Move to http://sioduy.blogsome.com

i will move my blog to http://sioduy.blogsome.com so the new topology will be posting on it 

Enable Multicast Support for MPLS VPN

this is my new topology, enabling multicast support for MPLS VPN










recently i thought how to enable multicast support on MPLS VPN until finally found articel from cisco so i try it

this is the configuration for PE Router


!--- Configure VRF, Route Distinguser (RD) to allow IP overlaping
!--- Configure the default Multicast Distribution Tree (MDT)
!--- for VRF vpn1 & vpn2

!
ip vrf vpn1
rd 777:1
route-target export 777:1
route-target import 777:1
mdt default 239.1.1.1
mdt data 239.2.2.0 0.0.0.255 threshold 1
!
ip vrf vpn2
rd 777:2
route-target export 777:2
route-target import 777:2
mdt default 239.7.7.7
mdt data 239.3.3.0 0.0.0.255 threshold 1
!

!----Enable global multicast routing

ip multicast-routing

!----Enable multicast routing in VRF vpn1 & vpn2

ip multicast-routing vrf vpn1
ip multicast-routing vrf vpn2
!
!
interface Loopback0
ip address 202.162.208.1 255.255.255.255
ip pim sparse-dense-mode
!
interface Loopback10
ip vrf forwarding vpn1
ip address 192.168.2.254 255.255.255.255
ip pim sparse-dense-mode

!--- Multicast needs to be enable on loopback interface
!--- This is used as a source
!--- for MP-BGP session between PE routers that participate in Multicast VPN


interface Loopback20
ip vrf forwarding vpn2
ip address 192.168.2.254 255.255.255.255
ip pim sparse-dense-mode

!--- this routers needs to be RP for multicast in VRF vpn1 & vpn2
!--- therefore multicast needs to be enabled on the interface is used as Rendezvous Point (RP)
!
!
interface Serial1/0
no ip address
encapsulation frame-relay
serial restart-delay 0
no arp frame-relay
no frame-relay inverse-arp

!--- Multicast is enabled on PE-CE interfaces in VRF
!
interface Serial1/0.101 point-to-point
ip vrf forwarding vpn1
ip address 192.168.1.1 255.255.255.252
ip pim sparse-dense-mode
no arp frame-relay
frame-relay interface-dlci 101
!
interface Serial1/1
no ip address
encapsulation frame-relay
serial restart-delay 0
!
interface Serial1/1.102 point-to-point
ip vrf forwarding vpn2
ip address 192.168.1.1 255.255.255.252
ip pim sparse-dense-mode
no arp frame-relay
frame-relay interface-dlci 102
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0

!--- Service provider core needs to run multicast as global multicast
!--- to support MVPN services, so multicast is enabled on PE-P links

interface FastEthernet0/0
ip address 202.162.208.6 255.255.255.252
ip pim sparse-dense-mode
duplex auto
speed auto
mpls ip
!
!--- Configure global unicast routing PE-P routers
!
router ospf 1
log-adjacency-changes
network 202.162.208.0 0.0.0.255 area 0

!--- Configure unicast routing in VRF vpn1 & vpn2
!
router rip
version 2
!
address-family ipv4 vrf vpn2
redistribute bgp 777 metric transparent
network 192.168.1.0
network 192.168.2.0
no auto-summary
version 2
exit-address-family
!
address-family ipv4 vrf vpn1
redistribute bgp 777 metric transparent
network 192.168.1.0
network 192.168.2.0
no auto-summary
version 2
exit-address-family

!--- Configure MP-BGP session
!
router bgp 777
no synchronization
bgp log-neighbor-changes
neighbor vpn peer-group
neighbor vpn remote-as 777
neighbor vpn update-source Loopback0
neighbor vpn next-hop-self
neighbor 202.162.208.2 peer-group vpn
neighbor 202.162.208.3 peer-group vpn
no auto-summary
!
address-family vpnv4
neighbor vpn send-community both
neighbor 202.162.208.2 activate
neighbor 202.162.208.3 activate
exit-address-family
!
address-family ipv4 vrf vpn2
redistribute connected
redistribute rip
no synchronization
exit-address-family
!
address-family ipv4 vrf vpn1
redistribute connected
redistribute rip
no synchronization
exit-address-family


!--- Configure auto-RP. The PE1's VRF loopback interfaces
!--- 100 is the RP in VRF vpn1 & vpn2
!
ip pim bidir-enable
ip pim vrf vpn1 send-rp-announce Loopback10 scope 100
ip pim vrf vpn1 send-rp-discovery Loopback10 scope 100
ip pim vrf vpn2 send-rp-announce Loopback20 scope 100
ip pim vrf vpn2 send-rp-discovery Loopback20 scope 100


for P router

!−−− Enable global multicast routing.

!
interface Loopback0
ip address 202.162.208.254 255.255.255.255
ip pim sparse-dense-mode
!
interface FastEthernet0/0
ip address 202.162.208.5 255.255.255.252
ip pim sparse-dense-mode
duplex auto
speed auto
mpls ip

!−−− Enable multicast on links to PE routers
!−−− which have MVPNs configured.

!
interface FastEthernet1/0
ip address 202.162.208.9 255.255.255.252
ip pim sparse-dense-mode
duplex auto
speed auto
mpls ip
!
interface FastEthernet2/0
ip address 202.162.208.249 255.255.255.252
ip pim sparse-dense-mode
duplex auto
speed auto
mpls ip
!

!−−− P1 is configured to announce itself as
!−−− the RP through auto−RP.

router ospf 1
log-adjacency-changes
network 202.162.208.0 0.0.0.255 area 0
!
!
ip pim bidir-enable
ip pim send-rp-announce Loopback0 scope 100
ip pim send-rp-discovery Loopback0 scope 100


troubleshoot it




























































see all configuration at
http://sioduy.100webspace.net/Multicast%20VPN/

6VPE

my network diagram for 6VPE

what is 6VPE ?

