directly connected, Loopback5 12.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 12.12.12.0/24 is directly connected, Ethernet0/0 23.0.0.0/24 is subnetted, 1 subnets O 23.23.23.0 [110/20] via 12.12.12.2, 00:03:12, Ethernet0/0
Oke R2 dan R1 sekarang sudah punya default route.

Sekarang kita kembali fokus ke pokok pembahasan, yaitu route di R1 dengan gateway null0. Route ini difungsikan untuk mencegah terjadinya loop. Gimana ceritanya bisa nyegah loop??

Oke, jika kita perhatikan R2 memiliki route 11.11.11.0/29 dengan gateway 12.12.12.1 (R1). Route tersebut berlaku untuk destination IP 11.11.11.0-11.11.11.7. Namun R1 hanya memiliki IP 11.11.11.1-11.11.11.6.

Bagaimana jika R2 melakukan ping ke 11.11.11.7? tentu saja R2 akan mengirimkan paket ke gatewaynya, dalam hal ini 12.12.12.1. Namun disini R1 tidak memiliki IP 11.11.11.7, selanjutnya R1 akan melihat tabel routing dan ternyata ada route dengan tujuan 11.11.11.0/29 dengan gateway null0. Maka paket tersebut akan diarahkan ke null0. Route dengan gateway null0 artinya akan mendrop paket.

Oke kita buktikan, sekarang coba ping dari R2 ke 11.11.11.7, namun sebelum melakukan ping, kita aktifkan dulu debug di R1
R1(config-router)#do debug ip packet detail
R2(config-router)#do ping 11.11.11.7 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 11.11.11.7, timeout is 2 seconds: UUUUU Success rate is 0 percent (0/5)
Setelah R2 ping ke 11.11.11.7, kita matikan debug di R1
R1(config-router)#do no debug ip packet detail
Oke sekarang kita amati hasil debug paketnya, dari sekian banyak paket yang terdebug, akan ada beberapa paket seperti berikut
*Oct 24 06:00:22.155: IP: tableid=0, s=12.12.12.2 (Ethernet0/0),
d=11.11.11.7 (Null0), routed via RIB
*Oct 24 06:00:22.155: IP: tableid=0, s=12.12.12.2 (Ethernet0/0), d=11.11.11.7 (Null0), routed via RIB *Oct 24 06:00:22.155: IP: tableid=0, s=12.12.12.2 (Ethernet0/0), d=11.11.11.7 (Null0), routed via RIB
Maksud dari paket tersebut adalah bahwa paket ping dari 12.12.12.2 untuk 11.11.11.7 akan dirouted (diarahkan) ke null0 yang artinya dibuang.

