Aditya.Hananto.net

Konfigurasi VLAN pada Cisco Catalyst Switch

M. Aditya Hananto — Thu, 18 Mar 2010 16:32:21 +0000

Sesuai contoh topologi di atas, jaringan dibagi menjadi 4 VLAN/logical subnet yaitu:
1. Native VLAN (default VLAN 1)
subnet: 10.1.0.0/24
gateway: 10.1.0.1
2. Subnet untuk Divisi Engineer (VLAN 2)
subnet: 10.1.1.0/24
gateway: 10.1.1.1
3. Subnet untuk Divisi Finance (VLAN 3)
subnet: 10.1.2.0/24
gateway: 10.1.2.1
4. Subnet untuk Divisi Sales (VLAN 4)
subnet: 10.1.3.0/24
gateway: 10.1.3.1

Floor1-SW & Floor2-SW dijadikan sebagai VTP client, sehingga kedua switch ini hanya bisa membuat VLAN berdasarkan VTP advertisement dari CORE-SW yang berperan sebagai VTP server.

Konfigurasi di CORE-SW:
> enable
# configure terminal

### konfigurasi VTP (VLAN Trunking Protocol) ###
(config)# vtp mode server
(config)# vtp domain myoffice
(config)# vtp password rahasia

### Konfigurasi Trunk di port Fa0/22, Fa0/23 dan Fa0/24 ###
(config)# interface f0/22
(config-if)# description ***Trunk port connected to Router-X***
(config-if)# switchport trunk encapsulation dot1q
(config-if)# switchport mode trunk
(config-if)# no shutdown

(config-if)# interface f0/23
(config-if)# description ***Trunk port connected to Floor1-SW***
(config-if)# switchport trunk encapsulation dot1q
(config-if)# switchport mode trunk
(config-if)# no shutdown

(config-if)# interface f0/24
(config-if)# description ***Trunk port connected to Floor2-SW***
(config-if)# switchport trunk encapsulation dot1q
(config-if)# switchport mode trunk
(config-if)# no shutdown
(config-if)# exit

### membuat VLAN tambahan selain native VLAN ###
(config)# vlan 2
(config-vlan)# name ENGINEER
(config-vlan)# vlan 3
(config-vlan)# name FINANCE
(config-vlan)# vlan 4
(config-vlan)# name SALES
(config-vlan)# exit

### memberi IP address pada interface vlan 1 ###
(config)# interface vlan 1
(config-if)# description ***native VLAN***
(config-if)# ip address 10.1.0.10 255.255.255.0
(config-if)# no shutdown
(config-if)# exit

(config)# ip default-gateway 10.1.0.1 ==> set gateway pada switch
(config)# end

# copy run start ==> save konfigurasi ke NVRAM

==========================================================
Konfigurasi di Floor1-SW:
> enable
# configure terminal

### konfigurasi VTP (VLAN Trunking Protocol) ###
(config)# vtp mode client
(config)# vtp domain myoffice
(config)# vtp password rahasia

### Konfigurasi Trunk di port Fa0/24 ###
(config)# interface f0/24
(config-if)# description ***Trunk port connected to CORE-SW***
(config-if)# switchport trunk encapsulation dot1q
(config-if)# switchport mode trunk
(config-if)# no shutdown
(config-if)# exit

### Konfigurasi VLAN-membership untuk masing-masing port ###
(config)# interface range f0/1 - 7
(config-if-range)# description *** connected to Engineer dept’s PC ***
(config-if-range)# switchport mode access
(config-if-range)# switchport access vlan 2

(config-if-range)# interface range f0/8 - 14
(config-if-range)# description *** connected to Finance dept’s PC ***
(config-if-range)# switchport mode access
(config-if-range)# switchport access vlan 3

(config-if-range)# interface range f0/15 - 21
(config-if-range)# description *** connected to Sales dept’s PC ***
(config-if-range)# switchport mode access
(config-if-range)# switchport access vlan 4
(config-if-range)# exit