IPv6 VPN Network through MPLS IPv4 network

for this topology I use IOS c7200-adventerprisek9-mz.122-33.SRC1.bin i need feature vpnv6 in BGP extension

1.create vrf vpnv6_a & vpnv6_b

2. Network VPN must overlap

3. use sonet interface for backbone

here configuration for PE1

Use vrf definition command to create vrf vpnv6_a & vpnv6_b

you must activate address family ipv6 for ipv6 vpn support

!

vrf definition vpnv6_a
rd 777:1
route-target export 777:1
route-target import 777:1
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
vrf definition vpnv6_b
rd 777:2
route-target export 777:2
route-target import 777:2
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!

Activate ipv6 unicast routing

!
ip cef
ipv6 unicast-routing
ipv6 cef
!

Configure Loopback Interface

!

interface Loopback0
ip address 202.162.208.1 255.255.255.255
!
interface FastEthernet0/0
no ip address
shutdown
duplex half
!

Activate MPLS using command mpls ip on PE to backbone interface

interface POS1/0

ip address 202.162.208.5 255.255.255.252
mpls ip
!

Configure vrf forwarding on PE to CE Interface In different vrf name you can configure IP overlap with other vrf for example interface in vrf vpnv6_a have the same IPv6 address with vrf vpnv6_b

!
interface FastEthernet2/0
vrf forwarding vpnv6_a
no ip address
speed auto
duplex auto
ipv6 address 2001:5C0:1::1/126
!
interface FastEthernet2/1
vrf forwarding vpnv6_b
no ip address
speed auto
duplex auto
ipv6 address 2001:5C0:1::1/126
!

Activate IGP between PE to P router

!

router ospf 1
log-adjacency-changes
network 202.162.208.0 0.0.0.255 area 0
!

Configure MP-BGP

router bgp 777

bgp log-neighbor-changes
neighbor 125.126.46.1 remote-as 777
neighbor 125.126.46.1 update-source Loopback0
!
address-family ipv4
no synchronization
redistribute static
neighbor 125.126.46.1 activate
neighbor 125.126.46.1 next-hop-self
no auto-summary
exit-address-family
!
address-family vpnv4
neighbor 125.126.46.1 activate
neighbor 125.126.46.1 send-community both
exit-address-family
!
address-family vpnv6
neighbor 125.126.46.1 activate
neighbor 125.126.46.1 send-community both
exit-address-family
!
address-family ipv4 vrf vpnv6_a
no synchronization
redistribute static
exit-address-family
!
address-family ipv6 vrf vpnv6_a
redistribute static
no synchronization
exit-address-family
!
address-family ipv4 vrf vpnv6_b
no synchronization
redistribute static
exit-address-family
!
address-family ipv6 vrf vpnv6_b
redistribute static
no synchronization
exit-address-family

Create IPv6 static route in VRF vpnv6_a & vpnv6_b with destination to CE router

!

ipv6 route vrf vpnv6_b 2001:D30:7::/64 2001:5C0:1::3
ipv6 route vrf vpnv6_a 2001:D30:7::/64 2001:5C0:1::3
!

for P router configure each interface with mpls ip and global IPv4 IGP

!
interface Loopback0
ip address 202.162.208.2 255.255.255.255
!
interface FastEthernet0/0
no ip address
shutdown
duplex half
!
interface POS1/0
ip address 202.162.208.6 255.255.255.252
mpls ip
!
interface POS2/0
ip address 202.162.208.254 255.255.255.252
mpls ip
!
router ospf 1
log-adjacency-changes
network 202.162.208.0 0.0.0.255 area 0
!
ip classless
!


troubleshoot it

now we check the packet passing P Router

see the all configuration at

http://sioduy.100webspace.net/6VPE/

MPLS VPN IPv4

hai everybody i am back, long time no see
its time for me to continue posting about networking
maybe starting this time and next time i wilL posting about MPLS Network
now its about MPLS VPN IPv4








this is my first MPLS lab using GNS 3

how about the rule ???
1. don't use sub interface on serial interface PE-CE1
2. create vrf name vpn_1 & vpn_2
3. network PE-CE must overlap ecah other
example PE-CE1 must overlap PE-CE2
4.use rip for PE-CE
5.use ospf for backbone router

and this is sample configuration for PE1

create vrf for vpn_1 & vpn_2
this configuration is mandatory configured

ip vrf vpn_1
rd 777:1
route-target export 777:1
route-target import 777:1
!
ip vrf vpn_2
rd 777:2
route-target export 777:2
route-target import 777:2

configure loopback interface you must configure IP with /32 prefix

interface Loopback0
ip address 202.162.208.1 255.255.255.255


configure interface to backbone network in cisco 3640 you can use tag switching ip or mpls ip command
!
interface FastEthernet0/0
ip address 202.162.208.5 255.255.255.252
duplex auto
speed auto
mpls ip
!

Configure PE-CE interface

!
interface Serial1/0
ip vrf forwarding vpn_1
ip address 192.168.2.1 255.255.255.252
encapsulation frame-relay
serial restart-delay 0
clock rate 504000
no arp frame-relay
frame-relay map ip 192.168.2.2 101 broadcast
no frame-relay inverse-arp
!
interface Serial1/1
no ip address
encapsulation frame-relay
serial restart-delay 0
clock rate 1008000
!
interface Serial1/1.102 point-to-point
ip vrf forwarding vpn_2
ip address 192.168.2.1 255.255.255.252
no arp frame-relay
frame-relay interface-dlci 102
!

Configure global IGP

router ospf 1
log-adjacency-changes
network 202.162.208.0 0.0.0.255 area 0
!

