Tips and Trik Mengecek Atau Melihat IP Address Pada PC: Mei 2022

Senin, 23 Mei 2022

Lab 10. ACL Extended

Addresing:

Disini ip nya sama seperti dahulu,tinggal menambahkan :

Device Interface IP Address Subnet Mask Default Gateway

CENTRAL Fa0/0 10.10.10.2 255.255.255.0 N/A

Fa1/0 20.20.20.2 255.255.255.0 N/A

WebServer NIC 192.168.1.11 255.255.255.0 192.168.1.254

Tujuan

 Setting ACL Extended

Konsep Dasar

Karakterisik ACL secara umum

 Menentukan tipe traffic yang akan di control

 Menentukan karakteristrik traffic

 Mengidentifikasi traffic dengan permit atau deny

 Dapat men-deny traffic spesifik atau secara keseluruhan

 Terdapat implisit deny any pada akhir baris access list secara default

 Masing-masing baris hanya untuk satu protokol spesifik

 Masing-masing interface router maksimal hanya punya dua access list untuk masing-

masing protocol, satu incoming traffic dan satu outgoing traffic

 Ketika access list di assign untuk interface, tentukan apakah untuk incoming atau outgoing

 Access list sifatnya global di router, tapi filter traffic hanya berlaku di interface yang di assign

access list

 Masing-masing access list dapat di assign ke beberapa interface

 Akan tetapi tiap interface hanya boleh satu incoming dan satu outgoing

 Access list dapat digunakan untuk nge-log traffic yang match dengan access list statement

 Access list yang di applied ke inbound traffic dilakukan sebelum routing decision

 Access list yang di applied ke outbound traffic dilakukan setelah routing decision

 Ketikkan rule access list secara berurutan, dengan statement paling restrictive berada di

atas

ACL Extended

1. Nomor : 100-199

2. Digunakan untuk filter source dan destination IP address

3. Dapat memfilter spesifik protocol IP dan port number

4. Tips : assign pada router yang terdekat dengan source (close to the source router)

Konfigurasi ACL

Untuk melakukan setting ACL di router, pertama setting rule ACL terlebih dahulu di mode global

router, kemudian langkah kedua assign rule ACL tersebut di interface.

Router(config)# access-list 100 permit/deny protocol source_IP destination_IP

Router(config)# access-list 100 permit/deny protocol source_IP port

destination_IP port

Router(config)# access-list 100 permit/deny protocol any any

Router(config)# interface fa0/0

Router(config)# ip access-group 1 in/out

Untuk menyatakan match sebuah host bisa menggunakan 2 cara :

 Dengan wildcard mask “0.0.0.0”, misal 192.168.1.1 0.0.0.0

 Dengan keyword “host”, misal host 192.168.1.1

Untuk menyatakan match semua host bisa menggunakan 2 cara :

 Dengan wildcard mask “255.255.255.255”, misal 0.0.0.0 255.255.255.255

 Dengan keyword “any”, misal any source atau destination

Konfigurasi

Sebelum menerapkan ACL, setting OSPF Area 0 terlebih dahulu topologi diatas. Lihat solution Lab

8-OSPF.

#1. Buat rule ACL extended seperti dibawah ini:

1. Allow host 192.168.2.1 mengakses service SSH R1

2. Allow network R2 mengakses service HTTP ke mana saja

3. Deny semua trafik lainnya

Gunakan ACL number 100 untuk rule 1-3 diatas.

Tampilkan ipconfig Laptop2 sebelum disetting ACL

Laptop2>ipconfig

FastEthernet0 Connection:(default port)

Link-local IPv6 Address.........: FE80::260:2FFF:FE42:A6D3

IP Address......................: 192.168.2.1

Subnet Mask.....................: 255.255.255.0

Default Gateway.................: 192.168.2.254

Laptop2 dapat melakukan tes Ping ke Laptop1 yang berada di network 192.168.1.0

Laptop2>ping 192.168.1.1

Pinging 192.168.1.1 with 32 bytes of data:

Reply from 192.168.1.1: bytes=32 time=13ms TTL=125

Reply from 192.168.1.1: bytes=32 time=12ms TTL=125

Reply from 192.168.1.1: bytes=32 time=13ms TTL=125

Reply from 192.168.1.1: bytes=32 time=7ms TTL=125

Ping statistics for 192.168.1.1:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 7ms, Maximum = 13ms, Average = 11ms

Setting ACL Extended di R2

R2(config)#access-list 100 permit tcp host 192.168.2.1 host 10.10.10.1 eq 22

R2(config)#access-list 100 permit tcp any any eq 80

ACL telah disetting di R2 sesuai urutan rule nomor 1-3 di atas. Mengapa menempatkan ACL-nya di

R2? Agar rule tersebut berjalan normal saat di eksekusi, maka kita taruh di dekat router source.

Ingat konsep ACL extended : close to the source router. Karena implicit deny ada dibaris

terakhir ACL, maka kita tidak perlu menuliskan rule ACL tersebut.

Setelah mensetting rule ACL di R2, langkah selanjutnya yaitu menempatkan ACL tersebut di

interface agar bekerja efektif. Rule ACL ditempatkan di interface outgoing menuju network luar di

Fa1/0 R2.

Apply ACL di Interface Fa1/0 R2

R2(config)#interface fa1/0

R2(config-if)#ip access-group 100 out

Verifikasi

Tampilkan access-list extended yang sudah dibuat di R2

R2#show access-list

Extended IP access list 100

10 permit tcp host 192.168.2.1 host 10.10.10.1 eq 22

20 permit tcp any any eq www

R2#

Tes Ping dari Laptop2 ke Laptop1

Laptop2>ping 192.168.1.1

Pinging 192.168.1.1 with 32 bytes of data:

Reply from 192.168.2.254: Destination host unreachable.

Ping statistics for 192.168.1.1:

Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

ACL sudah berjalan sesuai dengan rule nomer 3 diatas, deny semua traffic lainnya termasuk ping

dari Laptop2 ke Laptop1. Perhatikan yang memberikan reply dari router R2 (192.168.2.254).

Tes Ping dari Laptop2 ke Laptop1 dengan mengubah IP address Laptop2 selain 192.168.2.1

Laptop2>ipconfig

FastEthernet0 Connection:(default port)

Link-local IPv6 Address.........: FE80::260:2FFF:FE42:A6D3

IP Address......................: 192.168.2.3

Subnet Mask.....................: 255.255.255.0

Default Gateway.................: 192.168.2.254

Laptop2>ping 192.168.1.1

Pinging 192.168.1.1 with 32 bytes of data:

Reply from 192.168.2.254: Destination host unreachable.

Ping statistics for 192.168.1.1:

Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

Dengan IP 192.168.2.3 ternyata tidak berhasil tes Ping host yang berada di network 192.168.1.0.

Tes Ping dari Laptop2 ke R1

Laptop2>ping 10.10.10.1

Pinging 10.10.10.1 with 32 bytes of data:

Reply from 192.168.2.254: Destination host unreachable.

Ping statistics for 10.10.10.1:

Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

Tes Ping dari Laptop2 ke R1 gagal.

Tes Ping dari Laptop2 ke router CENTRAL

Laptop2>ping 20.20.20.2

Pinging 20.20.20.2 with 32 bytes of data:

Reply from 192.168.2.254: Destination host unreachable.

Ping statistics for 20.20.20.2:

Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

Dari hasil tes Ping Laptop2 ke router CENTRAL juga gagal.

Tampilkan interface access-list extended di R2

R2#show ip interface fa1/0

FastEthernet1/0 is up, line protocol is up (connected)

Internet address is 20.20.20.1/24

Broadcast address is 255.255.255.255

Address determined by setup command

MTU is 1500 bytes

Helper address is not set

Directed broadcast forwarding is disabled

Outgoing access list is 100

Inbound access list is not set

Proxy ARP is enabled

Security level is default

Split horizon is enabled

ICMP redirects are always sent

ICMP unreachables are always sent

ICMP mask replies are never sent

IP fast switching is disabled

IP fast switching on the same interface is disabled

Dari output interface access-list diatas, di Fa1/0 R2 terdapat outgoing access-list dengan number

100.

Tampilkan Akses SSH dari Laptop2 ke R1

Laptop2>ipconfig

FastEthernet0 Connection:(default port)

Link-local IPv6 Address.........: FE80::260:2FFF:FE42:A6D3

IP Address......................: 192.168.2.1

Subnet Mask.....................: 255.255.255.0

Default Gateway.................: 192.168.2.254

PC>

Laptop2>ssh -l admin 10.10.10.1

Open

Password:

Unauthorized access prohibited!

R1>enable

Password:

R1#

Akses SSH dari Laptop2 ke R1 berhasil. Hal ini sesuai dengan rule ACL extended nomer 1.

Tampilkan access-list extended setelah di jalankan akses SSH ke R1

R2#show access-list

Extended IP access list 100

10 permit tcp host 192.168.2.1 host 10.10.10.1 eq 22 (154 match(es))

20 permit tcp any any eq www

Perhatikan pada baris pertama rule ACL terdapat 154 match(es) artinya jumlah attempt yang

match dengan rule baris ke-1 dimana Laptop2 diperbolehkan mengakses service SSH ke R1.

Jumlah match akan terus naik seiring dengan jumlah koneksi SSH dari Laptop2 ke R1.

