Saturday, February 09, 2013

OSPF Virtual-link

syarat dari ospf tuh khan semua area harus terhubung ke area 0, nah pada gambar di atas, area 0 itu cuman loopbacknya aja. okelah area 1 sudah terhubung ke area 0, tapi bagaimana dengan area 2 dan area 3?
Pada area 2 agar bisa terhubung ke area 0 itu harus kita buat virtual linknya . tapi sebelum ngelab virtual link, kita bikin preconfignya dulu ya :
konfigurasi :
R1 
conf t
int l0 
ip add 1.1.1.1 255.255.255.255
int f0/0
ip add 12.12.12.1 255.255.255.0
no sh
router ospf 1
network 1.1.1.1 0.0.0.0 area 0
network 12.12.12.1 0.0.0.0 area 1 

R2 
conf t
int l0 
ip add 2.2.2.2 255.255.255.255
int f0/0
ip add 12.12.12.2 255.255.255.0
no sh
int s0/0
ip add 23.23.23.2 255.255.255.0
no sh
router ospf 2
network 2.2.2.2 0.0.0.0 area 1
network 12.12.12.2 0.0.0.0 area 1
network 23.23.23.2 0.0.0.0 area 2

R3
conf t
int l0
ip add 3.3.3.3 255.255.255.255
int s0/0
ip add 23.23.23.3 255.255.255.255
no sh
router ospf 3
network 23.23.23.3 0.0.0.0 area 2
network 3.3.3.3 0.0.0.0 area 3

untuk membuat virtual link, dari area 2 ke area 0, kita harus tentukan , dia tuh di lewatin area berapa? nah disini area 2 mau ke area 0 itu melewati area 1, jadi gini cara bikin virtual link di R2
conf t
router ospf 2
area 1 virtual-link 1.1.1.1 ======> ini router ID dari R1
Konfigurasi R1
router ospf 1
area 1 virtual-link 2.2.2.2 =======> ini router ID dari R2

Sekarang bagaimana untuk membuat virtual link dari area 3 ke area 0? nah disini khan sudah ada virtual link antara R1dan R2, maka seolah-olah di R2 sudah ada area 0, jadi si R3 (area 3) bikin virtual link aja ke R2 (lewat area2), gak usah ke R1 langsung, berikut caranya :
Konfigurasi R2 :
conf t
router ospf 2
area 2 virtual-link 3.3.3.3

Konfigurasi R3 :
conf t
router ospf 3
area 2 virtual -link 2.2.2.2

sekarang pengecheckan standar, show ip route di semua router, terus test ping.
nah untuk check virtual-link nya berikut command nya :

R3#sh ip ospf virtual-links
Virtual Link OSPF_VL0 to router 2.2.2.2 is up
  Run as demand circuit
  DoNotAge LSA allowed.
  Transit area 2, via interface Serial0/0, Cost of using 64
  Transmit Delay is 1 sec, State POINT_TO_POINT,
  Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
    Hello due in 00:00:05
    Adjacency State FULL (Hello suppressed)
    Index 1/2, retransmission queue length 0, number of retransmission 0
    First 0x0(0)/0x0(0) Next 0x0(0)/0x0(0)
    Last retransmission scan length is 0, maximum is 0
    Last retransmission scan time is 0 msec, maximum is 0 msec

R2(config-router)#do sh ip ospf virtual
Virtual Link OSPF_VL1 to router 3.3.3.3 is up
  Run as demand circuit
  DoNotAge LSA allowed.
  Transit area 2, via interface Serial0/0, Cost of using 64
  Transmit Delay is 1 sec, State POINT_TO_POINT,
  Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
    Hello due in 00:00:06
    Adjacency State FULL (Hello suppressed)
    Index 2/4, retransmission queue length 0, number of retransmission 0
    First 0x0(0)/0x0(0) Next 0x0(0)/0x0(0)
    Last retransmission scan length is 0, maximum is 0
    Last retransmission scan time is 0 msec, maximum is 0 msec
Virtual Link OSPF_VL0 to router 1.1.1.1 is up
  Run as demand circuit
  DoNotAge LSA allowed.
  Transit area 1, via interface FastEthernet0/0, Cost of using 10
  Transmit Delay is 1 sec, State POINT_TO_POINT,
  Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
    Hello due in 00:00:07
    Adjacency State FULL (Hello suppressed)
    Index 1/3, retransmission queue length 0, number of retransmission 1
    First 0x0(0)/0x0(0) Next 0x0(0)/0x0(0)
    Last retransmission scan length is 1, maximum is 1
    Last retransmission scan time is 0 msec, maximum is 0 msec
R2(config-router)#