Configure IGP in VRF vpn_1 & vpn_2

router rip
version 2
!
address-family ipv4 vrf vpn_2
redistribute bgp 777 metric transparent
network 192.168.2.0
no auto-summary
version 2
exit-address-family
!
address-family ipv4 vrf vpn_1
redistribute bgp 777 metric transparent
network 192.168.2.0
no auto-summary
version 2
exit-address-family
!

Configure MP-BGP session

!
router bgp 777
no synchronization
bgp log-neighbor-changes
neighbor 202.162.208.3 remote-as 777
neighbor 202.162.208.3 update-source Loopback0
neighbor 202.162.208.3 next-hop-self
no auto-summary
!
address-family vpnv4
neighbor 202.162.208.3 activate
neighbor 202.162.208.3 send-community both
exit-address-family
!
address-family ipv4 vrf vpn_2
redistribute rip
no synchronization
exit-address-family
!
address-family ipv4 vrf vpn_1
redistribute rip
no synchronization
exit-address-family

finish configuration for PE

for P router

Activate tag switching or mpls IP and global IGP

interface Loopback0
ip address 202.162.208.2 255.255.255.255
!
interface FastEthernet0/0
ip address 202.162.208.6 255.255.255.252
duplex auto
speed auto
mpls ip
!
interface FastEthernet1/0
ip address 202.162.208.9 255.255.255.252
duplex auto
speed auto
mpls ip
!
interface FastEthernet2/0
ip address 202.162.208.253 255.255.255.252
duplex auto
speed auto
mpls ip
!
router ospf 1
log-adjacency-changes
network 202.162.208.0 0.0.0.255 area 0

now let's troubleshoot them

you can use show mpls forwarding table command









let's check it with traceroute



















if you want to see all configuration download at
http://sioduy.100webspace.net/MPLS%20VPN%20IPv4/


for the next post i will posting MPLS IPv6 or 6VPE

Interworking BGP Cisco with Juniper

this is my new BGP lab


with combining Cisco dynamips and Olive Junos using Logical router to prevent Olive multiple folder
this Lab running on FreeBSD 7.1
and the scenario

1. Since I've got trouble with OSPF on my QEMU so I use static route for IBGP peering
2. Use BGP regular expression for advertise route with no AS-path at R2
3. Change the origin route advertised out at R2
4. Set network originate 192.168.0.0/16 as Primary and 172.17.0.0/16 as Backup at R3 and vice versa at LR-1
5. Use BGP confederation on AS 8000
6. Set loadbalance on AS 2500

this lab contains
1. BGP loadbalancing
2. MED, Localpreference, regular expression tuning
3. BGP confederation
4. BGP prepending

Traceroute my PC

















Traceroute logical router

















#sh ip bgp at R2


















#sh ip bgp at R4

















root#run show route LR-4

















root#run show route LR-7















if you want to see my configuration you can download from

http://sioduy.100webspace.net/

for the next post maybe i will post multicast IPv6 routing using XORP (eXtensible Open Router Platform)

Multilayer switching

mumpung sambil nunggu donlotan ios yang baru posting-posting lagi ah

kali ini akan posting multilayer switch

ini topologi nya sedikit perkembangan dan perubahan dikit dari yang udah ada
topologi ini memakai IOS c3640-is-mz.124-16.bin untuk tiap-tiap switch

konfigurasinya bisa di liat di
http://sioduy.100webspace.net/Multilayer%20Switching/

seputar komputerku

Komputer butut tapi masih lumayan buat emulasi router
jalan di atas prosesor SEMPRON 64 Tm 2800+ 1600Mhz clockspeed
dengan memory DDR1 2 GB lumayan buat jalanin 7 emulasi router cisco 3640 series untuk jalanin BGP IPv6 di GNS3 meskipun akhirnya hampir ga kuat jalaninnya
peer sering down, sering kehilangan tabel routing nya karena prosesor uda 100% bahkan sepertinya mo meledak. pernah kepikiran untuk export file .net GNS3 ke dynagen di FreeBSD 7.1 AMD64.

BGP IPv6 Configuration

konfigurasi BGP IPv6 dari topologi sebelumnya
IOS yang digunakan adalah c3640-jk9s-mz.124-16.bin
bila ada kesalahan atau tuning konfigurasi mohon untuk dikomentari

R0

!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R0
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
!
!
ip cef
!
!
ipv6 unicast-routing
ipv6 multicast-routing
!
!
!
interface Loopback0
description LOCAL NETWORK
ip address 10.10.1.1 255.255.255.0
ipv6 address 2001:D30:67::1/64
!
interface Loopback1
description LOCAL NETWORK
ip address 10.10.2.1 255.255.255.0
ipv6 address 2001:D30:66::1/64
!
interface FastEthernet0/0
no switchport
description TO R1
ip address 10.1.12.1 255.255.255.252
ipv6 address 2001:D30:77::1/126
!
interface FastEthernet0/1
no switchport
description TO R2
ip address 10.1.13.1 255.255.255.252
ipv6 address 2001:D30:76::1/126
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface Vlan1
no ip address
!
router bgp 5500
bgp log-neighbor-changes
neighbor 2001:D30:76::3 remote-as 5500
neighbor 2001:D30:77::3 remote-as 5500
!
address-family ipv4
no neighbor 2001:D30:76::3 activate
no neighbor 2001:D30:77::3 activate
no auto-summary
no synchronization
exit-address-family
!
address-family ipv6
neighbor 2001:D30:76::3 activate
neighbor 2001:D30:77::3 activate
network 2001:D30:67::/64
no synchronization
exit-address-family
!
ip http server
no ip http secure-server
!
!
control-plane
!
!
alias exec c conf t
!
line con 0
exec-timeout 0 0
logging synchronous
line aux 0
line vty 0 4
login
!
!
end