Jalankan Web Browser di Laptop2 untuk Mengakses Web Server di Network A

Klik Laptop2 -> Pilih tab Desktop -> Klik Web Browser -> Isikan IP Web Server : 192.168.1.11 ->

ENTER.

Service HTTP WebServer berhasil diakses dari Laptop2. Coba ganti IP address Laptop2 selain

192.168.2.1, kemudian akses WebServer dan pastikan berhasil karena service HTTP memang

diperbolehkan diakses dari network R2 mana saja.

Tampilkan access-list extended setelah mengakses Web Server di R1

R2#show access-list

Extended IP access list 100

10 permit tcp host 192.168.2.1 host 10.10.10.1 eq 22 (155 match(es))

20 permit tcp any any eq www (11 match(es))

R2#

Dari output baris rule nomor 2 diatas, bagian akhir baris terdapat 11 match(es) artinya jumlah

attempt yang dilakukan oleh source any ketika mengakses HTTP.

Dari informasi output show access-list dapat disimpulkan bahwa ACL yang telah kita buat sudah

berhasil melewatkan traffic SSH dan HTTP.

Minggu, 22 Mei 2022

Lab 9. ACL Standard

Tujuan

 Setting ACL Standard

Konsep Dasar

Karakterisik ACL secara umum

 Menentukan tipe traffic yang akan di control

 Menentukan karakteristrik traffic

 Mengidentifikasi traffic dengan permit atau deny

 Dapat men-deny traffic spesifik atau secara keseluruhan

 Terdapat implisit deny any pada akhir baris access list secara default

 Masing-masing baris hanya untuk satu protokol spesifik

 Masing-masing interface router maksimal hanya punya dua access list untuk masing-

masing protocol, satu incoming traffic dan satu outgoing traffic

 Ketika access list di assign untuk interface, tentukan apakah untuk incoming atau outgoing

 Access list sifatnya global di router, tapi filter traffic hanya berlaku di interface yang di assign

access list

 Masing-masing access list dapat di assign ke beberapa interface

 Akan tetapi tiap interface hanya boleh satu incoming dan satu outgoing

 Access list dapat digunakan untuk nge-log traffic yang match dengan access list statement

 Access list yang di applied ke inbound traffic dilakukan sebelum routing decision

 Access list yang di applied ke outbound traffic dilakukan setelah routing decision

 Ketikkan rule access list secara berurutan, dengan statement paling restrictive berada di

atas

ACL Standard

1. Nomor : 1-99

2. Digunakan untuk filter source IP address

3. Permit / Deny semua protocol suite TCP/IP

4. Tips : assign pada router yang terdekat dengan destination (close to the destination

router)

Konfigurasi ACL

Untuk melakukan setting ACL di router, pertama setting rule ACL terlebih dahulu di mode global

router, kemudian langkah kedua assign rule ACL tersebut di interface.

Router(config)# access-list 1 permit/deny source hostname/ip/network

Router(config)# access-list 1 permit/deny any

Router(config)# interface fa0/0

Router(config)# ip access-group 1 in/out

Contoh Konfigurasi ACL

Rule ACL : allow akses VTY line 0-4 dari internal network 192.168.1.0/24 :

Router(config)# access-list 12 permit 192.168.1.0 0.0.0.255

Router(config)# line vty 0 4

Router(config)# access-class 12 .in

Untuk menyatakan match sebuah host bisa menggunakan 2 cara :

 Dengan wildcard mask “0.0.0.0”, misal 192.168.1.1 0.0.0.0

 Dengan keyword “host”, misal host 192.168.1.1

Untuk menyatakan match semua host bisa menggunakan 2 cara :

 Dengan wildcard mask “255.255.255.255”, misal 0.0.0.0 255.255.255.255

 Dengan keyword “any”, misal any source atau destination

Konfigurasi

Sebelum menerapkan ACL, setting OSPF Area 0 terlebih dahulu topologi diatas. Lihat solution Lab

8-OSPF.

#1. Buat rule ACL standard seperti dibawah ini:

1. Deny host 192.168.1.1 berkomunikasi dengan network 192.168.2.0

2. Deny network 172.16.1.0 berkomunikasi dengan network 192.168.2.0

3. Permit semua trafik lainnya

Gunakan ACL number 1 untuk rule 1-3 diatas.

Tampilkan ipconfig Lapopt1 sebelum disetting ACL

Laptop1>ipconfig

FastEthernet0 Connection:(default port)

Link-local IPv6 Address.........: FE80::201:43FF:FE3A:AEC2

IP Address......................: 192.168.1.1

Subnet Mask.....................: 255.255.255.0

Default Gateway.................: 192.168.1.254

Laptop1 dapat melakukan tes Ping ke Laptop2 yang berada di network 192.168.2.0

Laptop1>ping 192.168.2.1

Pinging 192.168.2.1 with 32 bytes of data:

Reply from 192.168.2.1: bytes=32 time=1ms TTL=126

Reply from 192.168.2.1: bytes=32 time=0ms TTL=126

Ping statistics for 192.168.2.1:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 1ms, Average = 0ms

Setting ACL Standar di R2

R2(config)#access-list 1 deny 192.168.1.1 0.0.0.0

R2(config)#access-list 1 deny 172.16.1.0 0.0.0.255

R2(config)#access-list 1 permit any

ACL telah disetting di R2 sesuai urutan rule nomor 1-3 di atas. Mengapa menempatkan ACL-nya di

R2? Agar rule tersebut berjalan normal saat di eksekusi, maka kita taruh di dekat router tujuan.

Ingat konsep ACL standar : close to the destination router.

Setelah mensetting rule ACL di R2, langkah selanjutnya yaitu menempatkan ACL tersebut di

interface agar bekerja efektif. ACL ditempatkan di interface outgoing menuju network 192.168.2.0.

Apply ACL di Interface Fa0/0 R2

R2(config)#interface fa0/0

R2(config-if)#ip access-group 1 out

Verifikasi

Tampilkan access-list standard yang sudah dibuat di R2

R2#show access-list

Standard IP access list 1

10 deny host 172.16.1.1

20 deny 192.168.1.0 0.0.0.255

30 permit any

R2#

Tes Ping dari Laptop1 ke Laptop2

Laptop1>ping 192.168.2.1

Pinging 192.168.2.1 with 32 bytes of data:

Reply from 12.12.12.2: Destination host unreachable.

Ping statistics for 192.168.2.1:

Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

ACL sudah berjalan sesuai dengan rule diatas bahwa host 192.168.1.1 tidak boleh berkomunikasi

dengan network 192.168.2.0. Kemudian kita akan tes dengan IP selain 192.168.1.1.

Tes Ping dari Laptop1 ke Laptop2 dengan mengubah IP address Laptop1 selain 192.168.1.1

Laptop1>ipconfig

FastEthernet0 Connection:(default port)

Link-local IPv6 Address.........: FE80::201:43FF:FE3A:AEC2

IP Address......................: 192.168.1.3

Subnet Mask.....................: 255.255.255.0

Default Gateway.................: 192.168.1.254

Laptop1>ping 192.168.2.1

Pinging 192.168.2.1 with 32 bytes of data:

Reply from 192.168.2.1: bytes=32 time=11ms TTL=126

Reply from 192.168.2.1: bytes=32 time=1ms TTL=126

Reply from 192.168.2.1: bytes=32 time=0ms TTL=126

Ping statistics for 192.168.2.1:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 11ms, Average = 5ms

Dengan IP 192.168.1.3 ternyata berhasil tes Ping host yang berada di network 192.168.2.0.

Dengan demikian rule ACL baris ke-1 sudah berhasil memfilter host 192.168.1.1 saat mengakses

network 192.168.2.0.

Tes Ping dari Loopback1 ke Laptop2

R1#ping

Protocol [ip]: [ENTER]

Target IP address: 192.168.2.1

Repeat count [5]: [ENTER]

Datagram size [100]: [ENTER]

Timeout in seconds [2]: [ENTER]

Extended commands [n]: y

Source address or interface: loopback1

Type of service [0]: [ENTER]

Set DF bit in IP header? [no]: [ENTER]

Validate reply data? [no]: [ENTER]

Data pattern [0xABCD]: [ENTER]

Loose, Strict, Record, Timestamp, Verbose[none]: [ENTER]

Sweep range of sizes [n]: [ENTER]

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.2.1, timeout is 2 seconds:

Packet sent with a source address of 172.16.1.1

R1#ping

Protocol [ip]: [ENTER]

Target IP address: 192.168.2.1

Repeat count [5]: [ENTER]

Datagram size [100]: [ENTER]

Timeout in seconds [2]: [ENTER]

Extended commands [n]: y

Source address or interface: loopback2

Type of service [0]: [ENTER]

Set DF bit in IP header? [no]: [ENTER]

Validate reply data? [no]: [ENTER]

Data pattern [0xABCD]: [ENTER]

Loose, Strict, Record, Timestamp, Verbose[none]: [ENTER]

Sweep range of sizes [n]: [ENTER]

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.2.1, timeout is 2 seconds:

Packet sent with a source address of 172.16.2.2

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 0/0/1 ms

Dari hasil tes Ping extended dari Loopback2 ke Laptop2 memberikan success rate 100%. Berarti

rule ACL baris ke-3 sudah berhasil diimplementasikan.

