Config Register is 0x4a6f6469

Lab EIGRP - 04 akan mengkonfigurasi autentikasi pada routing EIGRP. Topologi EIGRP - 04 lihat gambar dibawah,

Langkah pertama adalah men-set semua router mempunyai waktu yang sama. Gunakan tips dan tricks NTP :

R2#
R2#clock set 23:58:00 march 13 2008
R2#
*Mar 13 23:58:00.000: %SYS-6-CLOCKUPDATE: System clock has been updated from 00:
21:04 UTC Fri Mar 1 2002 to 23:58:00 UTC Thu Mar 13 2008, configured from console by console.
R2#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R2(config)#ntp master
R2(config)#

R1#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R1(config)#ntp server 172.1.1.2
R1(config)#

R3#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R3(config)#ntp server 172.2.2.2
R3(config)#

Setelah semua router dipastikan mempunyai waktu yang synchronize satu dengan yang lainnya, selanjutnya konfigur CLI autentikasi pada routing EIGRP:

R2(config)#key chain auth
R2(config-keychain)#key 1

R2(config-keychain-key)#key-string ccna
R2(config-keychain-key)#accept-lifetime 23:58:00 march 13 2008 01:00:00 march 14 2008
R2(config-keychain-key)#send-lifetime 23:58:00 march 13 2008 01:00:00 march 14 2008
R2(config-keychain-key)#int s1/0
R2(config-if)#ip authentication key-chain eigrp 10 auth
R2(config-if)#
Mar 14 00:05:35.759: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.1 (Seri
al1/0) is down: keychain changed
Mar 14 00:05:37.551: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.1 (Seri
al1/0) is up: new adjacency
Mar 14 00:06:47.735: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.1 (Seri
al1/0) is down: Interface Goodbye received
Mar 14 00:06:52.255: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.1 (Seri
al1/0) is up: new adjacency
R2(config-if)#int s1/1
R2(config-if)#ip authentication key-chain eigrp 10 auth
R2(config-if)#
Mar 14 00:07:20.487: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.3 (Seri
al1/1) is down: keychain changed
Mar 14 00:07:23.807: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.3 (Seri
al1/1) is up: new adjacency
Mar 14 00:07:53.015: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.3 (Seri
al1/1) is down: Interface Goodbye received
Mar 14 00:07:57.871: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.3 (Seri
al1/1) is up: new adjacency
R2(config-if)#ip authentication mode eigrp 10 md5
R2(config-if)#
Mar 14 00:08:13.447: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.3 (Seri
al1/1) is down: authentication mode changed
Mar 14 00:08:30.755: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.3 (Seri
al1/1) is down: Interface Goodbye received
Mar 14 00:08:35.619: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.3 (Seri
al1/1) is up: new adjacency
R2(config-if)#int s1/0
R2(config-if)#ip authentication mode eigrp 10 md5
R2(config-if)#
Mar 14 00:08:53.835: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.1 (Seri
al1/0) is down: authentication mode changed
Mar 14 00:09:25.787: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.1 (Seri
al1/0) is down: Interface Goodbye received
Mar 14 00:09:30.543: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.1 (Seri
al1/0) is up: new adjacency

R1(config)#key chain auth
R1(config-keychain)#key 1
R1(config-keychain-key)#key-string ccna
R1(config-keychain-key)#accept-lifetime 23:58:00 march 13 2008 01:00:00 march 14 2008
R1(config-keychain-key)#send-lifetime 23:58:00 march 13 2008 01:00:00 march 14 2008
R1(config-keychain-key)#
Mar 14 00:05:35.832: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.2 (Seri
al1/0) is down: Interface Goodbye received
Mar 14 00:05:40.152: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.2 (Seri
al1/0) is up: new adjacency
R1(config-keychain-key)#int s1/0
R1(config-if)#ip authentication key-chain eigrp 10 auth
R1(config-if)#
Mar 14 00:06:47.680: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.2 (Seri
al1/0) is down: keychain changed
Mar 14 00:06:49.524: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.2 (Seri
al1/0) is up: new adjacency
Mar 14 00:08:53.901: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.2 (Seri
al1/0) is down: Auth failure
R1(config-if)#int s1/0
R1(config-if)#ip authentication mode eigrp 10 md5
R1(config-if)#
Mar 14 00:09:27.333: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.2 (Seri
al1/0) is up: new adjacency