Sekarang apa jadinya jika route dengan gateway null0 di R1 tersebut kita hapus?
R1(config)#router ospf 1 R1(config-router)#no discard-route external R1(config-router)#do sh ip ro O*E2 0.0.0.0/0 [110/1] via 12.12.12.2, 00:00:02, Ethernet0/0 11.0.0.0/32 is subnetted, 6 subnets C 11.11.11.1 is directly connected, Loopback0 C 11.11.11.2 is directly connected, Loopback1 C 11.11.11.3 is directly connected, Loopback2 C 11.11.11.4 is directly connected, Loopback3 C 11.11.11.5 is directly connected, Loopback4 C 11.11.11.6 is directly connected, Loopback5 12.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 12.12.12.0/24 is directly connected, Ethernet0/0 23.0.0.0/24 is subnetted, 1 subnets O 23.23.23.0 [110/20] via 12.12.12.2, 00:00:02, Ethernet0/0
Perhatikan bahwa saat ini route dengan gateway null0 di R1 sudah hilang. Sekarang kita coba lagi ping dari R2 ke 11.11.11.7
R2(config-router)#do ping 11.11.11.7
Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 11.11.11.7, timeout is 2 seconds: ..... Success rate is 0 percent (0/5)
Hasilnya akan time out. Coba kita trace
R2(config-router)#do traceroute 11.11.11.7 Type escape sequence to abort. Tracing the route to 11.11.11.7 1 12.12.12.1 0 msec 4 msec 0 msec 2 12.12.12.2 0 msec 0 msec 0 msec 3 * * * 4 * * * 5 * * * 6 * * * 7 * * * 8 * * * 9 * * * 10 * * * 11 * * * 12 * * *
Perhatikan hasilnya akan looping terus, jika kita perhatikan di R1, maka R1 akan mengeluarkan peringatan bahwa paket ping dari R2 tersebut akan dirouted (diteruskan) ke 12.12.12.2
R1(config-router)#
*Oct 24 06:08:38.467: ICMP: redirect sent to 12.12.12.2 for dest 11.11.11.7, use gw 12.12.12.2 R1(config-router)# *Oct 24 06:08:41.467: ICMP: redirect sent to 12.12.12.2 for dest 11.11.11.7, use gw 12.12.12.2
Kenapa R1 meneruskan paket tersebut ke R2 lagi? karena R1 tidak memiliki route dengan gateway null0 dan R1 memiki default route ke R2
R1(config-router)#do sh ip ro
O*E2 0.0.0.0/0 [110/1] via 12.12.12.2, 00:05:07, Ethernet0/0 11.0.0.0/32 is subnetted, 6 subnets C 11.11.11.1 is directly connected, Loopback0 C 11.11.11.2 is directly connected, Loopback1 C 11.11.11.3 is directly connected, Loopback2 C 11.11.11.4 is directly connected, Loopback3 C 11.11.11.5 is directly connected, Loopback4 C 11.11.11.6 is directly connected, Loopback5 12.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 12.12.12.0/24 is directly connected, Ethernet0/0 23.0.0.0/24 is subnetted, 1 subnets O 23.23.23.0 [110/20] via 12.12.12.2, 00:05:07, Ethernet0/0
Sekarang kita coba kembalikan route dengan gateway null0 nya
R1(config)#router ospf 1 R1(config-router)#discard-route external R1(config-router)#do sh ip ro O*E2 0.0.0.0/0 [110/1] via 12.12.12.2, 00:00:05, Ethernet0/0 11.0.0.0/8 is variably subnetted, 7 subnets, 2 masks O 11.11.11.0/29 is a summary, 00:00:04, Null0 C 11.11.11.1/32 is directly connected, Loopback0 C 11.11.11.2/32 is directly connected, Loopback1 C 11.11.11.3/32 is directly connected, Loopback2 C 11.11.11.4/32 is directly connected, Loopback3 C 11.11.11.5/32 is directly connected, Loopback4 C 11.11.11.6/32 is directly connected, Loopback5 12.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 12.12.12.0/24 is directly connected, Ethernet0/0 23.0.0.0/24 is subnetted, 1 subnets O 23.23.23.0 [110/20] via 12.12.12.2, 00:00:07, Ethernet0/0
Kita coba trace dari R2 lagi
R2(config-router)#do traceroute 11.11.11.7 Type escape sequence to abort. Tracing the route to 11.11.11.7 1 12.12.12.1 0 msec 0 msec 4 msec 2 12.12.12.1 !H !H !H
Oke tidak terjadi looping!!! sudah tahu kan fungsinya route dengan gateway null0?
{ Read More }


Lab 72 - OSPF Summarization Summary Address


Sebelumnya kita telah belajar melakukan OSPF Summarization pada ABR menggunakan area range. Selanjutnya pada lab ini kita akan belajar melakukan summarization pada ASBR menggunakan summary address. Berikut topologi yang akan kita gunakan pada lab ini