Tampilkan interface access-list standard di R2

R2#show ip interface fa0/0

FastEthernet0/0 is up, line protocol is up (connected)

Internet address is 192.168.2.254/24

Broadcast address is 255.255.255.255

Address determined by setup command

MTU is 1500 bytes

Helper address is not set

Directed broadcast forwarding is disabled

Outgoing access list is 1

Inbound access list is not set

Proxy ARP is enabled

Security level is default

Split horizon is enabled

ICMP redirects are always sent

ICMP unreachables are always sent

ICMP mask replies are never sent

IP fast switching is disabled

IP fast switching on the same interface is disabled

IP Flow switching is disabled

IP Fast switching turbo vector

...

Dari output interface access-list diatas, di Fa0/0 R2 terdapat outgoing access-list dengan number 1.

#2. Buat rule ACL standard seperti dibawah ini untuk R1:

1. Deny host 192.168.2.1 berkomunikasi dengan network 192.168.1.0

2. Deny network 172.16.3.0 berkomunikasi dengan network 192.168.1.0

3. Permit semua trafik lainnya

Untuk mempraktikkan rule ACL standard diatas, hapus ACL yang telah disetting di R2. Cara

menghapus rule ACL dengan command : no access-list [number-acl]. Dan hapus juga di

interface yang dipasang ACL dengan command : no ip access-group [number-acl] out.

NOTE: ULANGI LANGKAH YANG SAMA SEPERTI DI HALAMAN 67 UNTUK MENERAPKAN ACL DI R1 SESUAI DENGAN RULE #2 DIATAS.

Rabu, 18 Mei 2022

Lab 8. OSPF

Tujuan

 Setting OSPF

 Setting router-id OSPF

 Setting passive-interface dan network type loopback OSPF

Konsep Dasar

 OSPF singkatan dari Open Shortest Path First

 OSPF merupakan routing protocol open standar yang diimplementasikan oleh berbagai

macam vendor, termasuk Cisco

 Link-state protocol

 OSPF bekerja dengan menggunakan algoritma Dijkstra

 Hop count unlimited

 Metric: cost (cost=10^8 / BW)

 Administrative Distance: 110

 Classless routing protocol

 Mendukung VLSM dan CIDR

 Hanya mendukung equal cost load balancing

 Terdapat konsep area untuk memudahkan manajemen dan control traffic

 Menyediakan design hierarki dengan multiple area

 Harus memiliki satu area yang disebut sebagai area 0 atau backbone area

 Semua area selain 0 (non-backbone area) harus terhubung ke area 0

 Dari scalabilitas lebih baik dibandingkan dengan protocol distance vector

 Mendukung autentikasi

 Update melalui multicast address: 224.0.0.5

 Konvergensi cepat

 Mengirimkan hello packet setiap 10 second

 Trigger/Incrementeal updates

o Router mengirimkan update hanya jika terjadi perubahan dan tidak mengirimkan

semua routing table pada periodic update

OSPF memaintain tiga tabel

1. Neighbor table

- Dikenal juga sebagai adjacency database

- Menampilkan informasi directly connected router (neighbors)

- Command: show ip ospf neighbor

2. Database table

- Disebut juga sebagai LSDB (link state database)

- Menampilkan semua kemungkinan informasi route menuju network dalam satu area

- Command: show ip ospf database

3. Routing table

- Menampilkan best route menuju network destination

- Command: show ip route

Dua step menggunakan routing protocol dinamis secara umum:

1. Pilih routing protocol

2. Advertise directly connected network (jaringan yang terhubung langsung dengan router)

Konfigurasi OSPF

Router(config)# router ospf <process-id>

Router(config-router)# network <network-id> <wildcard-mask> area <area-id>

network <Network-ID> : untuk advertise network yang terhubung langsung dengan router

(directly connected network).

wildcard-mask : inverse subnet-mask

Keuntungan OSPF

 Open standard

 Tidak ada batasan jumlah hop

 Loop free

 Konvergensi lebih cepat

Kerugian OSPF

 Mengkonsumsi lebih banyak resource CPU

 Kompleks dalam hal design dan implementasi

 Hanya mendukung equal load balancing

 Hanya mendukung protocol IP

Konfigurasi

Tampilkan routing table sebelum disetting OSPF di R1

R1#sh ip route

Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP

i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area

* - candidate default, U - per-user static route, o - ODR

P - periodic downloaded static route

Gateway of last resort is not set

12.0.0.0/24 is subnetted, 1 subnets

C 12.12.12.0 is directly connected, FastEthernet1/0

172.16.0.0/24 is subnetted, 2 subnets

C 172.16.1.0 is directly connected, Loopback1

C 172.16.2.0 is directly connected, Loopback2

C 192.168.1.0/24 is directly connected, FastEthernet0/0

R1#

Dari output diatas, hanya terdapat directly connected network yang ditandai dengan kode C.

Tampilkan routing table sebelum disetting OSPF di R2

R2#show ip route

Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP

i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area

* - candidate default, U - per-user static route, o - ODR

P - periodic downloaded static route

Gateway of last resort is not set

12.0.0.0/24 is subnetted, 1 subnets

C 12.12.12.0 is directly connected, FastEthernet1/0

172.16.0.0/24 is subnetted, 2 subnets

C 172.16.3.0 is directly connected, Loopback0

C 172.16.4.0 is directly connected, Loopback1

C 192.168.2.0/24 is directly connected, FastEthernet0/0

R2#

Agar proses routing berhasil, harus disetting OSPF disemua router terlebih dulu. Setelah itu baru

diverifikasi dengan tes Ping end-to-end device-nya.

Setting OSPF di R1

Command untuk mensetting OSPF.

R1(config)#router ospf 1

R1(config-router)#network 12.12.12.0 0.0.0.255 area 0

R1(config-router)#network 172.16.1.0 0.0.0.255 area 0

R1(config-router)#network 172.16.2.0 0.0.0.255 area 0

R1(config-router)#network 192.168.1.0 0.0.0.255 area 0

R1(config-router)#

Setting OSPF di R2

Command untuk mensetting OSPF.

R2(config)#router ospf 1

R2(config-router)#network 12.12.12.0 0.0.0.255 area 0

R2(config-router)#network 172.16.3.0 0.0.0.255 area 0

R2(config-router)#network 172.16.4.0 0.0.0.255 area 0

R2(config-router)#network 192.168.2.0 0.0.0.255 area 0

Verifikasi

Tampilkan routing table setelah disetting OSPF di R1

R1#show ip route

Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP

i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area

* - candidate default, U - per-user static route, o - ODR

P - periodic downloaded static route

Gateway of last resort is not set

12.0.0.0/24 is subnetted, 1 subnets

C 12.12.12.0 is directly connected, FastEthernet1/0

172.16.0.0/16 is variably subnetted, 4 subnets, 2 masks

C 172.16.1.0/24 is directly connected, Loopback1

C 172.16.2.0/24 is directly connected, Loopback2

O 172.16.3.3/32 [110/2] via 12.12.12.2, 00:01:31, FastEthernet1/0

O 172.16.4.4/32 [110/2] via 12.12.12.2, 00:01:31, FastEthernet1/0

C 192.168.1.0/24 is directly connected, FastEthernet0/0

O 192.168.2.0/24 [110/2] via 12.12.12.2, 00:00:40, FastEthernet1/0

R1#

Tampilkan routing table setelah disetting OSPF di R2

R2#show ip route

Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP

i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area

* - candidate default, U - per-user static route, o - ODR

P - periodic downloaded static route

Gateway of last resort is not set

12.0.0.0/24 is subnetted, 1 subnets

C 12.12.12.0 is directly connected, FastEthernet1/0

172.16.0.0/16 is variably subnetted, 4 subnets, 2 masks

O 172.16.1.1/32 [110/2] via 12.12.12.1, 00:02:07, FastEthernet1/0

O 172.16.2.2/32 [110/2] via 12.12.12.1, 00:02:07, FastEthernet1/0

C 172.16.3.0/24 is directly connected, Loopback0

C 172.16.4.0/24 is directly connected, Loopback1

O 192.168.1.0/24 [110/2] via 12.12.12.1, 00:02:07, FastEthernet1/0

C 192.168.2.0/24 is directly connected, FastEthernet0/0

R2#

Tampilkan informasi neighbor OSPF di R1

R1#show ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface

172.16.4.4 1 FULL/DROTHER 00:00:35 12.12.12.2 FastEthernet1/0

R1#

Tampilkan informasi neighbor OSPF di R2

R2#show ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface

172.16.2.2 1 FULL/DR 00:00:31 12.12.12.1 FastEthernet1/0

R2#

Tampilkan informasi routing protocol di R1

R1#show ip protocol

Routing Protocol is "ospf 1"

Outgoing update filter list for all interfaces is not set

Incoming update filter list for all interfaces is not set

Router ID 172.16.2.2

Number of areas in this router is 1. 1 normal 0 stub 0 nssa

Maximum path: 4

Routing for Networks:

12.12.12.0 0.0.0.255 area 0

172.16.1.0 0.0.0.255 area 0

172.16.2.0 0.0.0.255 area 0

192.168.1.0 0.0.0.255 area 0

Routing Information Sources:

Gateway Distance Last Update

172.16.2.2 110 00:07:22

172.16.4.4 110 00:06:07

Distance: (default is 110)

R1#

Dari informasi routing diatas, R1 menjalankan OSPF dengan proses ID 1. Ada 4 network yang

diroutingkan oleh R1. Administrative distance 110. R1 memiliki router ID 172.16.2.2.

