oke sebelum kita langsung melabkan materi kali ini kita akan sedikit membahas mengenai perbedaan antara L2VPN dan L3VPN :
L2VPN : customer A dan B seperti bersama-sama dalam satu jaringan broadcast atau layer2 sedangkan L3VPN merupakan suatu customer yang terhubung ke router yang menjalankan OSPF di kedua sisi customer yang seolah-olah langsung terhubung
L3VPN : customer A dan B tidak memiliki hubungan langsung sama sekali router customer terhubung langsung dengan router PE dari service provider dan tugas dari service provider akan menghubungkan customer A dan B tanpa tercamour.
Pada lan kali ini kita akan membuat simulasi lab untuk mempelajari suatu service provider yang menghubungkan antar customer yang sama disisi PE yang berbeda dan untuk menghubungkan antar CE karena networknya berbeda protokol yang akan kita gunakan yaitu static routing.
Untuk topoliginya seperti ini :
#Konfigurasi dasar
[admin@MikroTik] > system identity set name=R1
[admin@R1] > interface bridge add name=bridge1
[admin@R1] > ip address add address=1.1.1.1/32 interface=bridge1
[admin@R1] > ip address add address=12.12.12.1/23 interface=ether1
[admin@R1] > ip address add address=14.14.14.1/23 interface=ether2
[admin@R1] > ip address add address=15.15.15.1/23 interface=ether3
#routing iBGP menggunakan RIP network ke customer tidak perlu di advertise
[admin@R1] > routing rip network add network=1.1.1.1/32
[admin@R1] > routing rip network add network=12.12.12.0/24
#setting MPLS, karena BGP L3VPN tidak dapat berjalan tanpa ada MPLS
[admin@R1] > mpls ldp set enabled=yes lsr-id=1.1.1.1 transport-address=1.1.1.1
[admin@R1] > mpls ldp interface add interface=ether1
#setting iBGP jadikan R2 sebagai route reflector disini BGP berfungsi untuk distribusi routing table vrf, BGP disetting dengan address-families=vpnv4
[admin@R1] > routing bgp instance set default as=123
[admin@R1] > routing bgp peer add name=peer1 remote-address=2.2.2.2 remote-as=123 update-source=bridge1 address-families=vpnv4
#buat table routing tambahan menggunakan vrf bedakan untuk customer A dan B serta interface yang menuju ke masing-masing customer
[admin@R1] > ip route vrf add export-route-targets=123:1 import-route-targets=123:1 interfaces=ether2 route-distinguisher=123:1 routing-mark=vrf1
[admin@R1] > ip route vrf add export-route-targets=123:2 import-route-targets=123:2 interfaces=ether3 route-distinguisher=123:2 routing-mark=vrf2
#buat BGP instance vrf untuk routing tabel vrf
[admin@R1] > routing bgp instance vrf add redistribute-connected=yes routing-mark=vrf1
[admin@R1] > routing bgp instance vrf add redistribute-connected=yes routing-mark=vrf2
Konfigurasi R2 (P)[admin@MikroTik] > system identity set name=R1
[admin@R1] > interface bridge add name=bridge1
[admin@R1] > ip address add address=1.1.1.1/32 interface=bridge1
[admin@R1] > ip address add address=12.12.12.1/23 interface=ether1
[admin@R1] > ip address add address=14.14.14.1/23 interface=ether2
[admin@R1] > ip address add address=15.15.15.1/23 interface=ether3
#routing iBGP menggunakan RIP network ke customer tidak perlu di advertise
[admin@R1] > routing rip network add network=1.1.1.1/32
[admin@R1] > routing rip network add network=12.12.12.0/24
#setting MPLS, karena BGP L3VPN tidak dapat berjalan tanpa ada MPLS
[admin@R1] > mpls ldp set enabled=yes lsr-id=1.1.1.1 transport-address=1.1.1.1
[admin@R1] > mpls ldp interface add interface=ether1