### memberi IP address pada interface vlan 1 ###
(config)# interface vlan 1
(config-if)# description ***native VLAN***
(config-if)# ip address 10.1.0.11 255.255.255.0
(config-if)# no shutdown
(config-if)# exit

(config)# ip default-gateway 10.1.0.1 ==> set gateway pada switch
(config)# end

# copy run start ==> save konfigurasi ke NVRAM

============================================================
Konfigurasi di Floor2-SW:
> enable
# configure terminal

### konfigurasi VTP (VLAN Trunking Protocol) ###
(config)# vtp mode client
(config)# vtp domain myoffice
(config)# vtp password rahasia

### memberi IP address pada interface vlan 1 ###
(config)# interface vlan 1
(config-if)# description ***native VLAN***
(config-if)# ip address 10.1.0.12 255.255.255.0
(config-if)# no shutdown
(config-if)# exit

(config)# ip default-gateway 10.1.0.1 ==> set gateway pada switch
(config)# end

# copy run start ==> save konfigurasi ke NVRAM

=====================================================
verifikasi:
# show vtp status
# show vlan
# show interface f0/24 switchport
# show interface f0/24 trunk

Pada tahap ini, semua VLAN telah terbentuk dan semua member VLAN hanya bisa berkomunikasi dalam 1 VLAN yang sama. Agar antar VLAN bisa saling berkomunikasi, maka diperlukan konfigurasi inter-VLAN routing di router atau multilayer switch, Mengenai inter-VLAN routing akan saya bahas pada posting berikutnya

–
Quote of The Day:
“For the things we have to learn before we can do them, we learn by doing them”
~Aristotle

Konfigurasi IPv6 routing OSPFv3 di Cisco router

M. Aditya Hananto — Sun, 17 Jan 2010 17:47:07 +0000

Konfigurasi Router-JKT:
# conf t
(config)# ipv6 unicast-routing
(config)# ipv6 router ospf 10

(config)# int s0/1
(config-if)# description *** TO Router-SBY ***
(config-if)# ipv6 address 2002:10:1:2::1/64 –> static manual IPv6 address assignment
(config-if)# ipv6 ospf 10 area 0 –> mengaktifkan routing OSPF di interface
(config-if)# no shutdown

(config-if)# int s0/0
(config-if)# description *** TO Router-MDN ***
(config-if)# ipv6 address 2002:10:1:4::1/64
(config-if)# ipv6 ospf 10 area 0
(config-if)# no shutdown

(config-if)# int f0/0
(config-if)# description *** TO LAN JKT ***
(config-if)# ipv6 address 2002:10:1:3::/64 eui-64 –> static eui-64 IPv6 address assignment
(config-if)# ipv6 ospf 10 area 0
(config-if)# no shutdown
(config-if)# end

Konfigurasi Router-SBY:
# conf t
(config)# ipv6 unicast-routing
(config)# ipv6 router ospf 7

(config)# int s0/1
(config-if)# description *** TO Router-JKT ***
(config-if)# ipv6 address 2002:10:1:2::1/64
(config-if)# ipv6 ospf 7 area 0
(config-if)# no shutdown

(config-if)# int f0/0
(config-if)# description *** TO LAN SBY ***
(config-if)# ipv6 address 2002:10:1:1::/64 eui-64
(config-if)# ipv6 ospf 7 area 0
(config-if)# no shutdown
(config-if)# end

Konfigurasi Router-MDN:
# conf t
(config)# ipv6 unicast-routing
(config-if)# ipv6 router ospf 9

(config)# int s1/0
(config-if)# description *** TO Router-JKT ***
(config-if)# ipv6 address 2002:10:1:4::2/64
(config-if)# ipv6 ospf 9 area 0
(config-if)# no shutdown