Gambar 1 Topologi jaringan RIP & OSPF
Diasumsikan kita telah mengkonfigurasi RIP dan OSPF seperti topologi diatas, jangan lupa untuk melakukan redistribution ya..
R2(config-router)#do sh ip ro
11.0.0.0/32 is subnetted, 6 subnets O E2 11.11.11.1 [110/20] via 12.12.12.1, 00:00:01, Ethernet0/0 O E2 11.11.11.2 [110/20] via 12.12.12.1, 00:00:18, Ethernet0/0 O E2 11.11.11.3 [110/20] via 12.12.12.1, 00:00:01, Ethernet0/0 O E2 11.11.11.4 [110/20] via 12.12.12.1, 00:00:18, Ethernet0/0 O E2 11.11.11.5 [110/20] via 12.12.12.1, 00:00:01, Ethernet0/0 O E2 11.11.11.6 [110/20] via 12.12.12.1, 00:00:18, Ethernet0/0 12.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 12.12.12.0/24 is directly connected, Ethernet0/0 23.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 23.23.23.0/24 is directly connected, Ethernet0/1
R3(config-router)#do sh ip ro 11.0.0.0/32 is subnetted, 6 subnets O E2 11.11.11.1 [110/20] via 23.23.23.2, 00:00:40, Ethernet0/0 O E2 11.11.11.2 [110/20] via 23.23.23.2, 00:01:12, Ethernet0/0 O E2 11.11.11.3 [110/20] via 23.23.23.2, 00:00:40, Ethernet0/0 O E2 11.11.11.4 [110/20] via 23.23.23.2, 00:01:12, Ethernet0/0 O E2 11.11.11.5 [110/20] via 23.23.23.2, 00:00:40, Ethernet0/0 O E2 11.11.11.6 [110/20] via 23.23.23.2, 00:01:12, Ethernet0/0 12.0.0.0/24 is subnetted, 1 subnets O 12.12.12.0 [110/20] via 23.23.23.2, 00:02:33, Ethernet0/0 23.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 23.23.23.0/24 is directly connected, Ethernet0/0
Sekarang kita lakukan summarization pada ASBR, dalam hal ini R1
R1(config)#router ospf 1 R1(config-router)#summary-address 11.11.11.0 255.255.255.248
Untuk pengujian kita coba lihat tabel routing di R2 dan R3
R2(config-router)#do sh ip ro 11.0.0.0/29 is subnetted, 1 subnets O E2 11.11.11.0 [110/20] via 12.12.12.1, 00:00:28, Ethernet0/0 12.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 12.12.12.0/24 is directly connected, Ethernet0/0 23.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 23.23.23.0/24 is directly connected, Ethernet0/1
R3(config-router)#do sh ip ro 11.0.0.0/29 is subnetted, 1 subnets O E2 11.11.11.0 [110/20] via 23.23.23.2, 00:00:53, Ethernet0/0 12.0.0.0/24 is subnetted, 1 subnets O 12.12.12.0 [110/20] via 23.23.23.2, 00:04:21, Ethernet0/0 23.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 23.23.23.0/24 is directly connected, Ethernet0/0
Perhatikan bahwa saat ini IP Loopback R1 sudah berhasil di summary menjadi satu route saja
{ Read More }


Lab 71 - OSPF Summarization Area Range


Pada lab ini kita belajar melakukan summarization pada OSPF. OSPF hanya mengizinkan kita untuk melakukan redistribution di dua tempat, yaitu di ABR dan ASBR. Pada lab ini kita hanya akan fokus belajar melakukan redistribution pada ABR. Berikut topologi yang akan kita gunakan pada lab ini

Gambar 1 Topologi multi area OSPF
Diasumsikan bahwa kita sudah mengkonfigurasi OSPF seperti topologi diatas dan R3 sudah memiliki informasi tentang seluruh IP Loopback R1
R3(config-router)#do sh ip ro
11.0.0.0/32 is subnetted, 6 subnets O IA 11.11.11.1 [110/21] via 23.23.23.2, 00:00:05, Ethernet0/0 O IA 11.11.11.2 [110/21] via 23.23.23.2, 00:00:05, Ethernet0/0 O IA 11.11.11.3 [110/21] via 23.23.23.2, 00:00:05, Ethernet0/0 O IA 11.11.11.4 [110/21] via 23.23.23.2, 00:00:05, Ethernet0/0 O IA 11.11.11.5 [110/21] via 23.23.23.2, 00:00:05, Ethernet0/0 O IA 11.11.11.6 [110/21] via 23.23.23.2, 00:00:05, Ethernet0/0 12.0.0.0/24 is subnetted, 1 subnets O IA 12.12.12.0 [110/20] via 23.23.23.2, 00:00:05, Ethernet0/0 23.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 23.23.23.0/24 is directly connected, Ethernet0/0
Sekarang kita coba konfigurasi summarization di ABR, dalam hal ini R2
R2(config)#router ospf 1 R2(config-router)#area 1 range 11.11.11.0 255.255.255.248
Untuk pengujian kita coba lihat tabel routing di R3
R3(config-router)#do sh ip ro 11.0.0.0/29 is subnetted, 1 subnets O IA 11.11.11.0 [110/21] via 23.23.23.2, 00:02:45, Ethernet0/0 12.0.0.0/24 is subnetted, 1 subnets O IA 12.12.12.0 [110/20] via 23.23.23.2, 00:03:30, Ethernet0/0 23.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 23.23.23.0/24 is directly connected, Ethernet0/0
Perhatikan bahwa saat ini enam IP Loopback R1 sudah disummary menjadi satu route saja. Untuk lebih memastikan kita coba ping dari R3 ke IP Loopback R1
R3(config-router)#do ping 11.11.11.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 11.11.11.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/4/16 ms R3(config-router)#do ping 11.11.11.6 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 11.11.11.6, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/4 ms
{ Read More }