#setting iBGP jadikan R2 sebagai route reflector disini BGP berfungsi untuk distribusi routing table vrf, BGP disetting dengan address-families=vpnv4
[admin@R1] > routing bgp instance set default as=123
[admin@R1] > routing bgp peer add name=peer1 remote-address=2.2.2.2 remote-as=123 update-source=bridge1 address-families=vpnv4
#buat table routing tambahan menggunakan vrf bedakan untuk customer A dan B serta interface yang menuju ke masing-masing customer
[admin@R1] > ip route vrf add export-route-targets=123:1 import-route-targets=123:1 interfaces=ether2 route-distinguisher=123:1 routing-mark=vrf1
[admin@R1] > ip route vrf add export-route-targets=123:2 import-route-targets=123:2 interfaces=ether3 route-distinguisher=123:2 routing-mark=vrf2
#buat BGP instance vrf untuk routing tabel vrf
[admin@R1] > routing bgp instance vrf add redistribute-connected=yes routing-mark=vrf1
[admin@R1] > routing bgp instance vrf add redistribute-connected=yes routing-mark=vrf2
[admin@MikroTik] > system identity set name=R2
[admin@R2] > interface bridge add name=bridge1
[admin@R2] > ip address add address=2.2.2.2/32 interface=bridge1
[admin@R2] > ip address add address=12.12.12.2/24 interface=ether1
[admin@R2] > ip address add address=23.23.23.2/24 interface=ether2
[admin@R2] > routing rip network add network=12.12.12.0/24
[admin@R2] > routing rip network add network=23.23.23.0/24
[admin@R2] > routing rip network add network=2.2.2.2/32
[admin@R2] > mpls ldp set enabled=yes lsr-id=2.2.2.2 transport-address=2.2.2.2
[admin@R2] > mpls ldp interface add interface=ether1
[admin@R2] > mpls ldp interface add interface=ether2
[admin@R2] > routing bgp peer add name=peer1 remote-address=1.1.1.1 remote-as=123 route-reflect=yes update-source=bridge1 address-families=vpnv4
[admin@R2] > routing bgp peer add name=peer1 remote-address=3.3.3.3 remote-as=123 route-reflect=yes update-source=bridge1 address-families=vpnv4
Konfigurasi R3[admin@R2] > interface bridge add name=bridge1
[admin@R2] > ip address add address=2.2.2.2/32 interface=bridge1
[admin@R2] > ip address add address=12.12.12.2/24 interface=ether1
[admin@R2] > ip address add address=23.23.23.2/24 interface=ether2
[admin@R2] > routing rip network add network=12.12.12.0/24
[admin@R2] > routing rip network add network=23.23.23.0/24
[admin@R2] > routing rip network add network=2.2.2.2/32
[admin@R2] > mpls ldp set enabled=yes lsr-id=2.2.2.2 transport-address=2.2.2.2
[admin@R2] > mpls ldp interface add interface=ether1
[admin@R2] > mpls ldp interface add interface=ether2
[admin@R2] > routing bgp peer add name=peer1 remote-address=1.1.1.1 remote-as=123 route-reflect=yes update-source=bridge1 address-families=vpnv4
[admin@R2] > routing bgp peer add name=peer1 remote-address=3.3.3.3 remote-as=123 route-reflect=yes update-source=bridge1 address-families=vpnv4
[admin@MikroTik] > system identity set name=R3
[admin@R3] > interface bridge add name=bridge1
[admin@R3] > ip address add address=3.3.3.3/32 interface=bridge1
[admin@R3] > ip address add address=23.23.23.3/24 interface=ether1
[admin@R3] > ip address add address=36.36.36.3/24 interface=ether2
[admin@R3] > ip address add address=37.37.37.3/24 interface=ether3
[admin@R3] > routing rip network add network=3.3.3.3/32
[admin@R3] > routing rip network add network=23.23.23.0/24
[admin@R3] > mpls ldp set enabled=yes lsr-id=3.3.3.3 transport-address=3.3.3.3
[admin@R3] > mpls ldp interface add interface=ether1
[admin@R3] > routing bgp instance set default as=123