(config-if)# int f0/0
(config-if)# description *** TO LAN MDN ***
(config-if)# ipv6 address 2002:10:1:5::/64 eui-64
(config-if)# ipv6 ospf 9 area 0
(config-if)# no shutdown
(config-if)# end

Verifikasi konfigurasi IPv6:
# show ipv6 int brief
# show ipv6 protocols
# show ipv6 ospf neighbor
# show ipv6 ospf database
# show ipv6 route

–
Quote of The Day:
“Kesempatan dalam dunia yang terus berubah ini ada di mana-mana. Namun, kesempatan itu tidak terlihat oleh orang yang tidak tahu pasti apa yang mereka inginkan.” ~Albert Mensah

Konfigurasi IPv6 routing RIPng di Cisco router

M. Aditya Hananto — Sun, 17 Jan 2010 17:26:15 +0000

Konfigurasi Router-JKT:
# conf t
(config)# ipv6 unicast-routing
(config)# ipv6 router rip RIP-JKT

(config)# int s0/1
(config-if)# description *** TO Router-SBY ***
(config-if)# ipv6 address 2002:10:1:2::1/64 –> static manual IPv6 address assignment
(config-if)# ipv6 rip RIP-JKT enable –> mengaktifkan routing RIP di interface
(config-if)# no shutdown

(config-if)# int s0/0
(config-if)# description *** TO Router-MDN ***
(config-if)# ipv6 address 2002:10:1:4::1/64
(config-if)# ipv6 rip RIP-JKT enable
(config-if)# no shutdown

(config-if)# int f0/0
(config-if)# description *** TO LAN JKT ***
(config-if)# ipv6 address 2002:10:1:3::/64 eui-64 –> static eui-64 IPv6 address assignment
(config-if)# ipv6 rip RIP-JKT enable
(config-if)# no shutdown
(config-if)# end

Konfigurasi Router-SBY:
# conf t
(config)# ipv6 unicast-routing
(config)# ipv6 router rip RIP-SBY

(config)# int s0/1
(config-if)# description *** TO Router-JKT ***
(config-if)# ipv6 address 2002:10:1:2::1/64
(config-if)# ipv6 rip RIP-SBY enable
(config-if)# no shutdown

(config-if)# int f0/0
(config-if)# description *** TO LAN SBY ***
(config-if)# ipv6 address 2002:10:1:1::/64 eui-64
(config-if)# ipv6 rip RIP-SBY enable
(config-if)# no shutdown
(config-if)# end

Konfigurasi Router-MDN:
# conf t
(config)# ipv6 unicast-routing
(config-if)# ipv6 rip RIP-MDN enable

(config)# int s1/0
(config-if)# description *** TO Router-JKT ***
(config-if)# ipv6 address 2002:10:1:4::2/64
(config-if)# ipv6 rip RIP-MDN enable
(config-if)# no shutdown

(config-if)# int f0/0
(config-if)# description *** TO LAN MDN ***
(config-if)# ipv6 address 2002:10:1:5::/64 eui-64
(config-if)# ipv6 rip RIP-MDN enable
(config-if)# no shutdown
(config-if)# end

Verifikasi konfigurasi IPv6:
# show ipv6 int brief
# show ipv6 protocols
# show ipv6 route

–
Quote of The Day:
“Hanya orang-orang gila yang mengharapkan hasil berbeda tetapi menggunakan cara-cara yang sama.” ~Albert Einstein

Konfigurasi dasar IPv6 & static route di Cisco Router

M. Aditya Hananto — Fri, 15 Jan 2010 21:39:46 +0000

Konfigurasi Router-JKT:
# conf t
(config)# ipv6 unicast-routing

(config)# int s0/1
(config-if)# description *** TO Router-SBY ***
(config-if)# ipv6 address 2002:10:1:2::1/64 –> static manual IPv6 address assignment
(config-if)# no shutdown

(config-if)# int s0/0
(config-if)# description *** TO Router-MDN ***
(config-if)# ipv6 address 2002:10:1:4::1/64
(config-if)# no shutdown

