Hari Kedua : RIP
****************************************************
- Lab 1 RIP Authentication
- LAB 2 RIP Split Horizon
- LAB 3 Route Summarization
- LAB 4 RIP CONVERGENCE Timers
- LAB 5 RIP – mindah Jalur – offset List
- Lab 6 RIP FILTERING – Standard Access list
- LAB 7 RIP – FILTERING – ADMINISTRATIVE DISTANCE
- LAB 8 RIP – Filtering – Offset list
- LAB 9 . RIP Unicast UPDATE
- LAB 10 RIP – BROADCAST UPDATE
- LAB 11 RIP Default Route – Default Information Originate
- LAB 12 RIP Default Route – Redistribute Static Route
- LAB 13 RIP Rdistribute Static
- LAB 14 RIP Redistribute Connected
- LAB 15 RIP Redistribute EIGRP
****************************************************
Lab 1 RIP Authentication
Skenario :
authentikasi di tiap tiap router untuk membentuk network yang berbeda2 di tiap Router
R1 ke R2 : MD5 lewat Serial
R1 k R3 : tanpa authentkasi lewat Ethernet
R2 ke R3 : authentikasi clear text
Note :
Key chain ( penanda ) dengan nama RIP dan password string-nya adalah CISCO
VERIFIKASI
Verifikasi Di R2 (MD5) dan R3 (clear text)
#debug ip rip
R2#
*Mar 1 00:22:34.759: RIP: received packet with MD5 authentication
*Mar 1 00:22:34.763: RIP: received v2 update from 12.12.12.1 on Serial0/0
*Mar 1 00:22:34.763: 1.1.1.1/32 via 0.0.0.0 in 1 hops
*Mar 1 00:22:34.763: 3.3.3.3/32 via 0.0.0.0 in 2 hops
*Mar 1 00:22:34.763: 13.13.13.0/24 via 0.0.0.0 in 1 hops
Clear text
R3#debug ip rip
*Mar 1 00:23:48.199: RIP: received packet with text authentication CISCO
*Mar 1 00:23:48.199: RIP: received v2 update from 23.23.23.2 on FastEthernet0/1
*Mar 1 00:23:48.203: 1.1.1.1/32 via 0.0.0.0 in 2 hops
*Mar 1 00:23:48.203: 2.2.2.2/32 via 0.0.0.0 in 1 hops
*Mar 1 00:23:48.203: 12.12.12.0/24 via 0.0.0.0 in 1 hops
Routing table
R1#sh ip route
…
R 2.2.2.2 [120/1] via 12.12.12.2, 00:00:14, Serial0/0
3.0.0.0/32 is subnetted, 1 subnets
R 3.3.3.3 [120/1] via 13.13.13.3, 00:00:20, FastEthernet0/0
23.0.0.0/24 is subnetted, 1 subnets
R 23.23.23.0 [120/1] via 13.13.13.3, 00:00:20, FastEthernet0/0
[120/1] via 12.12.12.2, 00:00:14, Serial0/0
12.0.0.0/24 is subnetted, 1 subnets
…
R1
R1#sh run int s0/0
Building configuration…
Current configuration : 153 bytes
!
interface Serial0/0
ip address 12.12.12.1 255.255.255.0
ip rip authentication mode md5
ip rip authentication key-chain RIP
clock rate 2000000
end
R1#sh run int f0/0
Building configuration…
Current configuration : 95 bytes
!
interface FastEthernet0/0
ip address 13.13.13.1 255.255.255.0
duplex auto
speed auto
end
R1#sh run | s key chain
key chain RIP
key 1
key-string CISCO
R1#sh run | s rip
ip rip authentication mode md5
ip rip authentication key-chain RIP
router rip
version 2
network 0.0.0.0
no auto-summary
R1#ping 3.3.3.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 3.3.3.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 32/64/88 ms
R1#ping 2.2.2.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/79/148 ms
R2
R2#sh run int s0/0
Building configuration…
Current configuration : 153 bytes
!
interface Serial0/0
ip address 12.12.12.2 255.255.255.0
ip rip authentication mode md5
ip rip authentication key-chain RIP
clock rate 2000000
end
R2#sh run int f0/0
Building configuration…
Current configuration : 132 bytes
!