======================================================

R1


!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
!
!
ip cef
!
!
ipv6 unicast-routing
ipv6 multicast-routing
!
!
!
interface FastEthernet0/0
no switchport
ip address 10.1.24.1 255.255.255.252
ipv6 address 2001:5C0:77::1/126
!
interface FastEthernet0/1
no switchport
ip address 10.1.12.2 255.255.255.252
ipv6 address 2001:D30:77::3/126
!
interface FastEthernet0/2
no switchport
ip address 10.1.14.1 255.255.255.252
ipv6 address 2001:D30:75::1/126
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface Vlan1
no ip address
!
router bgp 5500
no synchronization
bgp default local-preference 700
bgp log-neighbor-changes
neighbor 2001:5C0:77::3 remote-as 777
no neighbor 2001:5C0:77::3 activate
neighbor 2001:D30:75::3 remote-as 5500
no neighbor 2001:D30:75::3 activate
neighbor 2001:D30:77::1 remote-as 5500
no neighbor 2001:D30:77::1 activate
no auto-summary
!
address-family ipv6
neighbor 2001:5C0:77::3 activate
neighbor 2001:D30:75::3 activate
neighbor 2001:D30:77::1 activate
neighbor 2001:D30:77::1 next-hop-self
exit-address-family
!
ip http server
no ip http secure-server
!
!
control-plane
!
alias exec c conf t
!
line con 0
exec-timeout 0 0
logging synchronous
line aux 0
line vty 0 4
!
!
end


===========================================================

R2


!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
!
!
ip cef
!
!
ipv6 unicast-routing
ipv6 multicast-routing
!
!
interface FastEthernet0/0
no switchport
ip address 10.1.13.2 255.255.255.252
ipv6 address 2001:D30:76::3/126
!
interface FastEthernet0/1
!
interface FastEthernet0/2
!
interface FastEthernet0/3
no switchport
ip address 10.1.14.2 255.255.255.252
ipv6 address 2001:D30:75::3/126
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface Ethernet1/0
ip address 10.1.34.1 255.255.255.252
half-duplex
ipv6 address 2001:5C0:76::1/126
!
interface Vlan1
no ip address
!
router bgp 5500
no synchronization
bgp log-neighbor-changes
neighbor 2001:5C0:76::3 remote-as 777
no neighbor 2001:5C0:76::3 activate
neighbor 2001:D30:75::1 remote-as 5500
no neighbor 2001:D30:75::1 activate
neighbor 2001:D30:76::1 remote-as 5500
no neighbor 2001:D30:76::1 activate
no auto-summary
!
address-family ipv6
neighbor 2001:5C0:76::3 activate
neighbor 2001:5C0:76::3 route-map LOCAL_PREF in
neighbor 2001:D30:75::1 activate
neighbor 2001:D30:76::1 activate
neighbor 2001:D30:76::1 next-hop-self
exit-address-family
!
ip http server
no ip http secure-server
!
!
route-map LOCAL_PREF permit 10
match ipv6 address ROUTE_R3
set local-preference 1000
!
route-map LOCAL_PREF permit 20
match ipv6 address ROUTE_R1
set local-preference 10
!
route-map LOCAL_PREF permit 30
!
!
!
ipv6 access-list ROUTE_R3
permit ipv6 2001:5C3:2::/64 any
!
ipv6 access-list ROUTE_R1
permit ipv6 2001:D33:63::/64 any
!
control-plane
!
!
alias exec c conf t
!
line con 0
exec-timeout 0 0
logging synchronous
line aux 0
line vty 0 4
!
!
end


==========================================================


R3

!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
!
!
ip cef
!
!
ipv6 unicast-routing
ipv6 multicast-routing
!
!
interface FastEthernet0/0
!
interface FastEthernet0/1
no switchport
ip address 10.1.24.2 255.255.255.252
ipv6 address 2001:5C0:77::3/126
!
interface FastEthernet0/2
no switchport
ip address 10.1.52.1 255.255.255.252
ipv6 address 2001:D31:77::1/126
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface Vlan1
no ip address
!
router bgp 777
no synchronization
bgp log-neighbor-changes
neighbor 2001:5C0:77::1 remote-as 5500
no neighbor 2001:5C0:77::1 activate
neighbor 2001:D31:77::3 remote-as 911
no neighbor 2001:D31:77::3 activate
no auto-summary
!
address-family ipv6
neighbor 2001:5C0:77::1 activate
neighbor 2001:D31:77::3 activate
exit-address-family
!
ip http server
no ip http secure-server
!
!
control-plane
!
!
alias exec c conf t
!
line con 0
exec-timeout 0 0
logging synchronous
line aux 0
line vty 0 4
!
!
end


==========================================================


R4


!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R4
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
!
!
ip cef
!
!
ipv6 unicast-routing
ipv6 multicast-routing
!
!
!
interface FastEthernet0/0
!
interface FastEthernet0/1
no switchport
ip address 10.1.42.1 255.255.255.252
ipv6 address 2001:5C0:75::1/126
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface Ethernet1/0
ip address 10.1.34.2 255.255.255.252
half-duplex
ipv6 address 2001:5C0:76::3/126
!
interface Vlan1
no ip address
!
router bgp 777
no synchronization
bgp log-neighbor-changes
neighbor 2001:5C0:75::3 remote-as 771
no neighbor 2001:5C0:75::3 activate
neighbor 2001:5C0:76::1 remote-as 5500
no neighbor 2001:5C0:76::1 activate
no auto-summary
!
address-family ipv6
neighbor 2001:5C0:75::3 activate
neighbor 2001:5C0:76::1 activate
exit-address-family
!
ip http server
no ip http secure-server
!
!
control-plane
!
!
alias exec c conf t
!
line con 0
exec-timeout 0 0
logging synchronous
line aux 0
line vty 0 4
!
!
end


