Aditya.Hananto.net

Aditya.Hananto.net

Knowledge Sharing About Networking

Aditya.Hananto.net RSS Feed
 
 
 
 

Konfigurasi VLAN pada Cisco Catalyst Switch

Sesuai contoh topologi di atas, jaringan dibagi menjadi 4 VLAN/logical subnet yaitu:
1. Native VLAN (default VLAN 1)
subnet: 10.1.0.0/24
gateway: 10.1.0.1
2. Subnet untuk Divisi Engineer (VLAN 2)
subnet: 10.1.1.0/24
gateway: 10.1.1.1
3. Subnet untuk Divisi Finance (VLAN 3)
subnet: 10.1.2.0/24
gateway: 10.1.2.1
4. Subnet untuk Divisi Sales (VLAN 4)
subnet: 10.1.3.0/24
gateway: 10.1.3.1

Floor1-SW & Floor2-SW dijadikan sebagai VTP client, sehingga kedua switch ini hanya bisa membuat VLAN berdasarkan VTP advertisement dari CORE-SW yang berperan sebagai VTP server.

Konfigurasi di CORE-SW:
> enable
# configure terminal

### konfigurasi VTP (VLAN Trunking Protocol) ###
(config)# vtp mode server
(config)# vtp domain myoffice
(config)# vtp password rahasia

### Konfigurasi Trunk di port Fa0/22, Fa0/23 dan Fa0/24 ###
(config)# interface f0/22
(config-if)# description ***Trunk port connected to Router-X***
(config-if)# switchport trunk encapsulation dot1q
(config-if)# switchport mode trunk
(config-if)# no shutdown

(config-if)# interface f0/23
(config-if)# description ***Trunk port connected to Floor1-SW***
(config-if)# switchport trunk encapsulation dot1q
(config-if)# switchport mode trunk
(config-if)# no shutdown

(config-if)# interface f0/24
(config-if)# description ***Trunk port connected to Floor2-SW***
(config-if)# switchport trunk encapsulation dot1q
(config-if)# switchport mode trunk
(config-if)# no shutdown
(config-if)# exit

### membuat VLAN tambahan selain native VLAN ###
(config)# vlan 2
(config-vlan)# name ENGINEER
(config-vlan)# vlan 3
(config-vlan)# name FINANCE
(config-vlan)# vlan 4
(config-vlan)# name SALES
(config-vlan)# exit

### memberi IP address pada interface vlan 1 ###
(config)# interface vlan 1
(config-if)# description ***native VLAN***
(config-if)# ip address 10.1.0.10 255.255.255.0
(config-if)# no shutdown
(config-if)# exit

(config)# ip default-gateway 10.1.0.1  ==> set gateway pada switch
(config)# end

# copy run start    ==> save konfigurasi ke NVRAM

==========================================================
Konfigurasi di Floor1-SW:
> enable
# configure terminal

### konfigurasi VTP (VLAN Trunking Protocol) ###
(config)# vtp mode client
(config)# vtp domain myoffice
(config)# vtp password rahasia

### Konfigurasi Trunk di port Fa0/24 ###
(config)# interface f0/24
(config-if)# description ***Trunk port connected to CORE-SW***
(config-if)# switchport trunk encapsulation dot1q
(config-if)# switchport mode trunk
(config-if)# no shutdown
(config-if)# exit

### Konfigurasi VLAN-membership untuk masing-masing port ###
(config)# interface range f0/1 - 7
(config-if-range)# description *** connected to Engineer dept’s PC ***
(config-if-range)# switchport mode access
(config-if-range)# switchport access vlan 2

(config-if-range)# interface range f0/8 - 14
(config-if-range)# description *** connected to Finance dept’s PC ***
(config-if-range)# switchport mode access
(config-if-range)# switchport access vlan 3

(config-if-range)# interface range f0/15 - 21
(config-if-range)# description *** connected to Sales dept’s PC ***
(config-if-range)# switchport mode access
(config-if-range)# switchport access vlan 4
(config-if-range)# exit

### memberi IP address pada interface vlan 1 ###
(config)# interface vlan 1
(config-if)# description ***native VLAN***
(config-if)# ip address 10.1.0.11 255.255.255.0
(config-if)# no shutdown
(config-if)# exit

(config)# ip default-gateway 10.1.0.1  ==> set gateway pada switch
(config)# end

# copy run start    ==> save konfigurasi ke NVRAM

============================================================
Konfigurasi di Floor2-SW:
> enable
# configure terminal

### konfigurasi VTP (VLAN Trunking Protocol) ###
(config)# vtp mode client
(config)# vtp domain myoffice
(config)# vtp password rahasia

### Konfigurasi Trunk di port Fa0/24 ###
(config)# interface f0/24
(config-if)# description ***Trunk port connected to CORE-SW***
(config-if)# switchport trunk encapsulation dot1q
(config-if)# switchport mode trunk
(config-if)# no shutdown
(config-if)# exit

### Konfigurasi VLAN-membership untuk masing-masing port ###
(config)# interface range f0/1 - 7
(config-if-range)# description *** connected to Engineer dept’s PC ***
(config-if-range)# switchport mode access
(config-if-range)# switchport access vlan 2