R3(config)#key chain auth
R3(config-keychain)#key 1
R3(config-keychain-key)#key-string ccna
R3(config-keychain-key)#$accept-lifetime 23:58:00 march 13 2008 01:00:00 march 14 2008
R3(config-keychain-key)#send-lifetime 23:58:00 march 13 2008 01:00:00 march 14 2008
R3(config-keychain-key)#int s1/1
R3(config-if)#
Mar 14 00:07:20.495: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.2 (Seri
al1/1) is down: Interface Goodbye received
Mar 14 00:07:24.979: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.2 (Seri
al1/1) is up: new adjacency
R3(config-if)#int s1/1
R3(config-if)#ip authentication key-chain eigrp 10 auth
R3(config-if)#
Mar 14 00:07:52.851: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.2 (Seri
al1/1) is down: keychain changed
Mar 14 00:07:52.863: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.2 (Seri
al1/1) is up: new adjacency
Mar 14 00:08:13.419: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.2 (Seri
al1/1) is down: Auth failure
R3(config-if)#ip authentication mode eigrp 10 md5
R3(config-if)#
Mar 14 00:08:31.779: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.2 (Serial1/1) is up: new adjacency

Topologi EIGRP - 03 akan membahas tehnik konfigurasi ‘un-equal cost path load balance’. Konfigurasi CLI routing EIGRP bisa dilihat ke EIGRP - 02. Topologi EIGRP -03 pada gambar dibawah,

Setelah selesai dikonfigurasi, pada perintah ’sh ip route’ di R2 terlihat bahwa routing menuju subnet 100.1.1.0/24 hanya melalui R3 atau serial1/1:

Padahal sebenarnya ada dua jalur untuk routing menuju subnet 100.1.1.0/24 selain R3 yang dipilih diatas, masih ada link melewati R1. Namun link melalui R1 memiliki cost yang lebih besar sehingga tidak menjadi best routes. Hal ini dapat dilihat pada perintah ’sh ip eigrp topology’, bisa dilihat pada capture dibawah,

Berikut konfigurasi load balance untuk dua link di atas yang ‘un-equal cost path’:

R2#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R2(config)#router eigrp 10
R2(config-router)#variance 2
R2(config-router)#^Z
R2#
*Mar  1 00:16:32.471: %SYS-5-CONFIG_I: Configured from console by console
R2#clear ip eigrp neighbors
R2#
*Mar  1 00:16:45.975: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.1 (Ser
ial1/0) is down: manually cleared
*Mar  1 00:16:45.983: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.3 (Ser
ial1/1) is down: manually cleared
*Mar  1 00:16:47.531: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.3 (Ser
ial1/1) is up: new adjacency
*Mar  1 00:16:48.707: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.1 (Ser
ial1/0) is up: new adjacency

Dengan konfigurasi diatas maka R2 sekarang sudah mempunyai dua link yang aktif untuk routing menuju subnet 100.1.1.0/24 yaitu melalui R3 dan R1. Berikut capture console R2:

Konfigurasi kali ini akan melakukan tehnik men-summarized routing pada routing EIGRP. Summarized routing penting dilakukan, dengan summarized routing maka routing table tetap terjaga ukurannya tidak terlalu besar. Dan berbanding lurus dengan kerja processor yang tidak semakin berat. Pada topologi EIGRP - 02 ini R2 menggunakan 8 loopback interface dengan maksud agar terlihat perbandingan sebelum summarized routing dilakukan dan sesudahnya. Gambar topologi dapat dilihat dibawah,

R2#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R2(config)#router eigrp 10
R2(config-router)#no auto-summary
R2(config-router)#network 172.1.1.0 0.0.0.255
R2(config-router)#network 172.2.2.0 0.0.0.255
R2(config-router)#network 10.0.0.0 0.0.0.255
R2(config-router)#network 10.0.1.0 0.0.0.255
R2(config-router)#network 10.0.2.0 0.0.0.255
R2(config-router)#network 10.0.3.0 0.0.0.255
R2(config-router)#network 10.0.4.0 0.0.0.255
R2(config-router)#network 10.0.5.0 0.0.0.255
R2(config-router)#network 10.0.6.0 0.0.0.255
R2(config-router)#network 10.0.7.0 0.0.0.255
R2(config-router)#
*Mar  1 00:48:39.723: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.3 (Ser
ial1/1) is up: new adjacency
*Mar  1 00:49:26.371: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.1 (Ser
ial1/0) is up: new adjacency

R3#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R3(config)#router eigrp 10
R3(config-router)#no auto-summary
R3(config-router)#network 172.2.2.0 0.0.0.255
*Mar  1 00:52:20.563: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.2 (Ser
ial1/1) is up: new adjacency
R3(config-router)#network 100.1.1.0 0.0.0.255
R3(config-router)#
*Mar  1 00:53:15.043: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 100.1.1.1 (Fas
tEthernet0/0) is up: new adjacency