R1 memiliki neighbor 172.16.4.4 (IP Loopback R2). 172.16.4.4 merupakan router-ID R2.

NOTE:ULANGI LANGKAH YANG SAMA DIATAS UNTUKMENAMPILKAN INFORMASI NEIGHBOR DAN INFORMASI ROUTING PROTOCOL DI R2

Tampilkan informasi database OSPF di R1

R1#show ip ospf database

OSPF Router with ID (172.16.2.2) (Process ID 1)

Router Link States (Area 0)

Link ID ADV Router Age Seq# Checksum Link count

172.16.2.2 172.16.2.2 472 0x80000005 0x00e483 4

172.16.4.4 172.16.4.4 397 0x80000004 0x00ba9c 4

Net Link States (Area 0)

Link ID ADV Router Age Seq# Checksum

12.12.12.1 172.16.2.2 472 0x80000001 0x00720b

R1#

Di area 0 hanya terdapat 2 router dengan ID : 172.16.2.2 dan 172.16.4.4.

Tes Ping dari Laptop1 ke Laptop2

Laptop1>ping 192.168.2.1

Pinging 192.168.2.1 with 32 bytes of data:

Reply from 192.168.2.1: bytes=32 time=1ms TTL=126

Reply from 192.168.2.1: bytes=32 time=0ms TTL=126

Ping statistics for 192.168.2.1:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 1ms, Average = 0ms

Ping dari Laptop1 ke Laptop2 berhasil.

Traceroute dari Laptop1 ke Laptop2

Laptop1>tracert 192.168.2.1

Tracing route to 192.168.2.1 over a maximum of 30 hops:

1 1 ms 0 ms 0 ms 192.168.1.254

2 0 ms 0 ms 0 ms 12.12.12.2

3 0 ms 0 ms 0 ms 192.168.2.1

Trace complete.

Untuk menuju Laptop2 dari Laptop1 membutuhkan 3 hop.

Tes Ping dari Laptop2 ke Laptop1

Laptop2>ping 192.168.1.1

Pinging 192.168.1.1 with 32 bytes of data:

Reply from 192.168.1.1: bytes=32 time=0ms TTL=126

Reply from 192.168.1.1: bytes=32 time=1ms TTL=126

Reply from 192.168.1.1: bytes=32 time=11ms TTL=126

Reply from 192.168.1.1: bytes=32 time=0ms TTL=126

Ping statistics for 192.168.1.1:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 11ms, Average = 3ms

Traceroute dari Laptop2 ke Laptop1

Laptop2>tracert 192.168.1.1

Tracing route to 192.168.1.1 over a maximum of 30 hops:

1 1 ms 0 ms 0 ms 192.168.2.254

2 0 ms 0 ms 0 ms 12.12.12.1

3 1 ms 11 ms 11 ms 192.168.1.1

Trace complete.

Tampilkan routing table spesifik OSPF di R1 dan R2

R1#show ip route ospf

172.16.0.0/16 is variably subnetted, 4 subnets, 2 masks

O 172.16.3.3 [110/2] via 12.12.12.2, 00:05:11, FastEthernet1/0

O 172.16.4.4 [110/2] via 12.12.12.2, 00:05:11, FastEthernet1/0

O 192.168.2.0 [110/2] via 12.12.12.2, 00:04:20, FastEthernet1/0

R1#

R2#show ip route ospf

172.16.0.0/16 is variably subnetted, 4 subnets, 2 masks

O 172.16.1.1 [110/2] via 12.12.12.1, 00:05:05, FastEthernet1/0

O 172.16.2.2 [110/2] via 12.12.12.1, 00:05:05, FastEthernet1/0

O 192.168.1.0 [110/2] via 12.12.12.1, 00:05:05, FastEthernet1/0

R2#

Debug OSPF di R1

05:53:59: %OSPF-5-ADJCHG: Process 1, Nbr 172.16.4.4 on FastEthernet1/0 from

LOADING to FULL, Loading Done

Setelah selesai setting OSPF di R2 step Halaman 53, di R1 maupun R2 akan muncul output

adjacent router OSPF. Dari output debug OSPF diatas R1 memiliki neighbor 172.16.4.4.

172.16.4.4 adalah router ID dari R2. Berarti R1 dan R2 telah menjalin relationship neighbor

(adjacency) sehingga routing update akan saling dikirimkan.

Setting router-id OSPF di R1

R1(config)#router ospf 1

R1(config-router)#router-id 111.111.111.111

R1(config-router)#Reload or use "clear ip ospf process" command, for this to

take effect

R1(config-router)#

Setting router-id OSPF di R2

R2(config)#router ospf 1

R2(config-router)#router-id 222.222.222.222

R2(config-router)#Reload or use "clear ip ospf process" command, for this to

take effect

R2(config-router)#

Setelah menjalankan command router-id diatas, jalankan command clear ip ospf

process untuk mereset proses OSPF di R1 maupun R2, sehingga router-id OSPF akan berubah.

R1#clear ip ospf process

Reset ALL OSPF processes? [no]: yes

R1#

06:12:37: %OSPF-5-ADJCHG: Process 1, Nbr 172.16.4.4 on FastEthernet1/0 from FULL

to DOWN, Neighbor Down: Adjacency forced to reset

06:12:37: %OSPF-5-ADJCHG: Process 1, Nbr 172.16.4.4 on FastEthernet1/0 from FULL

to DOWN, Neighbor Down: Interface down or detached

R1#

06:12:41: %OSPF-5-ADJCHG: Process 1, Nbr 172.16.4.4 on FastEthernet1/0 from

LOADING to FULL, Loading Done

Tampilkan neighbor table OSPF di R1

R1#show ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface

222.222.222.222 1 FULL/DR 00:00:36 12.12.12.2 FastEthernet1/0

R1#

Dari output neighbor table di R1, bisa kita lihat di kolom neighbor ID terdapat 222.222.222.222,

dimana 222.222.222.222 adalah router-id R2. Dengan demikian, setting router-id OSPF di R2 telah

berhasil.

Note: ulangi langkah yang sama diatas untuk mereset process OSPF dan tampilkan

neighbor table OSPF di R2, pastikan neighbor ID R1 111.111.111.111

Setting passive-interface OSPF di R1

R1(config)#router ospf 1

R1(config-router)#passive-interface fa0/0

R1(config-router)#

Tampilkan routing information OSPF di R1

R1#show ip protocols

Routing Protocol is "ospf 1"

Outgoing update filter list for all interfaces is not set

Incoming update filter list for all interfaces is not set

Router ID 111.111.111.111

Number of areas in this router is 1. 1 normal 0 stub 0 nssa

Maximum path: 4

Routing for Networks:

12.12.12.0 0.0.0.255 area 0

172.16.1.0 0.0.0.255 area 0

172.16.2.0 0.0.0.255 area 0

192.168.1.0 0.0.0.255 area 0

Passive Interface(s):

FastEthernet0/0

Routing Information Sources:

Gateway Distance Last Update

111.111.111.111 110 00:11:04

172.16.2.2 110 00:30:11

172.16.4.4 110 00:11:38

222.222.222.222 110 00:11:04

Distance: (default is 110)

Passive-interface fa0/0 telah berhasil ditambahkan di OSPF R1.

Tampilkan interface OSPF di R1

R1#show ip ospf interface

FastEthernet1/0 is up, line protocol is up

Internet address is 12.12.12.1/24, Area 0

Process ID 1, Router ID 111.111.111.111, Network Type BROADCAST, Cost: 1

Transmit Delay is 1 sec, State BDR, Priority 1

Designated Router (ID) 222.222.222.222, Interface address 12.12.12.2

Backup Designated Router (ID) 111.111.111.111, Interface address 12.12.12.1

Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5

Hello due in 00:00:07

Index 1/1, flood queue length 0

Next 0x0(0)/0x0(0)

Last flood scan length is 1, maximum is 1

Last flood scan time is 0 msec, maximum is 0 msec

Neighbor Count is 1, Adjacent neighbor count is 1

Adjacent with neighbor 222.222.222.222 (Designated Router)

Suppress hello for 0 neighbor(s)

Loopback1 is up, line protocol is up

Internet address is 172.16.1.1/24, Area 0

Process ID 1, Router ID 111.111.111.111, Network Type LOOPBACK, Cost: 1

Loopback interface is treated as a stub Host

Loopback2 is up, line protocol is up

Internet address is 172.16.2.2/24, Area 0

Process ID 1, Router ID 111.111.111.111, Network Type LOOPBACK, Cost: 1

Loopback interface is treated as a stub Host

FastEthernet0/0 is up, line protocol is up

Internet address is 192.168.1.254/24, Area 0

Process ID 1, Router ID 111.111.111.111, Network Type BROADCAST, Cost: 1

Transmit Delay is 1 sec, State WAITING, Priority 1

No designated router on this network

No backup designated router on this network

Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5

No Hellos (Passive interface)

Index 4/4, flood queue length 0

Next 0x0(0)/0x0(0)

Last flood scan length is 1, maximum is 1

Last flood scan time is 0 msec, maximum is 0 msec

Neighbor Count is 0, Adjacent neighbor count is 0

Suppress hello for 0 neighbor(s)

Passive-interface OSPF memiliki kemiripan dengan EIGRP. Dengan mengaktifkan passive-

interface di interface OSPF, maka akan menghentikan pengiriman paket hello sehingga akan

mencegah router membentuk relationship neighbor antar router, akibatnya router akan berhenti

melakukan update routing outgoing dan incoming (tidak dapat mengirimkan update routing dan

tidak dapat dikirimi update routing).