=============================================================

R5


!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R5
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
!
!
ip cef
!
!
ipv6 unicast-routing
ipv6 multicast-routing
!
!
!
interface Loopback0
ip address 150.20.1.1 255.255.255.0
ipv6 address 2001:D32:1::1/64
!
interface Loopback1
ip address 150.20.2.1 255.255.255.0
ipv6 address 2001:D32:2::1/64
!
interface Loopback2
ip address 150.20.3.1 255.255.255.0
ipv6 address 2001:D32:3::1/64
!
interface Loopback3
ip address 150.20.4.1 255.255.255.0
ipv6 address 2001:D32:4::1/64
!
interface Loopback4
ip address 192.168.2.1 255.255.255.0
ipv6 address 2001:5C3:2::1/64
!
interface FastEthernet0/0
no switchport
ip address 10.1.52.2 255.255.255.252
ipv6 address 2001:D31:77::3/126
!
interface FastEthernet0/1
!
interface FastEthernet0/2
no switchport
ip address 10.1.62.2 255.255.255.252
ipv6 address 2001:D31:76::3/126
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface Vlan1
no ip address
!
router bgp 911
no synchronization
bgp log-neighbor-changes
neighbor 2001:D31:76::1 remote-as 771
no neighbor 2001:D31:76::1 activate
neighbor 2001:D31:77::1 remote-as 777
no neighbor 2001:D31:77::1 activate
no auto-summary
!
address-family ipv6
neighbor 2001:D31:76::1 activate
neighbor 2001:D31:77::1 activate
network 2001:5C3:2::/64
redistribute connected route-map BGP6
no synchronization
exit-address-family
!
ip http server
no ip http secure-server
!
!
!
!
route-map BGP6 permit 100
match ipv6 address IP6
!
!
!
ipv6 access-list IP6
permit ipv6 2001:D32:1::/64 any
permit ipv6 2001:D32:2::/64 any
permit ipv6 2001:D32:3::/64 any
!
control-plane
!
!
alias exec c conf t
!
line con 0
exec-timeout 0 0
logging synchronous
line aux 0
line vty 0 4
!
!
end


==========================================================

R6

!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R6
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
!
!
ip cef
!
!
ipv6 unicast-routing
ipv6 multicast-routing
!
!
interface Loopback0
ip address 200.10.1.1 255.255.255.0
ipv6 address 2001:5C2:1::1/64
!
interface Loopback1
ip address 200.10.2.1 255.255.255.0
ipv6 address 2001:5C2:2::1/64
!
interface Loopback2
ip address 200.10.3.1 255.255.255.0
ipv6 address 2001:5C2:3::1/64
!
interface Loopback3
ip address 172.17.63.1 255.255.255.0
ipv6 address 2001:D33:63::1/64
!
interface FastEthernet0/0
no switchport
ip address 10.1.42.2 255.255.255.252
ipv6 address 2001:5C0:75::3/126
!
interface FastEthernet0/1
no switchport
ip address 10.1.62.1 255.255.255.252
ipv6 address 2001:D31:76::1/126
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface Vlan1
no ip address
!
router bgp 771
no synchronization
bgp log-neighbor-changes
neighbor 2001:5C0:75::1 remote-as 777
no neighbor 2001:5C0:75::1 activate
neighbor 2001:D31:76::3 remote-as 911
no neighbor 2001:D31:76::3 activate
no auto-summary
!
address-family ipv6
neighbor 2001:5C0:75::1 activate
neighbor 2001:D31:76::3 activate
network 2001:D33:63::/64
redistribute connected route-map BGP6
no synchronization
exit-address-family
!
ip http server
no ip http secure-server
!
!
route-map BGP6 permit 100
match ipv6 address IP6
!
!
!
ipv6 access-list IP6
permit ipv6 2001:5C2:1::/64 any
permit ipv6 2001:5C2:2::/64 any
permit ipv6 2001:5C2:3::/64 any
!
control-plane
!
!
alias exec c conf t
!
line con 0
exec-timeout 0 0
logging synchronous
line aux 0
line vty 0 4
!
!
end


============================================================

BGP IPv6 Verification and Testing

Mari kita lanjutkan untuk melihat hasil dari konfigurasi topologi pada postingan yang lalu ada beberapa tambahan pada topologi di atas yakni saya menambahkan network 2001:d30:67::1/64 untuk di advertise oleh R0

R3#show ip bgp ipv6 un neighbors 2001:d31:77::3 advertised-routes
BGP table version is 26, local router ID is 10.1.52.1
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path
*> 2001:5C2:1::/64 2001:D31:77::3 0 911 771 ?
*> 2001:5C2:2::/64 2001:D31:77::3 0 911 771 ?
*> 2001:5C2:3::/64 2001:D31:77::3 0 911 771 ?
*> 2001:5C3:2::/64 2001:D31:77::3 0 0 911 i
*> 2001:D30:67::/64 2001:5C0:77::1 0 5500 i
*> 2001:D32:1::/64 2001:D31:77::3 0 0 911 ?
*> 2001:D32:2::/64 2001:D31:77::3 0 0 911 ?
*> 2001:D32:3::/64 2001:D31:77::3 0 0 911 ?
*> 2001:D33:63::/64 2001:D31:77::3 0 911 771 i

Total number of prefixes 9



R0#show ip bgp ipv6 unicast 2001:D32:2::1/64
BGP routing table entry for 2001:D32:2::/64, version 8
Paths: (2 available, best #2, table Global-IPv6-Table)
Not advertised to any peer
777 771 911
2001:D30:76::3 from 2001:D30:76::3 (10.1.34.1)
Origin incomplete, metric 0, localpref 100, valid, internal
777 911
2001:D30:77::3 from 2001:D30:77::3 (10.1.24.1)
Origin incomplete, metric 0, localpref 700, valid, internal, best


mari kita coba ping ke salah satu network yang sudah di advertise

R0#ping ipv6 2001:5c2:2::1 source 2001:d30:67::1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:5C2:2::1, timeout is 2 seconds:
Packet sent with a source address of 2001:D30:67::1
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 284/390/628 ms