Lab 70 - OSPF Filtering (Perbolehkan IP Ganjil)


Sebelumnya kita telah belajar melakukan filtering untuk Memperbolehkan IP Genap. Selanjutnya pada lab ini kita akan belajar melakukan filtering pada OSPF untuk memperbolehkan IP Ganjil saja. Berikut topologi yang akan kita gunakan pada lab ini

Gambar 1 Topologi jaringan OSPF
Kita hapus dulu konfigurasi filtering yang kita lakukan sebelumnya
R2(config)#router ospf 1 R2(config-router)#no distribute-list 1 in
R3(config)#router ospf 1 R3(config-router)#no distribute-list 1 in
Pastikan tabel routing di R2 dan R3 sudah lengkap lagi
R2(config-router)#do sh ip ro 11.0.0.0/32 is subnetted, 6 subnets O 11.11.11.1 [110/11] via 12.12.12.1, 00:00:48, Ethernet0/0 O 11.11.11.2 [110/11] via 12.12.12.1, 00:00:48, Ethernet0/0 O 11.11.11.3 [110/11] via 12.12.12.1, 00:00:48, Ethernet0/0 O 11.11.11.4 [110/11] via 12.12.12.1, 00:00:48, Ethernet0/0 O 11.11.11.5 [110/11] via 12.12.12.1, 00:00:48, Ethernet0/0 O 11.11.11.6 [110/11] via 12.12.12.1, 00:00:48, Ethernet0/0 12.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 12.12.12.0/24 is directly connected, Ethernet0/0 23.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 23.23.23.0/24 is directly connected, Ethernet0/1
R3(config-router)#do sh ip ro 11.0.0.0/32 is subnetted, 6 subnets O 11.11.11.1 [110/21] via 23.23.23.2, 00:00:51, Ethernet0/0 O 11.11.11.2 [110/21] via 23.23.23.2, 00:00:51, Ethernet0/0 O 11.11.11.3 [110/21] via 23.23.23.2, 00:00:51, Ethernet0/0 O 11.11.11.4 [110/21] via 23.23.23.2, 00:00:51, Ethernet0/0 O 11.11.11.5 [110/21] via 23.23.23.2, 00:00:51, Ethernet0/0 O 11.11.11.6 [110/21] via 23.23.23.2, 00:00:51, Ethernet0/0 12.0.0.0/24 is subnetted, 1 subnets O 12.12.12.0 [110/20] via 23.23.23.2, 00:00:51, Ethernet0/0 23.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 23.23.23.0/24 is directly connected, Ethernet0/0
Sekarang kita konfigurasikan filtering agar R3 hanya memiliki informasi tentang IP Ganjil saja
R3(config)#access-list 2 permit 0.0.0.1 255.255.255.254 R3(config)#router ospf 1 R3(config-router)#distribute-list 2 in
Untuk pengujian kita coba lihat tabel routing di R3
R3(config-router)#do sh ip ro 11.0.0.0/32 is subnetted, 3 subnets O 11.11.11.1 [110/21] via 23.23.23.2, 00:02:25, Ethernet0/0 O 11.11.11.3 [110/21] via 23.23.23.2, 00:02:25, Ethernet0/0 O 11.11.11.5 [110/21] via 23.23.23.2, 00:02:25, Ethernet0/0 23.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 23.23.23.0/24 is directly connected, Ethernet0/0
Perhatikan bahwa saat ini R3 hanya memiliki informasi tentang IP Ganjil saja, sesuai dengan yang kita inginkan
{ Read More }


FeedBack

Jika Anda merasa terbantu dengan artikel dari Coretan Bocah IT, silahkan berlangganan GRATIS via email. Dengan begitu, Anda akan mendapat kiriman artikel setiap ada artikel baru yang terbit di Coretan Bocah IT

Masukkan Email :

IconIconIconFollow Me on Pinterest