(config-if)# int f0/0
(config-if)# description *** TO LAN JKT ***
(config-if)# ipv6 address 2002:10:1:3::/64 eui-64 –> static eui-64 IPv6 address assignment
(config-if)# no shutdown
(config-if)# exit

(config)# ipv6 route 2002:10:1:1::/64 s0/1 –> konfigurasi IPv6 static route
(config)# ipv6 route 2002:10:1:5::/64 s0/0
(config)# end

Konfigurasi Router-SBY:
# conf t
(config)# ipv6 unicast-routing

(config)# int s0/1
(config-if)# description *** TO Router-JKT ***
(config-if)# ipv6 address 2002:10:1:2::1/64
(config-if)# no shutdown

(config-if)# int f0/0
(config-if)# description *** TO LAN SBY ***
(config-if)# ipv6 address 2002:10:1:1::/64 eui-64
(config-if)# no shutdown
(config-if)# exit

(config)# ipv6 route :: s0/1 –> konfigurasi IPv6 default route
(config)# end

Konfigurasi Router-MDN:
# conf t
(config)# ipv6 unicast-routing

(config)# int s1/0
(config-if)# description *** TO Router-JKT ***
(config-if)# ipv6 address 2002:10:1:4::2/64
(config-if)# no shutdown

(config-if)# int f0/0
(config-if)# description *** TO LAN MDN ***
(config-if)# ipv6 address 2002:10:1:5::/64 eui-64
(config-if)# no shutdown
(config-if)# exit

(config)# ipv6 route :: s1/0
(config)# end

Verifikasi konfigurasi IPv6:
# show ipv6 int brief
# show ipv6 route

Router-JKT:
# ping 2002:10:1:2::2 –> ping ke s0/1 Router-SBY
# ping 2002:10:1:4::2 –> ping ke s1/0 Router-MDN

–
Quote of The Day:
“You don’t have to do more than you are Paid for, but you can push yourself ahead mighty fast by doing it voluntarily.” ~Tetsuya Kitahata

Konfigurasi PAT di Cisco Router

M. Aditya Hananto — Mon, 11 Jan 2010 15:16:10 +0000

Konfigurasi PAT di Router:
(config)# access-list 9 permit 172.17.0.0 0.0.0.255
(config)# access-list 9 permit 172.17.1.0 0.0.0.255
ATAU
(config)# access-list 9 permit 172.17.0.0 0.0.1.255

(config)# ip nat inside source list 9 int s0/0 overload

(config)# int s0/0
(config-if)# ip nat outside

(config-if)# int f0/0
(config-if)# ip nat inside

(config-if)# int f0/1
(config-if)# ip nat inside
(config-if)# end

verifikasi konfigurasi PAT:
# sh ip nat translation
# debug ip nat

–
Quote of The Day:
“Hard work has nothing to do with success. It does not produce success. It does not sustain success. And it certainly does not reverse a failure. It is PASSION that drives success. Love for one’s activity is infinitely more important to creating success than hard work.” ~Brett Watson

Konfigurasi Static & Dynamic NAT di Router Cisco

M. Aditya Hananto — Fri, 08 Jan 2010 16:12:04 +0000

Konfigurasi di Router:
Static NAT:
(config)# ip nat inside source static 10.0.0.2 202.10.10.2
(config)# ip nat inside source static 10.0.0.3 202.10.10.3

Dynamic NAT:
(config)# access-list 10 permit 10.0.1.0 0.0.0.255
(config)# ip nat pool MyPool 202.10.10.4 202.10.10.7 netmask 255.255.255.0
(config)# ip nat inside source list 10 pool MyPool

Setting up inside & outside interface:
(config)# int f0/0
(config-if)# ip nat inside