Alhamdulillah ping nya bisa....

trus coba lagi di traceroute

R0#traceroute ipv6

Target IPv6 address: 2001:5c3:2::1
Source address: 2001:d30:67::1
Insert source routing header? [no]:
Numeric display? [no]:
Timeout in seconds [3]: 4
Probe count [3]:
Minimum Time to Live [1]:
Maximum Time to Live [30]: 5
Priority [0]:
Port Number [33434]:
Type escape sequence to abort.
Tracing the route to 2001:5C3:2::1

1 2001:D30:76::3 48 msec 48 msec 112 msec ==> AS 5500 via IBGP
2 2001:5C0:76::3 264 msec 76 msec 136 msec ==> AS 777
3 2001:5C0:75::3 260 msec 348 msec 284 msec ==> AS 771
4 2001:5C3:2::1 284 msec 356 msec 308 msec ==> AS 911

Alhamdulillah kluar hasilnya

BGP IPv6 with GNS3

Hmm setelah berguru ke Jeremy akhirnya saya sedikit mengerti tentang BGP

kalo gitu langsung to de poin

ini topologi BGP IPv6 pertamaku
karena uda capek ngetiknya kapan-kapan lagi saya posting konfigurasinya

tapi jangan kuatir sekarang saya posting hasil show ip bgp nya

R0#show ip bgp ipv6 unicast
BGP table version is 11, local router ID is 10.10.2.1
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path
* i2001:5C2:1::/64 2001:D30:76::3 0 100 0 777 771 ?
*>i 2001:D30:77::3 0 700 0 777 911 771 ?
* i2001:5C2:2::/64 2001:D30:76::3 0 100 0 777 771 ?
*>i 2001:D30:77::3 0 700 0 777 911 771 ?
* i2001:5C2:3::/64 2001:D30:76::3 0 100 0 777 771 ?
*>i 2001:D30:77::3 0 700 0 777 911 771 ?
*>i2001:5C3:2::/64 2001:D30:76::3 0 1000 0 777 771 911 i
* i 2001:D30:77::3 0 700 0 777 911 i
*> 2001:D30:67::/64 :: 0 32768 i
* i2001:D32:1::/64 2001:D30:76::3 0 100 0 777 771 911 ?
*>i 2001:D30:77::3 0 700 0 777 911 ?
* i2001:D32:2::/64 2001:D30:76::3 0 100 0 777 771 911 ?
*>i 2001:D30:77::3 0 700 0 777 911 ?
* i2001:D32:3::/64 2001:D30:76::3 0 100 0 777 771 911 ?
*>i 2001:D30:77::3 0 700 0 777 911 ?
* i2001:D33:63::/64 2001:D30:76::3 0 10 0 777 771 i
*>i 2001:D30:77::3 0 700 0 777 911 771 i

R0#show ipv6 route
IPv6 Routing Table - 18 entries
Codes: C - Connected, L - Local, S - Static, R - RIP, B - BGP
U - Per-user Static route
I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary
O - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
B 2001:5C2:1::/64 [200/0]
via 2001:D30:77::3
B 2001:5C2:2::/64 [200/0]
via 2001:D30:77::3
B 2001:5C2:3::/64 [200/0]
via 2001:D30:77::3
B 2001:5C3:2::/64 [200/0]
via 2001:D30:76::3
C 2001:D30:66::/64 [0/0]
via ::, Loopback1
L 2001:D30:66::1/128 [0/0]
via ::, Loopback1
C 2001:D30:67::/64 [0/0]
via ::, Loopback0
L 2001:D30:67::1/128 [0/0]
via ::, Loopback0
C 2001:D30:76::/126 [0/0]
via ::, FastEthernet0/1
L 2001:D30:76::1/128 [0/0]
via ::, FastEthernet0/1
C 2001:D30:77::/126 [0/0]
via ::, FastEthernet0/0
L 2001:D30:77::1/128 [0/0]
via ::, FastEthernet0/0
B 2001:D32:1::/64 [200/0]
via 2001:D30:77::3
B 2001:D32:2::/64 [200/0]
via 2001:D30:77::3
B 2001:D32:3::/64 [200/0]
via 2001:D30:77::3
B 2001:D33:63::/64 [200/0]
via 2001:D30:77::3
L FE80::/10 [0/0]
via ::, Null0
L FF00::/8 [0/0]
via ::, Null0

Modern VLAN

sebelumnya saya mohon mangaps dulu menunda posting instalasi OLIVE JUNOS di FReeBSD 7.0 part 2 tapi tutorial install OlIVE JUNOS uda h banyak di google kapan-kapan saya lanjutkan

mari kita lanjutkan topik nya
emang apa bedanya Modern VLAN ama Legacy VLAN ???
mengutip omongannya jeremy cioara #CCIE guru saya :D
katanya kalo Modern VLAN itu ga perlu router lagi buat hubungin network2 di dalam VLAN
katanya udah ga jaman lagi, bottlenecknya ada di jalur trunk ke router
kalo di catalis 3500 uda bisa modern VLAN dan alhamdulillah bisa ku coba di 3640 Series
istilah kerenya adalah SVI aka Switch Virtual Interface
intinya SVI dibuat dengan menambahkan interface VLAN dalam cisco switch

oke sekarang mari kita lihat topologi sederhana di bawah ini
pada topologi sederhana diatas R0 berfungsi sebagai switch sekaligur router untuk menjalan kan NAT dan DHCP Server Switch R1 ngikut Trunk ke R0
port 1 R0 terhubung ke router R3 dan router R3 seolah-olah terhubung ke server


berikut konfiugurasi SVI.net

autostart = False
[localhost:7200]
workingdir = E:\New Folder
[[2621]]
image = E:\ios\c2600-ik9s-mz.122-40a.BIN
idlepc = 0x80342788
ghostios = True
chassis = 2621
[[1710]]
image = E:\ios\C1700-K2.BIN
ram = 32
idlepc = 0x8016f138
chassis = 1710
[[3640]]
image = E:\ios\c3640-is-mz.124-16.BIN
idlepc = 0x604a3f2c
ghostios = True
chassis = 3640
[[ROUTER R4]]
model = 2621
console = 2003
f0/0 = R1 f0/7