R1#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R1(config)#router eigrp 10
R1(config-router)#no auto-summary
R1(config-router)#network 172.1.1.0 0.0.0.255
*Mar  1 00:55:53.183: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.2 (Ser
ial1/0) is up: new adjacency
R1(config-router)#network 100.1.1.0 0.0.0.255
R1(config-router)#
*Mar  1 00:56:05.831: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 100.1.1.3 (FastEthernet0/0) is up: new adjacency

Setelah konfigurasi awal ini dapat dilihat routing table pada R1 dan R3 yang belum melakukan summarisasi:

Berikut konfigurasi summarized routing di R2 pada kedua interface yang tersambung ke R1 dan R3,

R2(config-router)#exit
R2(config)#int s1/0
R2(config-if)#ip summary-address eigrp 10 10.0.0.0 255.255.248.0
R2(config-if)#
*Mar  1 00:59:01.003: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.1 (Serial1/0) is down: summary configured
*Mar  1 00:59:03.203: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.1.1.1 (Ser
ial1/0) is up: new adjacency
R2(config-if)#int s1/1
R2(config-if)#ip summary-address eigrp 10 10.0.0.0 255.255.248.0
R2(config-if)#
*Mar  1 01:00:09.471: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.3 (Ser
ial1/1) is down: summary configured
*Mar  1 01:00:10.139: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 172.2.2.3 (Serial1/1) is up: new adjacency

Summarized routing telah berhasil dilakukan. Berikut routing table pada R1 dan R3, dan bandingkan dengan routing table sebelum melakukan summarized routing diatas.

Topologi BGP -02 sangat similar dengan topologi BGP -01. Namun tujuan yang ingin dicapai pada topologi BGP - 02 adalah mengkonfigurasi Routing BGP dengan menggunakan interface loopback sebagai neighbor. Gambar topologi dapat dilihat di bawah,

R1#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R1(config)#router bgp 100
R1(config-router)#neighbor 2.2.2.2 remote-as 200
R1(config-router)#neighbor 2.2.2.2 ebgp-multihop
R1(config-router)#neighbor 2.2.2.2 update-source loopback 0
R1(config-router)#exit
R1(config)#ip route 2.2.2.2 255.255.255.255 12.1.1.2
R1(config)#
*Mar  1 05:28:47.930: %BGP-5-ADJCHANGE: neighbor 2.2.2.2 Up

R2#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R2(config)#router bgp 200
R2(config-router)#neighbor 1.1.1.1 remote-as 100
R2(config-router)#neighbor 1.1.1.1 ebgp-multihop
R2(config-router)#neighbor 1.1.1.1 update-source loopback 0
R2(config-router)#neighbor 1.1.1.1 next-hop-self
R2(config-router)#neighbor 1.1.1.1 default-originate
R2(config-router)#neighbor 3.3.3.3 remote-as 200
R2(config-router)#neighbor 3.3.3.3 update-source loopback 0
R2(config-router)#neighbor 3.3.3.3 next-hop-self
R2(config-router)#neighbor 3.3.3.3 default-originate
R2(config-router)#exit
R2(config)#ip route 1.1.1.1 255.255.255.255 12.1.1.1
R2(config)#
*Mar  1 05:27:33.898: %BGP-5-ADJCHANGE: neighbor 1.1.1.1 Up
R2(config)#ip route 3.3.3.3 255.255.255.255 23.1.1.3
R2(config)#
*Mar  1 05:29:14.142: %BGP-5-ADJCHANGE: neighbor 3.3.3.3 Up

R3#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R3(config)#router bgp 200
R3(config-router)#neighbor 2.2.2.2 remote-as 200
R3(config-router)#neighbor 2.2.2.2 update-source loopback 0
R3(config-router)#exit
R3(config)#ip route 2.2.2.2 255.255.255.255 23.1.1.2
R3(config)#
*Mar  1 05:27:23.622: %BGP-5-ADJCHANGE: neighbor 2.2.2.2 Up

Topologi BGP - 01 mengkonfigurasi Routing BGP dengan menggunakan peer interface atau direct interface address sebagai neighbor. Gambar topologi dapat dilihat di bawah,

 
R1#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R1(config)#router bgp 100
R1(config-router)#neighbor 12.1.1.2 remote-as 200
R1(config-router)#network 1.1.1.1 mask 255.255.255.255
R1(config-router)#
*Mar  1 00:07:51.519: %BGP-5-ADJCHANGE: neighbor 12.1.1.2 Up