dah itu aja deh, semoga bermanfaat 






Wednesday, January 30, 2013

Frame relay ospf point-to-multipoint non-broadcast

Konfigurasi IP & encapsulasi, no invers-arp di R1:
R1(config)#int s0/0
R1(config-if)#ip add 123.123.123.1 255.255.255.0
R1(config-if)#no sh
R1(config-if)#encapsulation frame-relay
R1(config-if)#no frame-relay inverse-arp
R1(config)#int l0
R1(config-if)#ip add 1.1.1.1 255.255.255.255

Konfigurasi IP & encapsulasi, no invers-arp di R2:
R2(config)#int s0/0
R2(config-if)#ip add 123.123.123.2 255.255.255.0
R2(config-if)#encapsulation frame-relay
R2(config-if)#no frame-relay inverse-arp
R2(config)#int l0
R2(config-if)#ip add 2.2.2.2 255.255.255.255



Konfigurasi IP & encapsulasi, no invers-arp di R3:
R3(config)#int s0/0
R3(config-if)#ip add 123.123.123.3 255.255.255.0
R3(config-if)#encapsulation frame-relay
R3(config-if)#no frame-relay inverse-arp
R3(config-if)#ip add 3.3.3.3 255.255.255.255

mapping ip ke frame-relay di setiap interface tanpa menambahkan perintah "broadcast" :

R1(config-if)#int s0/0
R1(config-if)#frame-relay map ip 123.123.123.2 102
R1(config-if)#frame-relay map ip 123.123.123.3 103

R2(config-if)#int s0/0
R2(config-if)#frame-relay map ip 123.123.123.1 201
R2(config-if)#frame-relay map ip 123.123.123.3 201

R3(config-if)#int s0/0
R3(config-if)#frame-relay map ip 123.123.123.1 301
R3(config-if)#frame-relay map ip 123.123.123.2 301

check frame-relay map nya :
R1#sh frame-relay map
Serial0/0 (up): ip 123.123.123.2 dlci 102(0x66,0x1860), static,
              CISCO, status defined, active
Serial0/0 (up): ip 123.123.123.3 dlci 103(0x67,0x1870), static,
              CISCO, status defined, active

Konfigurasi OSPF frame-relay point-to-multipoint non-broadcast
R1-R3(config)#int s0/0
R1-R3(config-if)#ip ospf network point-to-multipoint non-broadcast

Konfigurasi OSPF di semua router :
R1-R3(config)#router ospf 1
R1-R3(config-router)#network 0.0.0.0 255.255.255.255 area 0

ketika kita konfigurasi OSPF, semua router tidak mau bertukar-menukar routing update, karena kita membuat tipe jaringannya adalah point-to-multipoint non-broadcast, artinya disitu tidak dapat melewatkan paket multicast. maka kita harus mendefinisikan neighbour dari OSPF secara manual , karena R1 sebagai hub, jadi di router itulah yang hanya di konfigurasi neighbour :
R1(config)#router ospf 1
R1(config-router)#neighbor 123.123.123.2
R1(config-router)#neighbor 123.123.123.3

verifikasi :
test ping ke semua router, harusnya dah bisa







OSPF Over Frame relay = point to point

Disini akan saya coba labkan OSPF frame-relay point-to-point :

- R1 sebagai hub, R2 dan R3 sebagai spoke
- Mapping DLCI di framerelay switch seperti gambar diatas.
- Dari R1 ke R2 mapping DLCI = 102
- Dari R2 ke R1 mapping DLCI = 201
- Dari R1 ke R3 mapping DLCI = 103
- Dari R3 ke R1 mapping DLCI = 301
- Rubah encapsulasi di semua router menjadi frame-relay
- Sekarang kita buat sub interface di R1 sebagai berikut :
S0/0.102 point-to-point = 12.12.12.1 255.255.255.0
S0/0.103 point-to-point = 13.13.13.1 255.255.255.0
Lo0 = 1.1.1.1 255.255.255.255


R1(config)#int s0/0
R1(config-if)#encapsulation frame-relay
R1(config-if)#int s0/0.102 point-to-point
R1(config-subif)#ip add 12.12.12.1 255.255.255.0
R1(config-subif)#int s0/0.103 point-to-point
R1(config-subif)#ip add 13.13.13.1 255.255.255.0
R1(config-subif)#int l0
R1(config-if)#ip add 1.1.1.1 255.255.255.255