OSPF dan EIGRP sama-sama menggunakan paket hello sebelum membentuk relationship antar

router. Perhatikan informasi interface OSPF Fa0/0 dan Fa1/0 R1 diatas. Fa0/0 sudah diaktifkan

command passive-interface sehingga tidak ada lagi paket hello. Beda dengan Fa1/0 yang

ada keterangan Hello due in..

FastEthernet0/0 is up, line protocol is up

No Hellos (Passive interface)

FastEthernet1/0 is up, line protocol is up

Hello due in 00:00:07

Karena Network A dan Network B merupakan jaringan LAN dimana tidak membutuhkan

relationship neighbor antar router OSPF sehingga tidak jadi masalah ketika interface Fa0/0

diaktifkan command passive-interface-nya. Lain halnya dengan interface Fa1/0 ketika

diaktifkan command passive-interface, maka akan menimbulkan masalah yaitu R1 tidak

dapat membentuk relationship dengan R2, sehingga OSPF tidak dapat berjalan normal.

OSPF secara default memiliki hello interval = 10 second, dan dead interval = 40 second.

Interface Loopback di OSPF

Perhatikan sekali lagi output routing table di R1 dan R2. Apakah ada masalah dengan interface

loopback?

R1#show ip route

Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP

i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area

* - candidate default, U - per-user static route, o - ODR

P - periodic downloaded static route

Gateway of last resort is not set

12.0.0.0/24 is subnetted, 1 subnets

C 12.12.12.0 is directly connected, FastEthernet1/0

172.16.0.0/16 is variably subnetted, 4 subnets, 2 masks

C 172.16.1.0/24 is directly connected, Loopback1

C 172.16.2.0/24 is directly connected, Loopback2

O 172.16.3.3/32 [110/2] via 12.12.12.2, 00:38:50, FastEthernet1/0

O 172.16.4.4/32 [110/2] via 12.12.12.2, 00:38:50, FastEthernet1/0

C 192.168.1.0/24 is directly connected, FastEthernet0/0

O 192.168.2.0/24 [110/2] via 12.12.12.2, 00:38:50, FastEthernet1/0

R2#show ip route

Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP

i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area

* - candidate default, U - per-user static route, o - ODR

P - periodic downloaded static route

Gateway of last resort is not set

12.0.0.0/24 is subnetted, 1 subnets

C 12.12.12.0 is directly connected, FastEthernet1/0

172.16.0.0/16 is variably subnetted, 4 subnets, 2 masks

O 172.16.1.1/32 [110/2] via 12.12.12.1, 00:41:42, FastEthernet1/0

O 172.16.2.2/32 [110/2] via 12.12.12.1, 00:41:42, FastEthernet1/0

C 172.16.3.0/24 is directly connected, Loopback3

C 172.16.4.0/24 is directly connected, Loopback4

O 192.168.1.0/24 [110/2] via 12.12.12.1, 00:41:42, FastEthernet1/0

C 192.168.2.0/24 is directly connected, FastEthernet0/0

R2#

Dari output show ip ospf interface Halaman 60 dan show ip route Halaman 61 kita bisa

lihat bahwa loopback yang sebelumnya kita buat untuk tujuan imitasi subnet atau testing menjadi

sebuah network sendiri di R1 maupun di R2 berubah menjadi stub host dengan prefix /32 dan

network type LOOPBACK.

Loopback1 is up, line protocol is up

Process ID 1, Router ID 111.111.111.111, Network Type LOOPBACK, Cost: 1

Loopback interface is treated as a stub Host

Loopback2 is up, line protocol is up

Process ID 1, Router ID 111.111.111.111, Network Type LOOPBACK, Cost: 1

Loopback interface is treated as a stub Host

Loopback3 is up, line protocol is up

Process ID 1, Router ID 222.222.222.222, Network Type LOOPBACK, Cost: 1

Loopback interface is treated as a stub Host

Loopback4 is up, line protocol is up

Process ID 1, Router ID 222.222.222.222, Network Type LOOPBACK, Cost: 1

Loopback interface is treated as a stub Host

O 172.16.3.3/32 [110/2] via 12.12.12.2, 00:38:50, FastEthernet1/0

O 172.16.4.4/32 [110/2] via 12.12.12.2, 00:38:50, FastEthernet1/0

O 172.16.1.1/32 [110/2] via 12.12.12.1, 00:41:42, FastEthernet1/0

O 172.16.2.2/32 [110/2] via 12.12.12.1, 00:41:42, FastEthernet1/0

Semua loopback, yaitu Loopback1, Loopback2, Loopback3, Loopback4 menjadi stub host dengan network

type LOOPBACK. Stub host memang tampil di routing table dengan prefix /32, akan tetapi tidak dapat

digunakan untuk forwarding.

Agar semua loopback dapat di advertise oleh OSPF sebagai network dengan prefix aslinya yaitu /24, caranya

dengan mengubah network type loopback menjadi point-to-point.

Ubah Network Type Interface Loopback OSPF di R1 dan R2

R1(config)#interface lo1

R1(config-if)#ip ospf network point-to-point

R1(config-if)#

R1(config-if)#interface lo2

R1(config-if)#ip ospf network point-to-point

R1(config-if)#

R2(config)#interface lo3

R2(config-if)#ip ospf network point-to-point

R2(config-if)#

R2(config-if)#interface lo4

R2(config-if)#ip ospf network point-to-point

R2(config-if)#

Tampilkan routing table OSPF terupdate di R1 dan R2

R1#show ip route

Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP

i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area

* - candidate default, U - per-user static route, o - ODR

P - periodic downloaded static route

Gateway of last resort is not set

12.0.0.0/24 is subnetted, 1 subnets

C 12.12.12.0 is directly connected, FastEthernet1/0

172.16.0.0/24 is subnetted, 4 subnets

C 172.16.1.0 is directly connected, Loopback1

C 172.16.2.0 is directly connected, Loopback2

O 172.16.3.0 [110/2] via 12.12.12.2, 00:01:00, FastEthernet1/0

O 172.16.4.0 [110/2] via 12.12.12.2, 00:00:50, FastEthernet1/0

C 192.168.1.0/24 is directly connected, FastEthernet0/0

O 192.168.2.0/24 [110/2] via 12.12.12.2, 01:17:07, FastEthernet1/0

R1#

R2#show ip route

Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP

i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area

* - candidate default, U - per-user static route, o - ODR

P - periodic downloaded static route

Gateway of last resort is not set

12.0.0.0/24 is subnetted, 1 subnets

C 12.12.12.0 is directly connected, FastEthernet1/0

172.16.0.0/24 is subnetted, 4 subnets

O 172.16.1.0 [110/2] via 12.12.12.1, 00:04:33, FastEthernet1/0

O 172.16.2.0 [110/2] via 12.12.12.1, 00:04:23, FastEthernet1/0

C 172.16.3.0 is directly connected, Loopback3

C 172.16.4.0 is directly connected, Loopback4

O 192.168.1.0/24 [110/2] via 12.12.12.1, 01:18:04, FastEthernet1/0

C 192.168.2.0/24 is directly connected, FastEthernet0/0

Dari output diatas, semua loopback telah diadvertise sebagai network dengan prefix /24.

Selanjutnya kita akan tes Ping dari Loopback1 di R1 ke Loopback3 di R2.

Tes Ping dari Loopback1 di R1 ke Loopback3 di R2

Untuk mencoba tes Ping dari Loopback, gunakan extended-ping di router.

R1#ping

Protocol [ip]: ip

Target IP address: 172.16.3.3

Repeat count [5]: [ENTER]

Datagram size [100]: [ENTER]

Timeout in seconds [2]: [ENTER]

Extended commands [n]: y

Source address or interface: loopback1

Type of service [0]: [ENTER]

Set DF bit in IP header? [no]: [ENTER]

Validate reply data? [no]: [ENTER]

Data pattern [0xABCD]: [ENTER]

Loose, Strict, Record, Timestamp, Verbose[none]:

Sweep range of sizes [n]: [ENTER]

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 172.16.3.3, timeout is 2 seconds:

Packet sent with a source address of 172.16.1.1

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 0/0/0 ms

NOTE:ULANGI LANGKAH YANG SAMA DIATAS UNTUK TES PING DARI LOOPBACK4 DI R2 KE LOOPBACK2 DI R1.

Jumat, 13 Mei 2022

Lab 7. EIGRP

Topologi

TUJUAN

 Setting EIGRP

 Debug EIGRP

 Setting passive-interface EIGRP

Konsep Dasar

EIGRP disebut juga sebagai routing protocol distance vector, terkadang disebut juga advanced

distance vector atau routing protocol hybrid.