[[ROUTER R5]]
model = 2621
console = 2004
f0/0 = R0 f0/3

[[ROUTER R6]]
model = 1710
console = 2005
f0 = R3 f0/1

[[ROUTER R0]]
model = 3640
console = 2000
cnfg = E:\SVI-2\R0.cfg
slot0 = NM-16ESW
f0/1 = R3 f0/0
f0/3 = R5 f0/0
f0/13 = R1 f0/13

[[ROUTER R1]]
model = 3640
console = 2001
cnfg = E:\SVI-2\R1.cfg
slot0 = NM-16ESW
f0/7 = R4 f0/0
f0/13 = R0 f0/13

[[ROUTER R3]]
model = 2621
console = 2002
f0/0 = R0 f0/1
f0/1 = R6 f0

konfigurasi Switch R0.cfg

!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname SW-SVI
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
!
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.2.1 192.168.2.129
ip dhcp excluded-address 192.168.5.1 192.168.5.129
!
ip dhcp pool 0
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
!
ip dhcp pool 1
network 192.168.5.0 255.255.255.0
default-router 192.168.5.1
!
!
interface FastEthernet0/0
!
interface FastEthernet0/1
no switchport
ip address 172.17.1.1 255.255.255.0
ip nat outside
ip virtual-reassembly
!
interface FastEthernet0/2
!
interface FastEthernet0/3
switchport access vlan 10
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
switchport access vlan 20
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
switchport mode trunk
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface Vlan1
no ip address
!
interface Vlan10
ip address 192.168.2.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
interface Vlan20
ip address 192.168.5.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
router ospf 1
log-adjacency-changes
network 172.17.1.0 0.0.0.3 area 0
!
ip http server
!
!
ip nat inside source list 10 interface FastEthernet0/1 overload
ip nat inside source list 20 interface FastEthernet0/1 overload
!
access-list 10 permit 192.168.2.0 0.0.0.255
access-list 20 permit 192.168.5.0 0.0.0.255
!
!
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
!
!
end

mari kita jelaskan konfigurasi Switch R0 diatas

untuk mengaktifkan SVI perlu dibuat virtual interface VLAN pada konfigurasi diatas di buat interface Vlan 10 dan Vlan 20

R0#(config)interface Vlan 10
R0#(config)interface Vlan 20

setelah itu create database Vlan biar port pada switch bisa di seting vlan yang kita inginkan

R0#vlan database
R0#(Vlan-database)Vlan 10 name zenislev
R0#(Vlan-database)Vlan 20 name hoshun

pada port 1 bisa dilihat port tersebut memiliki IP address mestinya port switch tidak bisa di beri IP address, untuk mengaktifkan nya cukup dengan 1 perintah

R0#(config)interface f0/1
R0#(config-if)no switchport

dengan perintah tersebut port tersebut dapat di beri IP address bahkan dapat untuk menjalankan routing protokol seperti OSPF,RIP,EIGRP bahkan BGP. Pada posting berikutnya akan saya tunjukkan bahwa port tersebut dapat menjalankan BGP IPv6

kita lanjutkan dengan mengaktifkan DHCP server
untuk mengaktifkan DHCP Server di cisco cukup dengan perintah

R0#(config)service dhcp

kemudian dhcp dapat di konfigurasi seperti pada konfigurasi DHCP Server di atas
yang membedakan DHCP server di FreeBSD/Linux ato yang lainnya adalah untuk range DHCP
di cisco range DHCP di definisikan dengan range IP yang tidak ingin kita otomatiskan

R0#(config)ip dhcp excluded-address 192.168.2.1 192.168.2.129
dengan konfigurasi diatas nantinya range IP DHCP nya dimulai dari 192.168.2.130 - 254

selanjutnya mengaktifkan NAT
untuk ip nat outside di konfigurasikan ke interface f0/1 dan ip nat inside-nya di konfigurasika ke interface Vlan10 dan Vlan20 bisa dilihat pada konfigurasi di atas
kebetulan NAT yang saya gunakan adalah NAT static overload, sebenarnya untuk VLAN 20 ingin saya gunakan untuk NATPOOL tapi karena waktu itu disuruh nganterin ibu jadi tak samakan aja dengan VLAN 10

WOOOwwww !!! 1 Switch bisa untuk VLAN, DHCP Server bahkan jadi Router juga

untuk router R3 yang menghubungkan ke server menggunakan routing OSPF

Legacy VLAN with GNS3

ya setelah lama ga posting sekarang saatnya aktif nulis lagi

kali ini enaknya bikin topik cara bikin Legacy VLAN di cisco. tapi bukan cisco hardware beneran tapi pake GNS3

mari kita lihat contoh topologi sederhana yang saya buat

router R1 dan router R2 dihubungkan dengan frame relay network
R1 terhubung ke port 1 framerelay switch dengan DLCI 101 dan R2 terhubung ke port 2 DLCI 201