-Konfigurasi R2
S0/0.201 point-to-point = 12.12.12.2 255.255.255.0
lo0 = 2.2.2.2 255.255.255.255
-Konfigurasi R3
S0/0.301 point-to-point = 13.13.13.3 255.255.255.0
lo0 = 3.3.3.3 255.255.255.255


R3(config)#int s0/0
R3(config-if)#encapsulation frame-relay
R3(config-if)#no sh
R3(config)#int s0/0.301 point-to-point
R3(config-subif)#ip add 13.13.13.3 255.255.255.0
R3(config-subif)#int l0
R3(config-if)#ip add 3.3.3.3 255.255.255.255

matikan invers-arp di interface fisik tiap router (R1-R3):

R1-R3(config)#int s0/0
R1-R3(config-if)#no frame-relay inverse-arp

Konfigurasikan mappiing DLCI ditiap-tiap router :

R1(config)#int s0/0.102
R1(config-subif)#frame-relay interface-dlci 102
R1(config)#int s0/0.103
R1(config-subif)#frame-relay interface-dlci 103


R2(config)#int s0/0.201
R2(config-subif)#frame-relay interface-dlci 201



R3(config)#int s0/0.301
R3(config-subif)#frame-relay interface-dlci 301


check hasil frame-relay map nya di R1, apakah sudah aktif :

R1#sh frame-relay map
Serial0/0.102 (up): point-to-point dlci, dlci 102(0x66,0x1860), broadcast
          status defined, active
Serial0/0.103 (up): point-to-point dlci, dlci 103(0x67,0x1870), broadcast
          status defined, active


Test ping dari R1 (hub) ke R2 dan R3 :


R1#ping 12.12.12.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 12.12.12.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 20/39/68 ms
R1#ping 13.13.13.3

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 13.13.13.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 20/40/60 ms
R1#

konfigurasikan ospf di semua router :
R1-R3(config)#router ospf 1
R1-R3(config-router)#network 0.0.0.0 255.255.255.255 area 0

Pengujian R1 :



Pengujian di semua router, harusnya semua IP dah bisa di ping :

R1#ping 2.2.2.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 20/44/60 ms
R1#ping 3.3.3.3

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 3.3.3.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 20/41/64 ms

R2#ping 1.1.1.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 16/46/76 ms
R2#ping 3.3.3.3

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 3.3.3.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 52/72/96 ms
R2#

R3#ping 1.1.1.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 36/44/56 ms
R3#ping 2.2.2.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 64/78/96 ms
R3#

Sunday, January 20, 2013

auto-summary

Konfigurasi R1 :
int f0/0 
ip add 10.10.10.1 255.255.255.0
no sh
int l1
ip add 172.16.1.1 255.255.255.0

int l2
ip add 172.16.2.1 255.255.255.0

int l3
ip add 172.16.3.1 255.255.255.0

int l4
ip add 172.16.4.1 255.255.255.0

int l5
ip add 172.16.5.1 255.255.255.0

int l6
ip add 172.16.6.1 255.255.255.0

int l7
ip add 172.16.7.1 255.255.255.0

Konfigurasi R2 :
int f0/0
ip add 10.10.10.2 255.255.255.0
no sh

Sekarang kita konfigurasi routing EIGRP di R1 :
router eigrp 1
network 10.0.0.0
network 172.16.0.0

Konfigurasi EIGRP di R2 :
router eigrp 1
network 10.0.0.0

Sekarang check routing di R2 :
Hasil show ip route, menunjukkan network di loopback 1-7 di summary oleh R1 menjadi 172.16.0.0/16
Sekarang kita coba menonaktifkan auto-summary dari R1:
router eigrp 1
no auto-summary
Sekarang kita check di R2 :
Disitu R1 mengirimkan semua network yang di interface loopbacknya, enggak di ringkas (auto-summary) seperti sebelumnya.