(config-if-range)# interface range f0/8 - 14
(config-if-range)# description *** connected to Finance dept’s PC ***
(config-if-range)# switchport mode access
(config-if-range)# switchport access vlan 3

(config-if-range)# interface range f0/15 - 21
(config-if-range)# description *** connected to Sales dept’s PC ***
(config-if-range)# switchport mode access
(config-if-range)# switchport access vlan 4
(config-if-range)# exit

### memberi IP address pada interface vlan 1 ###
(config)# interface vlan 1
(config-if)# description ***native VLAN***
(config-if)# ip address 10.1.0.12 255.255.255.0
(config-if)# no shutdown
(config-if)# exit

(config)# ip default-gateway 10.1.0.1  ==> set gateway pada switch
(config)# end

# copy run start    ==> save konfigurasi ke NVRAM

=====================================================
verifikasi:
# show vtp status
# show vlan
# show interface f0/24 switchport
# show interface f0/24 trunk

Pada tahap ini, semua VLAN telah terbentuk dan semua member VLAN hanya bisa berkomunikasi dalam 1 VLAN yang sama. Agar antar VLAN bisa saling berkomunikasi, maka diperlukan konfigurasi inter-VLAN routing di router atau multilayer switch, Mengenai inter-VLAN routing akan saya bahas pada posting berikutnya :)


Quote of The Day:
“For the things we have to learn before we can do them, we learn by doing them”
~Aristotle

Konfigurasi IPv6 routing OSPFv3 di Cisco router

Konfigurasi Router-JKT:
# conf t
(config)# ipv6 unicast-routing
(config)# ipv6 router ospf 10

(config)# int s0/1
(config-if)# description *** TO Router-SBY ***
(config-if)# ipv6 address 2002:10:1:2::1/64        –> static manual IPv6 address assignment
(config-if)# ipv6 ospf 10 area 0           –> mengaktifkan routing OSPF di interface
(config-if)# no shutdown

(config-if)# int s0/0
(config-if)# description *** TO Router-MDN ***
(config-if)# ipv6 address 2002:10:1:4::1/64
(config-if)# ipv6 ospf 10 area 0
(config-if)# no shutdown

(config-if)# int f0/0
(config-if)# description *** TO LAN JKT ***
(config-if)# ipv6 address 2002:10:1:3::/64 eui-64    –> static eui-64 IPv6 address assignment
(config-if)# ipv6 ospf 10 area 0
(config-if)# no shutdown
(config-if)# end

Konfigurasi Router-SBY:
# conf t
(config)# ipv6 unicast-routing
(config)# ipv6 router ospf 7

(config)# int s0/1
(config-if)# description *** TO Router-JKT ***
(config-if)# ipv6 address 2002:10:1:2::1/64
(config-if)# ipv6 ospf 7 area 0
(config-if)# no shutdown

(config-if)# int f0/0
(config-if)# description *** TO LAN SBY ***
(config-if)# ipv6 address 2002:10:1:1::/64 eui-64
(config-if)# ipv6 ospf 7 area 0
(config-if)# no shutdown
(config-if)# end

Konfigurasi Router-MDN:
# conf t
(config)# ipv6 unicast-routing
(config-if)# ipv6 router ospf 9

(config)# int s1/0
(config-if)# description *** TO Router-JKT ***
(config-if)# ipv6 address 2002:10:1:4::2/64
(config-if)# ipv6 ospf 9 area 0
(config-if)# no shutdown

(config-if)# int f0/0
(config-if)# description *** TO LAN MDN ***
(config-if)# ipv6 address 2002:10:1:5::/64 eui-64
(config-if)# ipv6 ospf 9 area 0
(config-if)# no shutdown
(config-if)# end

Verifikasi konfigurasi IPv6:
# show ipv6 int brief
# show ipv6 protocols
# show ipv6 ospf neighbor
# show ipv6 ospf database
# show ipv6 route


Quote of The Day:
“Kesempatan dalam dunia yang terus berubah ini ada di mana-mana. Namun, kesempatan itu tidak terlihat oleh orang yang tidak tahu pasti apa yang mereka inginkan.”  ~Albert Mensah

Konfigurasi IPv6 routing RIPng di Cisco router

Konfigurasi Router-JKT:
# conf t
(config)# ipv6 unicast-routing
(config)# ipv6 router rip RIP-JKT

(config)# int s0/1
(config-if)# description *** TO Router-SBY ***
(config-if)# ipv6 address 2002:10:1:2::1/64        –> static manual IPv6 address assignment
(config-if)# ipv6 rip RIP-JKT enable        –> mengaktifkan routing RIP di interface
(config-if)# no shutdown

(config-if)# int s0/0
(config-if)# description *** TO Router-MDN ***
(config-if)# ipv6 address 2002:10:1:4::1/64
(config-if)# ipv6 rip RIP-JKT enable
(config-if)# no shutdown

(config-if)# int f0/0
(config-if)# description *** TO LAN JKT ***
(config-if)# ipv6 address 2002:10:1:3::/64 eui-64    –> static eui-64 IPv6 address assignment
(config-if)# ipv6 rip RIP-JKT enable
(config-if)# no shutdown
(config-if)# end

