Wednesday, April 26, 2017

VPN MPLS L3VPN EIGRP pada Cisco

Assalamualaikum wr wb

Alhamdulillah kita masih bisa sharing bersam lagi di situs belajar IT bersama, kali ini tetap melanjutkan yang kemarin , kalo yang kemarin kita membahas tentang  MPLS L3VPN EIGRP dengan OSPF, kali ini kita akan menggunakan Eigrp.


Konfigurasi VRF di Router PE (router 1 dan 3) mulai dari router 1
R1(config)#ip vrf atas
R1(config-vrf)#rd 10:1
R1(config-vrf)#route-target both 10:1
R1(config-vrf)#exi
R1(config)#ip vrf bawah         
R1(config-vrf)#rd 10:2
R1(config-vrf)#route-target both 10:2
R1(config-vrf)#exi
R1(config)#int fa1/0
R1(config-if)#ip vrf forwarding atas
R1(config-if)#ip add 10.10.10.1 255.255.255.0
R1(config-if)#no sh
R1(config-if)#int fa1/1
R1(config-if)#ip vrf forwarding bawah
R1(config-if)#ip add 10.10.10.1 255.255.255.0
R1(config-if)#no sh
R1(config-if)#ex
 kemudian di router 3
R3(config)#ip vrf atas
R3(config-vrf)#rd 10:1
R3(config-vrf)#route-target both 10:1
R3(config-vrf)#exi
R3(config)#ip vrf bawah
R3(config-vrf)#rd 10:2
R3(config-vrf)#route-target both 10:2
R3(config-vrf)#exi
R3(config)#int fa1/0
R3(config-if)#ip vrf forwarding atas
R3(config-if)#ip addr 20.20.20.1 255.255.255.0
R3(config-if)#no sh
R3(config-if)#int fa1/1
R3(config-if)#ip vrf forwarding bawah
R3(config-if)#ip addr 20.20.20.1 255.255.255.0
R3(config-if)#no sh
kemudian konfigurasi routing Eigrp di masing masing VRF
R1(config)#router eigrp 10
R1(config-router)#address-family ipv4 vrf atas
R1(config-router-af)#no au
R1(config-router-af)#autonomous-system 10
R1(config-router-af)#net 10.10.10.0 0.0.0.255
R1(config-router-af)#redistribute bgp 10 metric 1 1 1 1 1
R1(config-router-af)#exi
R1(config-router)#address-family ipv4 vrf bawah
R1(config-router-af)#no au       
R1(config-router-af)#autonomous-system 20
R1(config-router-af)#net 10.10.10.0 0.0.0.255
R1(config-router-af)#redistribute bgp 10 metric 1 1 1 1 1
R1(config-router-af)#exi
kemudian di router PE ayng satunya
R3(config)#router eigrp 10
R3(config-router)#address-family ipv4 vrf atas
R3(config-router-af)#no au
R3(config-router-af)#autonomous-system 10
R3(config-router-af)#net 20.20.20.0 0.0.0.255
R3(config-router-af)#redistribute bgp 10 met 1 1 1 1 1
R3(config-router-af)#exi
R3(config-router)#address-family ipv4 vrf bawah   
R3(config-router-af)#no au
R3(config-router-af)#autonomous-system 20
R3(config-router-af)#net 20.20.20.0 0.0.0.255
R3(config-router-af)#redistribute bgp 10 met 1 1 1 1 1
R3(config-router-af)#exi
Masih di router PE sekarang kita mengkonfigurasi MBGP
R3(config)#router bgp 10
R3(config-router)#nei 1.1.1.1 re
R3(config-router)#no sy          
R3(config-router)#no au
R3(config-router)#nei 1.1.1.1 remote-as 10
R3(config-router)#nei 1.1.1.1 update-source lo0
R3(config-router)#address-family vpnv4
R3(config-router-af)#nei 1.1.1.1 ac
R3(config-router-af)#exi
R3(config-router)#address-family ipv4 vrf atas
R3(config-router-af)#redistribute connected
R3(config-router-af)#redistribute eigrp 10 metric 10
R3(config-router-af)#exi
R3(config-router)#address-family ipv4 vrf bawah 
R3(config-router-af)#redistribute connected
R3(config-router-af)#redistribute eigrp 20 metric 10
R3(config-router-af)#ex
kemudian di router 1
R1(config)#router bgp 10
R1(config-router)#nei 3.3.3.3 remote-as 10
R1(config-router)#nei 3.3.3.3 update-source lo0
R1(config-router)#address-family vpnv4
R1(config-router-af)#neighbor  3.3.3.3 ac
R1(config-router-af)#ex
R1(config-router)#address-family ipv4 vrf atas
R1(config-router-af)#redistribute connected
R1(config-router-af)#redistribute eigrp 10 metric 10
R1(config-router-af)#ex
R1(config-router)#address-family ipv4 vrf bawah 
R1(config-router-af)#redistribute connected
R1(config-router-af)#redistribute eigrp 20 metric 10
R1(config-router-af)#ex
kemudian konfigursi router eigrp di semua router CE
R4(config)#router eigrp 10
R4(config-router)#no au
R4(config-router)#net 4.4.4.4 0.0.0.0
R4(config-router)#net 10.10.10.0 0.0.0.255

R5(config)#router eigrp 20
R5(config-router)#net 5.5.5.5 0.0.0.0
R5(config-router)#net 10.10.10.0 0.0.0.255
R5(config-router)#no au

R6(config)#router eigrp 10
R6(config-router)#net 20.20.20.0 0.0.0.255
R6(config-router)#net 6.6.6.6 0.0.0.0
R6(config-router)#no au

R7(config)#router eigrp 20
R7(config-router)#no au
R7(config-router)#net 7.7.7.7 0.0.0.0
R7(config-router)#net 20.20.20.0 0.0.0.255
setelah selesai kemuduian kita cek tabel routingnya
R7(config)#do sh ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
       + - replicated route, % - next hop override

Gateway of last resort is not set

      5.0.0.0/32 is subnetted, 1 subnets
D        5.5.5.5 [90/158720] via 20.20.20.1, 00:00:22, FastEthernet0/0
      7.0.0.0/32 is subnetted, 1 subnets
C        7.7.7.7 is directly connected, Loopback0
      10.0.0.0/24 is subnetted, 1 subnets
D        10.10.10.0 [90/30720] via 20.20.20.1, 00:00:22, FastEthernet0/0
      20.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C        20.20.20.0/24 is directly connected, FastEthernet0/0
L        20.20.20.2/32 is directly connected, FastEthernet0/0
kemudian ujicoba dengan cara ping
R7(config)#do ping 5.5.5.5 source lo0
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 5.5.5.5, timeout is 2 seconds:
Packet sent with a source address of 7.7.7.7
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 36/45/56 ms
R7(config)#

Artikel Terkait

VPN MPLS L3VPN EIGRP pada Cisco
4/ 5
Oleh

Berlangganan

Suka dengan artikel di atas? Silakan berlangganan gratis via email