Thursday, January 17, 2013

Frame-relay multipoint sub interface - static mapping


Konfigurasi FRSW :
interface s0/0
encapsulation frame-relay
frame-relay lmi-type cisco
frame-relay intf-type dce
frame-relay route 102 interface serial 0/1 201
interface s0/1
encapsulation frame-relay
frame-relay intf-type dce
frame-relay lmi-type cisco
frame-relay route 201 interface serial0/0 102

Konfigurasi R1 :
interface s0/0
encapsulation frame-relay
interface-serial s0/0.1 multipoint
ip add 12.12.12.1 255.255.255.0
frame-relay map ip 12.12.12.2 102

Konfigurasi R2:
interface s0/0
encapsulation frame-relay
interface s0/0.1 multipoint
ip add 12.12.12.2 255.255.255.0
frame-relay map ip 12.12.12.1 201

verifikasi :
show frame-relay map

Frame relay multipoint sub interface inverse arp

Lab multipoint sub interface inverse arp

topologi :
Disini ada R1 dan R2 yang terhubung ke frame-relay switch, dari kedua router tersebut secara logikal terhubung menggunakan frame relay multipoint sub interface. Ketika kita akan membuat sub-interface untuk frame-relay, kita harus mendefiniskan terlebih dahulu, interfacenya itu sebagai point-to-point atau point to multipoint. Nah klo interface serialnya, itu dah default dia sebagai multipoint.
Sekarang kembali ke R1dan R2, akan kita konfigurasi subinterface inverse arp :

konfigurasi di FRSW :
int s0/0
encapsulation frame-relay
frame-relay intf-type dce
frame-relay lmi-type cisco
frame-relay route 102 interface s0/1 201
i
ints0/1
encapsulation frame-relay
frame-relay intf-type dce
frame-relay lmi-type cisco
frame-relay route 201 interface serial0/0 102

Konfigurasi R1:
interface serial 0/0
encapsulation frame-relay
interface serial 0/0.1 multipoint (nah ini yang membedakan sub-interface dengan interface fisik)
ip add 12.12.12.1 255.255.255.0
frame-relay interface-dlci 102 (ini untuk apa? dinamic mapping?)

Konfigurasi R2 :
interface serial 0/0
encapsulation frame-relay
interface serial 0/0.1 multipoint
ip add 12.12.12.2 255.255.255.0
frame-relay interface-dlci 201 (ini untuk apa? dinamic mapping?)

Verifikasi :
FRSW:
show frame-relay route
R1&R2
show frame-relay map
ping dari R1ke R2

Tuesday, January 08, 2013

Frame relay Dynamic & Static Map

Ditopologi ini R1 dan R2 terhubung ke frame-relay switch, kemudian menggunakan dynamic mapping.
masalah teorinya nanti dulu, klo sempet ya tak tulis :)

Konfigurasi di R1
int s0/0
encapsulation frame-relay
ip add 12.12.12.1 255.255.255.0
no sh

Konfigurasi di R2
int s0/0
encapsulation frame-relay
ip add 12.12.12.2 255.255.255.0
no sh

Konfigurasi Frame-relay Switch
Int s0/0
encapsulation frame-relay
frame-relay intf-type dce
frame-relay lmi-type cisco
frame-relay route 102 interface s0/1 201

int s0/1
encapsulation frame-relay
frame-relay intf-type dce
frame-relay lmi-type cisco
frame-relay route 201 interface s0/0 102

verifikasi :


















Sekarang kita coba frame-relay static mapping
R1
int s0/0
frame-relay map ip 12.12.12.2 102 broadcast

R2
int s0/0
frame-relay map ip 12.12.12.1 201 broadcast

kita check statusnya :

Wednesday, October 31, 2012

HSRP, VRRP, GLBP

Topologi

Lab 1 (HSRP):
Pada switch PAT-4 dan SW10, akan dikonfigurasi link redundant dengan menggunakan HSRP. Dari kedua switch tersebut terdapat IP virtual 10.10.10.1

Sifat HSRP :

  • Active & Standby
  • Mengirimkan hello message setiap 3 detik, dan akan timeout setelah 10 detik

Konfigurasi :
SW9 :
konfigurasi di SW9 port Fa0/3, Fa0/4, Fa0/5 Sebagai Vlan 10.