routing protokol yang digunakan adalah ospf

berikut dibawah ini konfigurasinya

untuk konfigurasi file legacy_VLAN.net nya

autostart = False
[localhost:7200]
workingdir = E:\New Folder
[[2621]]
image = E:\ios\c2600-ik9s-mz.122-40a.BIN
idlepc = 0x80342788
ghostios = True
chassis = 2621
[[3640]]
image = E:\ios\c3640-is-mz.124-16.BIN
idlepc = 0x604a3f2c
ghostios = True
chassis = 3640
[[ROUTER R1]]
model = 2621
console = 2037
s0/0 = FR0 1
f0/0 = SW1 f0/1
[[ROUTER R2]]
model = 2621
console = 2038
s0/0 = FR0 2
f0/0 = SW3 f0/1
[[FRSW FR0]]
1:101 = 2:201
2:201 = 1:101
[[ROUTER SW1]]
model = 3640
console = 2034
slot0 = NM-16ESW
f0/1 = R1 f0/0
f0/4 = PC2 f0/0
f0/7 = PC1 f0
f0/13 = SW2 f0/13
[[ROUTER SW3]]
model = 3640
console = 2036
slot0 = NM-16ESW
f0/1 = R2 f0/0
f0/3 = PC5 f0/0
[[ROUTER SW2]]
model = 3640
console = 2035
slot0 = NM-16ESW
f0/4 = PC4 f0
f0/7 = PC3 f0/0
f0/13 = SW1 f0/13

[localhost:7201]
workingdir = E:\New Folder
udp = 10100
[[2621]]
image = E:\ios\c2600-ik9s-mz.122-40a.BIN
idlepc = 0x803f4dc0
ghostios = True
chassis = 2621
[[1710]]
image = E:\ios\C1700-K2.BIN
ram = 32
ghostios = True
idlepc = 0x8016f138
chassis = 1710
[[ROUTER PC2]]
model = 2621
console = 2041
idlepc = 0x80342788
f0/0 = SW1 f0/4
[[ROUTER PC3]]
model = 2621
console = 2042
idlepc = 0x80342788
f0/0 = SW2 f0/7
[[ROUTER PC1]]
model = 1710
console = 2045
f0 = SW1 f0/7
[[ROUTER PC4]]
model = 1710
console = 2046
f0 = SW2 f0/4
[[ROUTER PC5]]
model = 2621
console = 2022
f0/0 = SW3 f0/3

file SW1.cfg

!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname SW1
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
!
!
ip cef
!
!
!
!
!
interface FastEthernet0/0
!
interface FastEthernet0/1
switchport mode trunk
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
switchport access vlan 10
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
switchport access vlan 15
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
switchport mode trunk
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface Vlan1
no ip address
!
ip http server
!

!
control-plane
!
!
alias exec c conf t
alias exec s sh ip int br
!
line con 0
exec-timeout 0 0
logging synchronous
line aux 0
line vty 0 4
!
!
end

file SW2.cfg

!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname SW2
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
!
!
ip cef
!
!
interface FastEthernet0/0
!
interface FastEthernet0/1
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
switchport access vlan 10
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
switchport access vlan 15
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
switchport mode trunk
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface Vlan1
no ip address
!
ip http server
!
!
control-plane
!
!
alias exec c conf t
!
line con 0
exec-timeout 0 0
logging synchronous
line aux 0
line vty 0 4
!
!
end


file R1.cfg


!
version 12.2
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname R1
!
!
memory-size iomem 15
ip subnet-zero
!
!
ip dhcp excluded-address 192.168.2.1 192.168.2.129
ip dhcp excluded-address 192.168.3.1 192.168.3.129
!
ip dhcp pool 1
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
!
ip dhcp pool 2
network 192.168.3.0 255.255.255.0
default-router 192.168.3.1
!
!
call rsvp-sync
!
!
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.10
encapsulation dot1Q 10
ip address 192.168.2.1 255.255.255.0
!
interface FastEthernet0/0.15
encapsulation dot1Q 15
ip address 192.168.3.1 255.255.255.0
!
interface Serial0/0
no ip address
encapsulation frame-relay
!
interface Serial0/0.101 point-to-point
ip address 10.10.7.1 255.255.255.0
no arp frame-relay
frame-relay interface-dlci 101
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/1
no ip address
shutdown
!
router ospf 1
log-adjacency-changes
network 10.10.7.0 0.0.0.255 area 0
network 192.168.2.0 0.0.0.255 area 1
network 192.168.3.0 0.0.0.255 area 1
!
ip classless
ip http server
!
!
dial-peer cor custom
!
!
alias exec c conf t
alias exec s sh ip int br
!
line con 0
exec-timeout 0 0
logging synchronous
line aux 0
line vty 0 4
!
end


konfigurasi router R2 file R2.cfg

!
version 12.2
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname R2
!
!
memory-size iomem 15
ip subnet-zero
!
!
ip dhcp excluded-address 192.168.4.1 192.168.4.129
!
ip dhcp pool 3
network 192.168.4.0 255.255.255.0
default-router 192.168.4.1
!
!
call rsvp-sync
!
!
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.20
encapsulation dot1Q 20
ip address 192.168.4.1 255.255.255.0
!
interface Serial0/0
bandwidth 512000
no ip address
encapsulation frame-relay
clock rate 512000
!
interface Serial0/0.201 point-to-point
ip address 10.10.7.2 255.255.255.0
no arp frame-relay
frame-relay interface-dlci 201
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/1
no ip address
shutdown
!
router ospf 1
log-adjacency-changes
network 10.10.7.0 0.0.0.255 area 0
network 192.168.4.0 0.0.0.255 area 1
!
ip classless
ip http server
!
!
dial-peer cor custom
!
!
alias exec c conf t
alias exec s sh ip int br
!
line con 0
exec-timeout 0 0
logging synchronous
line aux 0
line vty 0 4
!
end

untuk konfigurasi Switch 3 sama dengan konfigurasi Switch 1 da Switch 2

sedangkan untuk User2nya menggunakan konfigurasi ip dhcp
pada testing di atas Cisco 1700 tidak bisa dikonfigurasi ip dhcp nya

PC1#(config)int f0/0
PC1#(config-if)ip address dhcp
PC1#(config-if)no shut

test posting gan

test ....