(config-if)# int f0/1
(config-if)# ip nat inside

(config-if)# int s0/0
(config-if)# ip nat outside
(config-if)# end

Verifikasi konfigurasi NAT:
# show ip nat translation
# debug ip nat

Konfigurasi multi-area OSPF di Router Cisco

M. Aditya Hananto — Tue, 05 Jan 2010 17:41:07 +0000

Konfigurasi OSPF di Router-JKT:
(config)# interface loopback 0
(config-if)# ip address 10.0.255.1 255.255.255.255 ==> sebagai router-id OSPF
(config-if)# no shutdown

(config-if)# router ospf 1                                                ==> menggunakan process-id 1
(config-router)# network 10.0.255.1 0.0.0.0 area 0
(config-router)# network 10.0.0.0   0.0.0.3 area 0
(config-router)# network 10.0.0.4   0.0.0.3 area 0
(config-router)# end

Konfigurasi OSPF di Router-SBY:
(config)# interface loopback 0
(config-if)# ip address 10.0.255.3 255.255.255.255
(config-if)# no shutdown

(config-if)# router ospf 1
(config-router)# network 10.0.255.3 0.0.0.0 area 0
(config-router)# network 10.0.0.4 0.0.0.3 area 0
(config-router)# network 10.2.1.0 0.0.0.3 area 2
(config-router)# end

Konfigurasi OSPF di Router-MKS:
(config)# interface loopback 0
(config-if)# ip address 10.2.255.1 255.255.255.255
(config-if)# no shutdown

(config-if)# router ospf 2
(config-router)# network 10.2.255.1 0.0.0.0 area 2
(config-router)# network 10.2.0.0 0.0.0.255 area 2
(config-router)# network 10.2.1.0 0.0.0.3 area 2
(config-router)# end

Konfigurasi OSPF di Router-MDN:
(config)# interface loopback 0
(config-if)# ip address 10.0.255.2 255.255.255.255
(config-if)# no shutdown

(config-if)# router ospf 2
(config-router)# network 10.0.255.2 0.0.0.0 area 0
(config-router)# network 10.0.0.0 0.0.0.3 area 0
(config-router)# network 10.1.1.0 0.0.0.3 area 1
(config-router)# end

Konfigurasi OSPF di Router-ACEH:
(config)# interface loopback 0
(config-if)# ip address 10.1.255.1 255.255.255.255
(config-if)# no shutdown

(config-if)# router ospf 3
(config-router)# network 10.1.255.1 0.0.0.0 area 1
(config-router)# network 10.1.0.0 0.0.0.255 area 1
(config-router)# network 10.1.1.0 0.0.0.3 area 1
(config-router)# end

Untuk verifikasi konfigurasi OSPF:
# sh ip route          ==> melihat routing table
# sh ip protocol       ==> melihat routing protocol yg telah dikonfigurasi
# sh ip ospf neighbor ==> melihat neighbor table OSPF
# sh ip ospf database ==> melihat LSDB OSPF
# sh ip route ospf     ==> melihat routing table OSPF

# debug ip ospf packet ==> melihat proses mengirim & menerima paket OSPF
# debug ip ospf event ==> melihat event yg terjadi di OSPF
# terminal monitor ==> utk melihat hasil debug (khusus bagi yg via telnet/SSH)
# no debug all ATAU #undebug all ==> mematikan proses debugging

Konfigurasi single-area OSPF di Cisco Router

M. Aditya Hananto — Thu, 31 Dec 2009 21:49:28 +0000

Konfigurasi OSPF di Router-JKT:
(config)# interface loopback 0
(config-if)# ip address 1.1.1.1 255.255.255.255 ==> sebagai router-id OSPF
(config-if)# no shutdown

(config-if)# router ospf 1      ==> menggunakan process-id 1
(config-router)# network 1.1.1.1    0.0.0.0 area 0
(config-router)# network 10.1.2.1   0.0.0.0 area 0
(config-router)# network 172.16.1.1 0.0.0.0 area 0
(config-router)# network 10.1.3.1   0.0.0.0 area 0
(config-router)# passive-interface f0/0    ==> interface yg tidak mengirim paket OSPF (hello, update, dll)
(config-router)# end