SW9(config)#int range f0/3 - 5
SW9(config-if-range)#switchport mode access
SW9(config-if-range)#switchport access vlan 10

Konfigurasi di  Switch PAT-4
PAT-4(config)#int f0/3
PAT-4(config-if)#switchport mode access
PAT-4(config-if)#switchport access vlan 10

PAT-4(config)#int vlan 10
PAT-4(config-if)#no shutdown
PAT-4(config-if)#ip address 10.10.10.2 255.255.255.0
PAT-4(config-if)#standby 1 ip 10.10.10.1
PAT-4(config-if)#standby 1 priority 150 (memaksa PAT-4 menjadi link active, default prioritynya adalah 100)

Konfigurasi di Switch SW10
PAT-4(config)#int f0/4
PAT-4(config-if)#switchport mode access
PAT-4(config-if)#switchport access vlan 10

PAT-4(config)#int vlan 10
PAT-4(config-if)#no shutdown
PAT-4(config-if)#ip address 10.10.10.3 255.255.255.0
PAT-4(config-if)#standby 1 ip 10.10.10.1
PAT-4(config-if)#standby 1 priority 100 (tanpa kita konfig ini, default prioritynya adalah 100)

Pengujian :

  • Telnet ke IP virtual tersebut, masuk ke switch mana? harusnya sih masuk ke PAT-4
  • check status di PAT-4
  • check status di SW10
pada SW10 terdapat status state id standby


Sekarang kita coba di interface  PAT-4 menuju SW9 dimatikan sambil melakukan test ping dari pc host ke 10.10.10.1
PAT-4(config)#int f0/3
PAT-4(config-if)#shutdown
kita lihat statusnya di PAT-4

harusnya SW10 berubah menjadi aktif.
sekarang kembali aktifkan iterface di PAT-4, apakah dia kembali aktif.
 PAT-4(config)#int f0/3
PAT-4(config-if)#no shutdown


Sunday, October 28, 2012

Etherchannel

Pada Spanning Tree, jika ada redundant link, maka tidak semua port akan di gunakan, sehingga tidak efisien. Agar semua port redundant yang kita buat di switch digunakan, maka kita bisa menggunakan salah satu fitur yaitu etherchannel (lihat gambar dibawah).
Lab 1 :
disini kita akan belajar etherchannel mode on. klo mode on, artinya di interface etherchannel tersebut tidak ada negoisasi terlebih dahulu.

Konfigurasi di SW1 :

SW1(config)#int range f0/1 - 3
SW1(config-if-range)#switchport trunk encapsulation dot1q
SW1(config-if-range)#switchport mode trunk
SW1(config-if-range)#channel-group 1 mode on

Konfigurasi di SW2 :

SW2(config)#int range f0/1 - 3
SW2(config-if-range)#switchport trunk encapsulation dot1q
SW2(config-if-range)#switchport mode trunk
SW2(config-if-range)#channel-group 1 mode on

Pengujian :


Lihat status interface port-channel 1, disitu bandwidht nya bertambah menjadi 300MB, dan anggota dari etherchannel terdiri dari Fa0/1,Fa0/2,Fa0/3

Klo mau statusnya lebih detail, bisak ketik show etherchannel summary

LAB 2 :
Etherchannel PAGP desirable
klo pakai PAGP ini cisco propetary. pada PAGP desirable, port berusaha menjadi etherchannel dengan melakukan inisialisasi pertama kali. berikut konfigurasinya :
SW1 :
interface FastEthernet0/1
 switchport trunk encapsulation dot1q
 switchport mode trunk
 channel-group 1 mode desirable
!
interface FastEthernet0/2
 switchport trunk encapsulation dot1q
 switchport mode trunk
 channel-group 1 mode desirable
!
interface FastEthernet0/3
 switchport trunk encapsulation dot1q
 switchport mode trunk
 channel-group 1 mode desirable
!

SW2

interface FastEthernet0/1
 switchport trunk encapsulation dot1q
 switchport mode trunk
 channel-group 1 mode desirable
!
interface FastEthernet0/2
 switchport trunk encapsulation dot1q
 switchport mode trunk
 channel-group 1 mode desirable
!
interface FastEthernet0/3
 switchport trunk encapsulation dot1q
 switchport mode trunk
 channel-group 1 mode desirable
!

Pengujian :



RSTP (Rapid Spanning Tree)

  • Kenapa harus ada RSTP? karena Spanning three waktu untuk converge-nya jaringan terlalu lama (50detik). 
  • RSTP merupakan openstandart IEEE 802.1w
Lab :
Sekarang kita konfigurasi di SW1 & SW2 sebagai RSTP

SW1#conf t

SW1(config)#spanning-tree mode rapid-pvst

SW2#conf t
SW2(config)#spanning-tree mode rapid-pvst

Sekarang lakukan pengujian di SW1

pada kotak merah disitu tertulis Spanning tree enabled protocol rstp

Sekarang kita lakukan pengujian di SW2