Konfigurasi Router-SBY:
# conf t
(config)# ipv6 unicast-routing
(config)# ipv6 router rip RIP-SBY

(config)# int s0/1
(config-if)# description *** TO Router-JKT ***
(config-if)# ipv6 address 2002:10:1:2::1/64
(config-if)# ipv6 rip RIP-SBY enable
(config-if)# no shutdown

(config-if)# int f0/0
(config-if)# description *** TO LAN SBY ***
(config-if)# ipv6 address 2002:10:1:1::/64 eui-64
(config-if)# ipv6 rip RIP-SBY enable
(config-if)# no shutdown
(config-if)# end

Konfigurasi Router-MDN:
# conf t
(config)# ipv6 unicast-routing
(config-if)# ipv6 rip RIP-MDN enable

(config)# int s1/0
(config-if)# description *** TO Router-JKT ***
(config-if)# ipv6 address 2002:10:1:4::2/64
(config-if)# ipv6 rip RIP-MDN enable
(config-if)# no shutdown

(config-if)# int f0/0
(config-if)# description *** TO LAN MDN ***
(config-if)# ipv6 address 2002:10:1:5::/64 eui-64
(config-if)# ipv6 rip RIP-MDN enable
(config-if)# no shutdown
(config-if)# end

Verifikasi konfigurasi IPv6:
# show ipv6 int brief
# show ipv6 protocols
# show ipv6 route


Quote of The Day:
“Hanya orang-orang gila yang mengharapkan hasil berbeda tetapi menggunakan cara-cara yang sama.” ~Albert Einstein

Konfigurasi dasar IPv6 & static route di Cisco Router

Konfigurasi Router-JKT:
# conf t
(config)# ipv6 unicast-routing

(config)# int s0/1
(config-if)# description *** TO Router-SBY ***
(config-if)# ipv6 address 2002:10:1:2::1/64    –>  static manual IPv6 address assignment
(config-if)# no shutdown

(config-if)# int s0/0
(config-if)# description *** TO Router-MDN ***
(config-if)# ipv6 address 2002:10:1:4::1/64
(config-if)# no shutdown

(config-if)# int f0/0
(config-if)# description *** TO LAN JKT ***
(config-if)# ipv6 address 2002:10:1:3::/64 eui-64    –> static eui-64 IPv6 address assignment
(config-if)# no shutdown
(config-if)# exit

(config)# ipv6 route 2002:10:1:1::/64 s0/1    –> konfigurasi IPv6 static route
(config)# ipv6 route 2002:10:1:5::/64 s0/0
(config)# end

Konfigurasi Router-SBY:
# conf t
(config)# ipv6 unicast-routing

(config)# int s0/1
(config-if)# description *** TO Router-JKT ***
(config-if)# ipv6 address 2002:10:1:2::1/64
(config-if)# no shutdown

(config-if)# int f0/0
(config-if)# description *** TO LAN SBY ***
(config-if)# ipv6 address 2002:10:1:1::/64 eui-64
(config-if)# no shutdown
(config-if)# exit

(config)# ipv6 route :: s0/1    –> konfigurasi IPv6 default route
(config)# end

Konfigurasi Router-MDN:
# conf t
(config)# ipv6 unicast-routing

(config)# int s1/0
(config-if)# description *** TO Router-JKT ***
(config-if)# ipv6 address 2002:10:1:4::2/64
(config-if)# no shutdown

(config-if)# int f0/0
(config-if)# description *** TO LAN MDN ***
(config-if)# ipv6 address 2002:10:1:5::/64 eui-64
(config-if)# no shutdown
(config-if)# exit

(config)# ipv6 route :: s1/0
(config)# end

Verifikasi konfigurasi IPv6:
# show ipv6 int brief
# show ipv6 route

Router-JKT:
# ping 2002:10:1:2::2    –> ping ke s0/1 Router-SBY
# ping 2002:10:1:4::2    –> ping ke s1/0 Router-MDN


Quote of The Day:
“You don’t have to do more than you are Paid for, but you can push yourself ahead mighty fast by doing it voluntarily.” ~Tetsuya Kitahata

Konfigurasi PAT di Cisco Router

Konfigurasi PAT di Router:
(config)# access-list 9 permit 172.17.0.0 0.0.0.255
(config)# access-list 9 permit 172.17.1.0 0.0.0.255
ATAU
(config)# access-list 9 permit 172.17.0.0 0.0.1.255

(config)# ip nat inside source list 9 int s0/0 overload

(config)# int s0/0
(config-if)# ip nat outside

(config-if)# int f0/0
(config-if)# ip nat inside

(config-if)# int f0/1
(config-if)# ip nat inside
(config-if)# end

verifikasi konfigurasi PAT:
# sh ip nat translation
# debug ip nat


Quote of The Day:
“Hard work has nothing to do with success. It does not produce success. It does not sustain success. And it certainly does not reverse a failure. It is PASSION that drives success. Love for one’s activity is infinitely more important to creating success than hard work.” ~Brett Watson