Berikut ini beberapa fitur dari EIGRP :

 Cisco open standar protocol (sebelumnya proprietary)

 Termasuk classless routing protocol

 Update perubahan topologi secara dinamis

 Metric (32 bit) : Composite Metric (BW + Delay + Load + MTU + Reliability)

 Administrative Distance: 90

 Update menggunakan multicast: 224.0.0.10

 Jumlah maksimum hop count: 255 (default 100)

 Mendukung protocol IP, IPX, Apple Talk

 Hello packet dikirim setiap 5 second (dead interval 15 second)

 Konvergensi cepat

 Menggunakan algoritma DUAL (Diffusing Update Algorithm)

 Mendukung equal dan unequal cost load balancing

EIGRP memaintain tiga tabel

1. Neighbor table

- Menampilkan informasi directly connected router

- Command: show ip eigrp neighbor

2. Topology table

- Menampilkan semua best route yang dipelajari dari masing-masing neighbor

- Command: show ip eigrp topology

3. Routing table

- Menampilkan best route menuju network destination

- Command: show ip route

Notes EIGRP

 EIGRP menggunakan autonomous system number (ASN) untuk mengidentifikasi router-

router yang sharing informasi route

 Hanya router yang memiliki ASN sama yang bisa sharing informasi route

Dua step menggunakan routing protocol dinamis secara umum:

1. Pilih routing protocol

2. Advertise directly connected network (jaringan yang terhubung langsung dengan router)

Konfigurasi EIGRP

Router(config)# router eigrp 100

Router(config-router)# network <Network ID>

Router(config-router)# network <Network ID> <Wildcard Mask>

Router(config-router)# no auto-summary

network <Network-ID> : untuk advertise network yang terhubung langsung dengan router

(directly connected network).

Keuntungan EIGRP

 Terdapat backup route jika best route down (successor=primary, feasible

successor=backup)

 Mendukung VLSM

KONFIGURASI

Tampilkan routing table sebelum disetting EIGRP di R1

R1#sh ip route

Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP

i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area

* - candidate default, U - per-user static route, o - ODR

P - periodic downloaded static route

Gateway of last resort is not set

12.0.0.0/24 is subnetted, 1 subnets

C 12.12.12.0 is directly connected, FastEthernet1/0

172.16.0.0/24 is subnetted, 2 subnets

C 172.16.1.0 is directly connected, Loopback1

C 172.16.2.0 is directly connected, Loopback2

C 192.168.1.0/24 is directly connected, FastEthernet0/0

R1#

Tampilkan routing table sebelum disetting EIGRP di R2

R2#show ip route

Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP

i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area

* - candidate default, U - per-user static route, o - ODR

P - periodic downloaded static route

Gateway of last resort is not set

12.0.0.0/24 is subnetted, 1 subnets

C 12.12.12.0 is directly connected, FastEthernet1/0

172.16.0.0/24 is subnetted, 2 subnets

C 172.16.3.0 is directly connected, Loopback0

C 172.16.4.0 is directly connected, Loopback1

C 192.168.2.0/24 is directly connected, FastEthernet0/0

R2#

Dari output diatas, hanya menampilkan directly connected network pada masing-masing router

yang ditandai dengan kode C. Untuk menghubungkan router agar bisa berkomunikasi dengan

network remote (yang tidak terhubung langsung dengan router) maka perlu disetting routing

protocol, salah satu contohnya yaitu EIGRP.

Setting EIGRP di R1
Command untuk mensetting EIGRP.

R1(config)#router eigrp 100

R1(config-router)#network 12.12.12.0

R1(config-router)#network 172.16.1.0

R1(config-router)#network 172.16.2.0

R1(config-router)#network 192.168.1.0

R1(config-router)#no auto-summary

R1(config-router)#

Setting EIGRP di R2
Command untuk mensetting EIGRP.

R2(config)#router eigrp 100

R2(config-router)#network 12.12.12.0

R2(config-router)#network 172.16.3.0

R2(config-router)#network 172.16.4.0

R2(config-router)#network 192.168.2.0

R2(config-router)#no auto-summary

R2(config-router)#

Verifikasi

Tampilkan routing table setelah disetting EIGRP di R1

R1#show ip route

Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP

i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area

* - candidate default, U - per-user static route, o - ODR

P - periodic downloaded static route

Gateway of last resort is not set

12.0.0.0/24 is subnetted, 1 subnets

C 12.12.12.0 is directly connected, FastEthernet1/0

172.16.0.0/24 is subnetted, 4 subnets

C 172.16.1.0 is directly connected, Loopback1

C 172.16.2.0 is directly connected, Loopback2

D 172.16.3.0 [90/156160] via 12.12.12.2, 00:00:17, FastEthernet1/0

D 172.16.4.0 [90/156160] via 12.12.12.2, 00:00:17, FastEthernet1/0

C 192.168.1.0/24 is directly connected, FastEthernet0/0

D 192.168.2.0/24 [90/30720] via 12.12.12.2, 00:00:17, FastEthernet1/0

R1#

NOTE: ULANGI LANGKAH YANG SAMA DIATAS UNTUK MENAMPILKANROUTING TABLE DI R2

Tes Ping dari Laptop1 ke Laptop2

Laptop1>ping 192.168.2.1

Pinging 192.168.2.1 with 32 bytes of data:

Reply from 192.168.2.1: bytes=32 time=1ms TTL=126

Reply from 192.168.2.1: bytes=32 time=0ms TTL=126

Ping statistics for 192.168.2.1:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 1ms, Average = 0ms

Ping dari Laptop1 ke Laptop2 berhasil.

Traceroute dari Laptop1 ke Laptop2

Laptop1>tracert 192.168.2.1

Tracing route to 192.168.2.1 over a maximum of 30 hops:

1 1 ms 0 ms 0 ms 192.168.1.254

2 0 ms 0 ms 0 ms 12.12.12.2

3 0 ms 0 ms 0 ms 192.168.2.1

Trace complete.

Untuk menuju Laptop2 dari Laptop1 membutuhkan 3 hop.

Tes Ping dari Laptop2 ke Laptop1

Laptop2>ping 192.168.1.1

Pinging 192.168.1.1 with 32 bytes of data:

Reply from 192.168.1.1: bytes=32 time=0ms TTL=126

Reply from 192.168.1.1: bytes=32 time=1ms TTL=126

Reply from 192.168.1.1: bytes=32 time=11ms TTL=126

Reply from 192.168.1.1: bytes=32 time=0ms TTL=126

Ping statistics for 192.168.1.1:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 11ms, Average = 3ms

Ping dari Laptop2 ke Laptop1 berhasil.

Traceroute dari Laptop2 ke Laptop1

Laptop2>tracert 192.168.1.1

Tracing route to 192.168.1.1 over a maximum of 30 hops:

1 1 ms 0 ms 0 ms 192.168.2.254

2 0 ms 0 ms 0 ms 12.12.12.1

3 1 ms 11 ms 11 ms 192.168.1.1

Trace complete.

Tampilkan neighbor table R1

R1#show ip eigrp neighbors

IP-EIGRP neighbors for process 100

H Address Interface Hold Uptime SRTT RTO Q Seq

(sec) (ms) Cnt Num

0 12.12.12.2 Fa1/0 10 00:02:23 40 1000 0 32

R1#

Dari output neighbor table dapat diketahui bahwa R1 memiliki neighbor router 12.12.12.2 (IP

address R2).

Tampilkan topologi table di R1

R1#show ip eigrp topology

IP-EIGRP Topology Table for AS 100

Codes: P - Passive, A - Active, U - Update, Q - Query, R - Reply,

r - Reply status

P 12.12.12.0/24, 1 successors, FD is 28160

via Connected, FastEthernet1/0

P 172.16.1.0/24, 1 successors, FD is 128256

via Connected, Loopback1

P 172.16.2.0/24, 1 successors, FD is 128256

via Connected, Loopback2

P 172.16.3.0/24, 1 successors, FD is 156160

via 12.12.12.2 (156160/128256), FastEthernet1/0

P 172.16.4.0/24, 1 successors, FD is 156160

via 12.12.12.2 (156160/128256), FastEthernet1/0

P 192.168.1.0/24, 1 successors, FD is 28160

via Connected, FastEthernet0/0

P 192.168.2.0/24, 1 successors, FD is 30720

via 12.12.12.2 (30720/28160), FastEthernet1/0

R1#

NOTE: ULANGI LANGKAH YANG SAMA DIATAS UNTUK MENAMPILKAN NEIGHBOR TABLE DAN TOPOLOGI TABLE DI R2

Tampilkan informasi routing EIGRP di R1

R1#show ip protocols

Routing Protocol is "eigrp 100 "

Outgoing update filter list for all interfaces is not set

Incoming update filter list for all interfaces is not set

Default networks flagged in outgoing updates

Default networks accepted from incoming updates

EIGRP metric weight K1=1, K2=0, K3=1, K4=0, K5=0

EIGRP maximum hopcount 100

EIGRP maximum metric variance 1

Redistributing: eigrp 100

Automatic network summarization is not in effect

Maximum path: 4

Routing for Networks:

12.0.0.0

172.16.0.0

192.168.1.0

Routing Information Sources:

Gateway Distance Last Update

12.12.12.2 90 160431022

Distance: internal 90 external 170

R1#

Berdasarkan output routing information di R1, kita bisa lihat bahwa R1 menggunakan EIGRP

dengan ASN 100 untuk network 12.0.0.0, 172.16.0.0, dan 192.168.1.0. EIGRP memiliki

Administrative Distance 120. Secara default hop-count EIGRP 100.

Tampilkan informasi interface EIGRP di R1

R1#show ip eigrp interfaces

IP-EIGRP interfaces for process 100

Xmit Queue Mean Pacing Time Multicast Pending

Interface Peers Un/Reliable SRTT Un/Reliable Flow Timer Routes

Fa1/0 1 0/0 1236 0/10 0 0

Lo1 0 0/0 1236 0/10 0 0

Lo2 0 0/0 1236 0/10 0 0

Fa0/0 0 0/0 1236 0/10 0 0

R1#

Terdapat 4 interface yang disetting EIGRP yaitu Fa1/0, Fa0/0, Lo1, Lo2.