R2#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R2(config)#router bgp 200
R2(config-router)#neighbor 12.1.1.1 remote-as 100
R2(config-router)#
*Mar  1 00:10:48.903: %BGP-5-ADJCHANGE: neighbor 12.1.1.1 Up
R2(config-router)#neighbor 23.1.1.3 remote-as 200
R2(config-router)#neighbor 23.1.1.3 next-hop-self
R2(config-router)#neighbor 23.1.1.3 default-originate
R2(config-router)#network 2.2.2.2 mask 255.255.255.255
R2(config-router)#network 23.1.1.0 mask 255.255.255.0
R2(config-router)#
*Mar  1 00:17:31.939: %BGP-5-ADJCHANGE: neighbor 23.1.1.3 Up

R3#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R3(config)#router bgp 200
R3(config-router)#neighbor 23.1.1.2 remote-as 200
R3(config-router)#network 3.3.3.3 mask 255.255.255.255
R3(config-router)#
*Mar  1 00:14:21.527: %BGP-5-ADJCHANGE: neighbor 23.1.1.2 Up

Materi kali ini akan membahas poin-poin:

• Konfigurasi dasar router
• Konfigurasi dynamic routing EIGRP
• Kustomisasi bandwidth interface serial 1/0 di R1
• Konfigurasi default gateway dengan command ip default-network
• Konfigurasi default gateway dengan command ip route

Dibawah ini adalah topologi yang akan diimplementasikan.

Konfigurasi dasar router:

R1:
conf t
hostname R1
int loopback 0
ip address 172.30.0.1 255.255.255.0
no shut
exit
int loopback 1
ip address 172.30.1.1 255.255.255.0
no shut
exit
int s1/0
ip address 10.1.34.1 255.255.255.0
no shut
int s1/1
ip address 10.1.24.1 255.255.255.0
no shut

R2:
conf t
hostname R2
int s1/0
ip address 10.1.34.2 255.255.255.0
no shut
int s1/2
ip address 10.1.2.2 255.255.255.0
no shut

R3:
conf t
hostname R3
int s1/1
ip address 10.1.24.3 255.255.255.0
no shut
int s1/2
ip address 10.1.2.3 255.255.255.0
no shut

 
Konfigurasi dynamic routing EIGRP:

R1:
conf t
router eigrp 1
no auto-summary
network 172.30.0.0 0.0.0.255
network 10.0.0.0

R2:
conf t
router eigrp 1
no auto-summary
network 10.1.34.0 0.0.0.255
network 10.1.2.0 0.0.0.255

R3:
conf t
router eigrp 1
no auto-summary
network 10.1.24.3 0.0.0.0
network 10.1.2.0 0.0.0.255

Routing EIGRP 1 pada ketiga router sudah berjalan. Tes ping dari R1 ke int s1/2 di R2 dan ke int s1/2 di R3 sukses !

Pada saat ini R1 akan mempunyai dua jalur terdekat untuk menuju network 10.1.2.0/24 yaitu melalui 10.1.34.2 di Serial1/0 dan melalui 10.1.24.3 di Serial1/1, dapat dilihat pada gambar dibawah.

Hal ini disebabkan bandwidth yang dimiliki kedua link sama besar, yaitu 1,544 Mbps. Hal ini bisa dilihat pada command ‘sh int s1/0’ dan ‘sh int s1/1’ di R1. Seperti gambar dibawah.

Kustomisasi bandwidth pada interface Serial 1/0 di R1:

R1:
conf t
int s1/0
bandwidth 1000

Hasilnya int s1/0 di R1 akan memiliki bandwidth 1,0 Mbps.

Sekarang, routing menuju network 10.1.2.0/24 dari R1 akan memilih jalur 10.1.24.3 di Serial1/1 karena bandwidth yang lebih tinggi. Hasilnya dapat dilihat dengan command ‘sh ip route’ di R1.

Sesuai dengan topologi network diawal pembahasan, implementasi ini akan me-misalkan ip loopback 0 sebagai default gateway menuju jalur public/ internet cloud.

Konfigurasi default gateway dengan ip default-network:

R1:
conf t
ip default-network 172.30.0.0

Default gateway dapat dilihat dengan command ‘sh ip route’ di masing-masing router.

Konfigurasi default gateway dengan command ‘sh ip route’ (sebelumnya remove dulu ip default-network)

R1:
conf t
no ip default-network 172.30.0.0
ip route 0.0.0.0 0.0.0.0 lo0
router eigrp 1
network 0.0.0.0
 

Jika dilihat dengan ‘sh ip route’ pada tiap router, akan terlihat default gateway menuju 0.0.0.0/0 melalui  interface Loopback 0. Dapat dilihat pada gambar-gambar dibawah.