[admin@R3] > routing bgp peer add name=peer1 remote-address=2.2.2.2 remote-as=123 update-source=bridge1 address-families=vpnv4
[admin@R3] > ip route vrf add export-route-targets=123:1 import-route-targets=123:1 interfaces=ether2 route-distinguisher=123:1 routing-mark=vrf1
[admin@R3] > ip route vrf add export-route-targets=123:2 import-route-targets=123:2 interfaces=ether3 route-distinguisher=123:2 routing-mark=vrf2
[admin@R3] > routing bgp instance vrf add redistribute-connected=yes routing-mark=vrf1
[admin@R3] > routing bgp instance vrf add redistribute-connected=yes routing-mark=vrf2
Konfiguras router CE[admin@R3] > interface bridge add name=bridge1
[admin@R3] > ip address add address=3.3.3.3/32 interface=bridge1
[admin@R3] > ip address add address=23.23.23.3/24 interface=ether1
[admin@R3] > ip address add address=36.36.36.3/24 interface=ether2
[admin@R3] > ip address add address=37.37.37.3/24 interface=ether3
[admin@R3] > routing rip network add network=3.3.3.3/32
[admin@R3] > routing rip network add network=23.23.23.0/24
[admin@R3] > mpls ldp set enabled=yes lsr-id=3.3.3.3 transport-address=3.3.3.3
[admin@R3] > mpls ldp interface add interface=ether1
[admin@R3] > routing bgp instance set default as=123
[admin@R3] > routing bgp peer add name=peer1 remote-address=2.2.2.2 remote-as=123 update-source=bridge1 address-families=vpnv4
[admin@R3] > ip route vrf add export-route-targets=123:1 import-route-targets=123:1 interfaces=ether2 route-distinguisher=123:1 routing-mark=vrf1
[admin@R3] > ip route vrf add export-route-targets=123:2 import-route-targets=123:2 interfaces=ether3 route-distinguisher=123:2 routing-mark=vrf2
[admin@R3] > routing bgp instance vrf add redistribute-connected=yes routing-mark=vrf1
[admin@R3] > routing bgp instance vrf add redistribute-connected=yes routing-mark=vrf2
Disini router CE dapat menggunakan routing protokol jenis apapun untuk berkomunikasi dengan CE di tempat yang berbeda.
Setting R4 (CE=Customer A)
Disini kita hanya menambahkan ip dan static route untuk default gateway
[admin@MikroTik] > system identity set name=R4
[admin@R4] > ip address add address=14.14.14.4/24 interface=ether1
[admin@R4] > ip route add gateway=14.14.14.1
Setting R5 (CE=Customer B)[admin@R4] > ip address add address=14.14.14.4/24 interface=ether1
[admin@R4] > ip route add gateway=14.14.14.1
[admin@MikroTik] > system identity set name=R5
[admin@R5] > ip address add address=15.15.15.5/24 interface=ether1
[admin@R5] > ip route add gateway=15.15.15.1
Setting R6 (CE=Customer B ditempat lain)[admin@R5] > ip address add address=15.15.15.5/24 interface=ether1
[admin@R5] > ip route add gateway=15.15.15.1
[admin@MikroTik] > system identity set name=R6
[admin@R6] > ip address add address=37.37.37.6/24 interface=ether1
[admin@R6] > ip route add gateway=37.37.37.3
Setting R7 (CE=Customer A)[admin@R6] > ip address add address=37.37.37.6/24 interface=ether1
[admin@R6] > ip route add gateway=37.37.37.3
[admin@MikroTik] > system identity set name=R7
[admin@R7] > ip address add address=36.36.36.7/24 interface=ether1
[admin@R7] > ip route add gateway=36.36.36.3
Silahkan ping loopback R1,R2 dan R3, cek iBGP pastikan status sudah established.Alhamdulillah postingan kali ini telah selesai, jika artikel ini terasa bermanfaat silahkan bisa di share dengan menekan salah satu button dibawah ini.[admin@R7] > ip address add address=36.36.36.7/24 interface=ether1
[admin@R7] > ip route add gateway=36.36.36.3
Wassalamu'alaikum ...
0 Komentar
Penulisan markup di komentar