Debug EIGRP R2

Pada saat kita mensetting EIGRP di R2 step sebelumnya pada Halaman 43, di R2 akan tampil

output seperti dibawah ini :

R2(config)#router eigrp 100

R2(config-router)#network 12.12.12.0

R2(config-router)#

%DUAL-5-NBRCHANGE: IP-EIGRP 100: Neighbor 12.12.12.1 (FastEthernet1/0) is up:

new adjacency

R2(config-router)#network 172.16.3.0

R2(config-router)#network 172.16.4.0

R2(config-router)#network 192.168.2.0

R2(config-router)#no auto-summary

R2(config-router)#

%DUAL-5-NBRCHANGE: IP-EIGRP 100: Neighbor 12.12.12.1 (FastEthernet1/0) resync:

summary configured

R2(config-router)#end

R2#

Setelah selesai setting EIGRP di R1, kemudian kita mensetting EIGRP di R2, setelah input network

12.12.12.0 di R2, muncul pesan neighbor adjacency yang ditambahkan ke dalam routing process

EIGRP. Oleh karena itu, saat kita verifikasi show ip eigrp neighbors R2 akan memiliki

neighbor 12.12.12.1 seperti tampilan dibawah ini :

R2#show ip eigrp neighbors

IP-EIGRP neighbors for process 100

H Address Interface Hold Uptime SRTT RTO Q Seq

(sec) (ms) Cnt Num

0 12.12.12.1 Fa1/0 10 00:23:38 40 1000 0 16

R2#

Selain itu juga terjadi proses resync saat kita mengetikkan command no auto-summary.

Untuk mengaktifkan debug paket EIGRP, gunakan command dibawah ini :

R2#debug eigrp packets

EIGRP Packets debugging is on

(UPDATE, REQUEST, QUERY, REPLY, HELLO, ACK )

EIGRP: Received HELLO on FastEthernet1/0 nbr 12.12.12.1

AS 100, Flags 0x0, Seq 17/0 idbQ 0/0

EIGRP: Sending HELLO on Loopback4

AS 100, Flags 0x0, Seq 36/0 idbQ 0/0 iidbQ un/rely 0/0

EIGRP: Received HELLO on Loopback4 nbr 172.16.4.4

AS 100, Flags 0x0, Seq 36/0 idbQ 0/0

EIGRP: Packet from ourselves ignored

EIGRP: Sending HELLO on Loopback3

AS 100, Flags 0x0, Seq 36/0 idbQ 0/0 iidbQ un/rely 0/0

EIGRP: Received HELLO on Loopback3 nbr 172.16.3.3

AS 100, Flags 0x0, Seq 36/0 idbQ 0/0

EIGRP: Packet from ourselves ignored

EIGRP: Sending HELLO on FastEthernet0/0

AS 100, Flags 0x0, Seq 36/0 idbQ 0/0 iidbQ un/rely 0/0

EIGRP: Sending HELLO on FastEthernet1/0

AS 100, Flags 0x0, Seq 36/0 idbQ 0/0 iidbQ un/rely 0/0

EIGRP: Received HELLO on FastEthernet1/0 nbr 12.12.12.1

AS 100, Flags 0x0, Seq 17/0 idbQ 0/0

Untuk menghentikan debug EIGRP packets, gunakan command berikut : no debug eigrp

packets

Setting passive-interface di R1

R1(config)#router eigrp 100

R1(config-router)#passive-interface fa0/0

R1(config-router)#

Dari output debug packet EIGRP, kita bisa lihat bahwa EIGRP menggunakan paket hello untuk

membentuk relationship dengan router tetangga (adjacent router). Apabila kita mengaktifkan

command passive-interface di interface maka akan menghentikan pengiriman paket hello

sehingga akan mencegah update routing outgoing dan incoming.

Karena Network A dan Network B tidak memerlukan paket hello, maka kita perlu mengaktifkan

passive-interface untuk interface di R1 dan R2 yang menuju Network A dan Network B.

NOTE: ULANGI LANGKAH YANG SAMA DIATAS UNTUK SETTING PASSIVE- INTERFACE EIGRP DI R2

Review

1. Apakah yang dimaksud dengan wildcard mask?

2. Jelaskan perbedaannya saat kita mensetting routing EIGRP tanpa menggunakan wildcard

mask dan menggunakan wildcard mask? Untuk membandingkan keduanya, gunakan

solution lab sebelumnya Halaman 43 yang tanpa wildcard mask dan solution dibawah ini

yang menggunakan wildcard mask.

Command untuk mensetting EIGRP di R1

R1(config)#router eigrp 100

R1(config-router)#network 12.12.12.0 0.0.0.255

R1(config-router)#network 172.16.1.0 0.0.0.255

R1(config-router)#network 172.16.2.0 0.0.0.255

R1(config-router)#network 192.168.1.0 0.0.0.255

R1(config-router)#no auto-summary

Command untuk mensetting EIGRP di R2

R2(config)#router eigrp 100

R2(config-router)#network 12.12.12.0 0.0.0.255

R2(config-router)#network 172.16.3.0 0.0.0.255

R2(config-router)#network 172.16.4.0 0.0.0.255

R2(config-router)#network 192.168.2.0 0.0.0.255

R2(config-router)#no auto-summary

3. Untuk membentuk relationship neighbor antar router di EIGRP, apa sajakah kriteria yang

diperlukan ? Isi Ya atau Tidak table dibawah ini.

Requirement EIGRP

Status interface harus UP UP

Interface harus berada pada subnet yang sama

Harus lolos autentikasi (jika disetting

autentikasinya)

Harus menggunakan ASN yang sama disettingan

command router eigrp

Hello dan hold/dead timers harus sama

IP MTU harus sama

Router ID harus unik

K-values harus sama

Harus berada dalam area yang sama.

Kamis, 12 Mei 2022

Lab 6. RIPv2

Topologi

Tujuan

 Setting RIPv2

 Debug RIPv2

 Setting passive-interface RIPv2

Konsep Dasar

Keuntungan menggunakan dynamic routing dibandingkan static routing:

 Tidak perlu tahu network destination

 Perlu melakukan advertise network yang terhubung langsung

 Update perubahan topologi secara dinamis

 Pekerjaan network admin jadi berkurang

 Digunakan di industri besar

 Neighbor router melakukan pertukaran informasi routing dan membangun routing table

secara otomatis

 Lebih mudah dibandingkan menggunakan static routing

RIPv2

 Open standar protocol (Cisco atau non-Cisco)

 Classless routing protocol (support default atau sub-networks)

 Mendukung VLSM

 Mendukung Autentikasi

 Menggunakan multicast address 224.0.0.9

 Administrative distance: 120

 Metric: hop count (terbaik = yang paling kecil)

 Hop ke-16 unreachable

 Load balancing 4 equal path

 Digunakan untuk organisasi kecil

 Update secara periodic dan pertukaran keseleruhan informasi routing tabel setiap 30

second

Dua langkah mudah setting routing protocol dinamis secara umum:

1. Pilih routing protocol

2. Advertise directly connected network (jaringan yang terhubung langsung dengan router)

Router(config)# router rip

Router(config-router)# version 2

Router(config-router)# network <Network ID>

Router(config-router)# no auto-summary

network <Network-ID> : untuk advertise network yang terhubung langsung dengan router

(directly connected network).

Keuntungan RIPv2

 Mudah dikonfigurasi

 Tidak memerlukan design seperti OSPF

 Tidak kompleks

 Less overhead

Kerugian RIPv2

 Utilisasi bandwidth sangat tinggi karena diperlukan untuk broadcast setiap 30 second

(RIPv1)

 Terbatas pada jumlah hop (bukan bandwidth)

 Tidak scalable, hop count hanya 15

 Konvergensi rendah

Waktu konvergensi: waktu yang dibutuhkan oleh router untuk menggunakan route alternative

ketika best route down.

Konfigurasi

Tampilkan routing table sebelum disetting RIPv2 di R1

R1#sh ip route

Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP

i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area

* - candidate default, U - per-user static route, o - ODR

P - periodic downloaded static route

Gateway of last resort is not set

12.0.0.0/24 is subnetted, 1 subnets

C 12.12.12.0 is directly connected, FastEthernet1/0

172.16.0.0/24 is subnetted, 2 subnets

C 172.16.1.0 is directly connected, Loopback1

C 172.16.2.0 is directly connected, Loopback2

C 192.168.1.0/24 is directly connected, FastEthernet0/0

R1#

Tampilkan routing table sebelum disetting RIPv2 di R2

R2#show ip route

Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP

i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area

* - candidate default, U - per-user static route, o - ODR

P - periodic downloaded static route

Gateway of last resort is not set

12.0.0.0/24 is subnetted, 1 subnets

C 12.12.12.0 is directly connected, FastEthernet1/0

172.16.0.0/24 is subnetted, 2 subnets

C 172.16.3.0 is directly connected, Loopback0

C 172.16.4.0 is directly connected, Loopback1

C 192.168.2.0/24 is directly connected, FastEthernet0/0

R2#

Setting RIPv2 di R1

Command untuk mensetting RIPv2.