Konfigurasi OSPF di Router-SBY:
(config)# interface loopback 0
(config-if)# ip address 1.1.1.2 255.255.255.255
(config-if)# no shutdown

(config-if)# router ospf 1
(config-router)# network 1.1.1.2    0.0.0.0 area 0
(config-router)# network 10.1.2.0   0.0.0.255 area 0
(config-router)# network 10.1.1.0   0.0.0.255 area 0
(config-router)# passive-interface f0/0
(config-router)# end

Konfigurasi OSPF di Router-MDN:
(config)# interface loopback 0
(config-if)# ip address 1.1.1.3 255.255.255.255
(config-if)# no shutdown

(config-if)# router ospf 2
(config-router)# network 1.1.1.3    0.0.0.0 area 0
(config-router)# network 172.16.1.2   0.0.0.255 area 0
(config-router)# network 192.168.1.1   0.0.0.255 area 0
(config-router)# passive-interface f0/0
(config-router)# end

Konfigurasi Routing Protocol EIGRP di Cisco Router

M. Aditya Hananto — Mon, 28 Dec 2009 03:39:23 +0000

Konfigurasi EIGRP di Router-JKT:
(config)# router eigrp 65000 ==> pakai private AS 65000
(config-router)# network 10.0.0.0
(config-router)# network 172.16.0.0
(config-router)# passive-interface f0/0 ==> interface yg tidak mengirim paket EIGRP (hello, update, etc)
(config-router)# end

Konfigurasi EIGRP di Router-SBY:
(config)# router eigrp 65000
(config-router)# network 10.0.0.0
(config-router)# passive-interface f0/0
(config-router)# end

Konfigurasi EIGRP di Router-MDN:
(config)# router eigrp 65000
(config-router)# network 10.0.0.0
(config-router)# network 192.168.1.0
(config-router)# passive-interface f0/1
(config-router)# end

Untuk verifikasi konfigurasi EIGRP:
# sh ip route           ==> melihat routing table
# sh ip protocol        ==> melihat routing protocol di router kita
# sh ip eigrp neighbor ==> melihat neighbor table EIGRP
# sh ip eigrp topology ==> melihat topology table EIGRP
# sh ip route eigrp    ==> melihat routing table EIGRP

# debug ip eigrp     ==> melihat proses mengirim & menerima routing update RIP
# terminal monitor   ==> utk melihat hasil debug (khusus bagi yg via telnet/SSH)
# no debug all ATAU #undebug all   ==> mematikan proses debugging

Konfigurasi Routing Protocol RIP di Cisco Router

M. Aditya Hananto — Mon, 21 Dec 2009 08:06:36 +0000

Konfigurasi RIP di Router-JKT:
(config)# router rip
(config-router)# version 2
(config-router)# network 10.0.0.0
(config-router)# network 172.16.0.0
(config-router)# passive-interface f0/0 ==> interface yg tidak mengirim routing update RIP
(config-router)# end

Konfigurasi RIP di Router-SBY:
(config)# router rip
(config-router)# version 2
(config-router)# network 10.0.0.0
(config-router)# passive-interface f0/0
(config-router)# end

Konfigurasi RIP di Router-MDN:
(config)# router rip
(config-router)# version 2
(config-router)# network 172.16.0.0
(config-router)# network 192.168.1.0
(config-router)# passive-interface f0/1
(config-router)# end

Untuk verifikasi konfigurasi RIP:
# sh ip route ==> melihat routing table
# sh ip protocol ==> melihat routing protocol di router kita

# debug ip rip          ==> melihat proses mengirim & menerima routing update RIP
# terminal monitor       ==> utk melihat hasil debug (khusus bagi yg via telnet/SSH)
# no debug all ATAU #undebug all   ==> mematikan proses debugging