R1(config)#router rip

R1(config-router)#version 2

R1(config-router)#network 12.12.12.0

R1(config-router)#network 172.16.1.0

R1(config-router)#network 172.16.2.0

R1(config-router)#network 192.168.1.0

R1(config-router)#no auto-summary

R1(config-router)#

Setting RIPv2 di R2

Command untuk mensetting RIPv2.

R2(config)#router rip

R2(config-router)#version 2

R2(config-router)#network 12.12.12.0

R2(config-router)#network 172.16.3.0

R2(config-router)#network 172.16.4.0

R2(config-router)#network 192.168.2.0

R2(config-router)#no auto-summary

R2(config-router)#

Verifikasi

Tampilkan routing table setelah disetting RIPv2 di R1

R1#show ip route

Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP

i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area

* - candidate default, U - per-user static route, o - ODR

P - periodic downloaded static route

Gateway of last resort is not set

12.0.0.0/24 is subnetted, 1 subnets

C 12.12.12.0 is directly connected, FastEthernet1/0

172.16.0.0/16 is variably subnetted, 5 subnets, 2 masks

R 172.16.0.0/16 [120/1] via 12.12.12.2, 00:00:55, FastEthernet1/0

C 172.16.1.0/24 is directly connected, Loopback1

C 172.16.2.0/24 is directly connected, Loopback2

R 172.16.3.0/24 [120/1] via 12.12.12.2, 00:00:02, FastEthernet1/0

R 172.16.4.0/24 [120/1] via 12.12.12.2, 00:00:02, FastEthernet1/0

C 192.168.1.0/24 is directly connected, FastEthernet0/0

R 192.168.2.0/24 [120/1] via 12.12.12.2, 00:00:02, FastEthernet1/0

R1#

NOTE: ULANGI LANGKAH-LANGKAH DI ATAS UNTUK MENAMPILKAN ROUTING TABLE DI R2

Tes Ping dari Laptop1 ke Laptop2

Laptop1>ping 192.168.2.1

Pinging 192.168.2.1 with 32 bytes of data:

Reply from 192.168.2.1: bytes=32 time=1ms TTL=126

Reply from 192.168.2.1: bytes=32 time=0ms TTL=126

Ping statistics for 192.168.2.1:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 1ms, Average = 0ms

Ping dari Laptop1 ke Laptop2 berhasil.

Traceroute dari Laptop1 ke Laptop2

Laptop1>tracert 192.168.2.1

Tracing route to 192.168.2.1 over a maximum of 30 hops:

1 1 ms 0 ms 0 ms 192.168.1.254

2 0 ms 0 ms 0 ms 12.12.12.2

3 0 ms 0 ms 0 ms 192.168.2.1

Trace complete.

Untuk menuju Laptop2 dari Laptop1 membutuhkan 3 hop.

Tes Ping dari Laptop2 ke Laptop1

Laptop2>ping 192.168.1.1

Pinging 192.168.1.1 with 32 bytes of data:

Reply from 192.168.1.1: bytes=32 time=0ms TTL=126

Reply from 192.168.1.1: bytes=32 time=1ms TTL=126

Reply from 192.168.1.1: bytes=32 time=11ms TTL=126

Reply from 192.168.1.1: bytes=32 time=0ms TTL=126

Ping statistics for 192.168.1.1:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 11ms, Average = 3ms

Ping dari Laptop2 ke Laptop1 berhasil.

Traceroute dari Laptop2 ke Laptop1

Laptop2>tracert 192.168.1.1

Tracing route to 192.168.1.1 over a maximum of 30 hops:

1 1 ms 0 ms 0 ms 192.168.2.254

2 0 ms 0 ms 0 ms 12.12.12.1

3 1 ms 11 ms 11 ms 192.168.1.1

Trace complete.

Tampilkan informasi routing protocol yang digunakan di R1

R1#show ip protocols

Routing Protocol is "rip"

Sending updates every 30 seconds, next due in 12 seconds

Invalid after 180 seconds, hold down 180, flushed after 240

Outgoing update filter list for all interfaces is not set

Incoming update filter list for all interfaces is not set

Redistributing: rip

Default version control: send version 2, receive 2

Interface Send Recv Triggered RIP Key-chain

FastEthernet1/0 2 2

Loopback1 2 2

Loopback2 2 2

FastEthernet0/0 2 2

Automatic network summarization is not in effect

Maximum path: 4

Routing for Networks:

12.0.0.0

172.16.0.0

192.168.1.0

Passive Interface(s):

Routing Information Sources:

Gateway Distance Last Update

12.12.12.2 120 00:00:15

Distance: (default is 120)

NOTE: ULANGI LANGKAH-LANGKAH DI ATAS UNTUK MENAMPILKAN ROUTING INFORMATION DI R2

Berdasarkan output routing information di R1, kita bisa lihat bahwa R1 menggunakan RIP version 2

untuk network 12.0.0.0, 172.16.0.0, dan 192.168.1.0. RIP memiliki Administrative Distance (AD)

120. Terdapat 4 interface yang mengaktifkan RIP yaitu Fa1/0, Fa0/0, Lo1, Lo2.

Debug RIP di R1

Dengan mengaktifkan fitur debug, kita bisa tahu apakah RIP sudah berjalan atau belum.

R1#debug ip rip

RIP protocol debugging is on

R1#

RIP: received v2 update from 12.12.12.2 on FastEthernet1/0

172.16.3.0/24 via 0.0.0.0 in 1 hops

172.16.4.0/24 via 0.0.0.0 in 1 hops

192.168.2.0/24 via 0.0.0.0 in 1 hops

RIP: sending v2 update to 224.0.0.9 via FastEthernet1/0 (12.12.12.1)

RIP: build update entries

172.16.1.0/24 via 0.0.0.0, metric 1, tag 0

172.16.2.0/24 via 0.0.0.0, metric 1, tag 0

192.168.1.0/24 via 0.0.0.0, metric 1, tag 0

RIP: sending v2 update to 224.0.0.9 via Loopback1 (172.16.1.1)

RIP: build update entries

12.12.12.0/24 via 0.0.0.0, metric 1, tag 0

172.16.2.0/24 via 0.0.0.0, metric 1, tag 0

172.16.3.0/24 via 0.0.0.0, metric 2, tag 0

172.16.4.0/24 via 0.0.0.0, metric 2, tag 0

192.168.1.0/24 via 0.0.0.0, metric 1, tag 0

192.168.2.0/24 via 0.0.0.0, metric 2, tag 0

RIP: sending v2 update to 224.0.0.9 via Loopback2 (172.16.2.2)

RIP: build update entries

12.12.12.0/24 via 0.0.0.0, metric 1, tag 0

172.16.1.0/24 via 0.0.0.0, metric 1, tag 0

172.16.3.0/24 via 0.0.0.0, metric 2, tag 0

172.16.4.0/24 via 0.0.0.0, metric 2, tag 0

192.168.1.0/24 via 0.0.0.0, metric 1, tag 0

192.168.2.0/24 via 0.0.0.0, metric 2, tag 0

RIP: sending v2 update to 224.0.0.9 via FastEthernet0/0 (192.168.1.254)

RIP: build update entries

12.12.12.0/24 via 0.0.0.0, metric 1, tag 0

172.16.1.0/24 via 0.0.0.0, metric 1, tag 0

172.16.2.0/24 via 0.0.0.0, metric 1, tag 0

172.16.3.0/24 via 0.0.0.0, metric 2, tag 0

172.16.4.0/24 via 0.0.0.0, metric 2, tag 0

192.168.2.0/24 via 0.0.0.0, metric 2, tag 0

Dari output debug RIP, kita bisa lihat bahwa RIP sudah running di router R1. Untuk menghentikan

output debug, gunakan command undebug ip rip atau undebug all.

NOTE : ULANGI LANKAH YANG SAMA DI ATAS UNTUK MENAMPILKAN OUTPUT DEBUG RIP DI R2

Setting passive-interface di R1

Untuk menghentikan routing updates yang dikirimkan ke Network A, maka aktifkan command

passive-interface di interface fa0/0 R1 yang menuju Network A. Hal ini tidak mempengaruhi

advertise Network A. Jadi, Network A masih tetap dikenali oleh R2 dan masih tampil di routing table

R2. Di routing protocol RIPv2, mengaktifkan passive-interface mencegah multicast update

melalui interface spesifik dan masih bisa mendapatkan update dari RIP neighbor yang lain.

R1(config)#router rip

R1(config-router)#passive-interface fa0/0

R1(config-router)#

Tampilkan routing information di R1

R1#show ip protocols

Routing Protocol is "rip"

Sending updates every 30 seconds, next due in 3 seconds

Invalid after 180 seconds, hold down 180, flushed after 240

Outgoing update filter list for all interfaces is not set

Incoming update filter list for all interfaces is not set

Redistributing: rip

Default version control: send version 2, receive 2

Interface Send Recv Triggered RIP Key-chain

FastEthernet1/0 2 2

Loopback1 2 2

Loopback2 2 2

Automatic network summarization is not in effect

Maximum path: 4

Routing for Networks:

12.0.0.0

172.16.0.0

192.168.1.0

Passive Interface(s):

FastEthernet0/0

Routing Information Sources:

Gateway Distance Last Update

12.12.12.2 120 00:00:08

Distance: (default is 120)

R1#

Passive-interface fa0/0 R1 sudah berhasil kita setting.

NOTE : ULANGI LANGKAH YANG SAMA DI ATAS UNTUK SETTING PASSIVE- INTERFACE DI R2.