interface FastEthernet0/0
ip address 23.23.23.2 255.255.255.0
ip rip authentication key-chain RIP
duplex auto
speed auto
end
R2#sh run | s key chain
key chain RIP
key 1
key-string CISCO
R2#sh run | s rip
ip rip authentication key-chain RIP
ip rip authentication mode md5
ip rip authentication key-chain RIP
router rip
version 2
network 0.0.0.0
no auto-summary
R3
R3#sh run int f0/0
Building configuration…
Current configuration : 95 bytes
!
interface FastEthernet0/0
ip address 13.13.13.3 255.255.255.0
duplex auto
speed auto
end
R3#sh run int f0/1
Building configuration…
Current configuration : 132 bytes
!
interface FastEthernet0/1
ip address 23.23.23.3 255.255.255.0
ip rip authentication key-chain RIP
duplex auto
speed auto
end
R3#sh run | s key chain
key chain RIP
key 1
key-string CISCO
R3#sh run | s rip
ip rip authentication key-chain RIP
router rip
version 2
network 0.0.0.0
no auto-summary
VERIFIKASI
Verifikasi Di R2 (MD5) dan R3 (clear text)
#debug ip rip
R2#
*Mar 1 00:22:34.759: RIP: received packet with MD5 authentication
*Mar 1 00:22:34.763: RIP: received v2 update from 12.12.12.1 on Serial0/0
*Mar 1 00:22:34.763: 1.1.1.1/32 via 0.0.0.0 in 1 hops
*Mar 1 00:22:34.763: 3.3.3.3/32 via 0.0.0.0 in 2 hops
*Mar 1 00:22:34.763: 13.13.13.0/24 via 0.0.0.0 in 1 hops
Clear text
R3#debug ip rip
*Mar 1 00:23:48.199: RIP: received packet with text authentication CISCO
*Mar 1 00:23:48.199: RIP: received v2 update from 23.23.23.2 on FastEthernet0/1
*Mar 1 00:23:48.203: 1.1.1.1/32 via 0.0.0.0 in 2 hops
*Mar 1 00:23:48.203: 2.2.2.2/32 via 0.0.0.0 in 1 hops
*Mar 1 00:23:48.203: 12.12.12.0/24 via 0.0.0.0 in 1 hops
Routing table
R1#sh ip route
…
R 2.2.2.2 [120/1] via 12.12.12.2, 00:00:14, Serial0/0
3.0.0.0/32 is subnetted, 1 subnets
R 3.3.3.3 [120/1] via 13.13.13.3, 00:00:20, FastEthernet0/0
23.0.0.0/24 is subnetted, 1 subnets
R 23.23.23.0 [120/1] via 13.13.13.3, 00:00:20, FastEthernet0/0
[120/1] via 12.12.12.2, 00:00:14, Serial0/0
12.0.0.0/24 is subnetted, 1 subnets
…
*****************************************************
LAB 2 RIP Split Horizon
Skenario : menjalankan RIP pada kondisi split Horizon , issu epada split horizon adalah router tidak mengirimkan kembali informasi yang di dapat dari satu interface ke interface asal informasi tersebut.
Seperti pada topologi, akan beraakibat, R2 dan R3 tidak akan mendapat update informasi routing RIP karena pada R1 dianggap informasi berasal dari interface yang sama, sehingga tidak di kembalikan.
Note :
Command untuk disable split horizon : ‘no ip split-horizon’ under interface konfig, dalam hal ini s0/0.123
Verifikasi
Sebelum disable split horizon :
R1(config-subif)#do sh ip int s0/0.123 | i Split
Split horizon is enabled
–
R3#ping 1.1.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/68/136 ms
R3#ping 2.2.2.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds:
…..
Success rate is 0 percent (0/5)
R1
R1(config-subif)#do sh run int s0/0.123
interface Serial0/0.123 multipoint
ip address 123.123.123.1 255.255.255.0
no ip split-horizon !! awalnya tidak ditambahkan
snmp trap link-status
frame-relay map ip 123.123.123.3 103 broadcast
frame-relay map ip 123.123.123.2 102 broadcast
interface Serial0/0
no ip address
encapsulation frame-relay
clock rate 2000000
end
R1#sh run | s router rip
router rip
network 0.0.0.0
!
interface Loopback0
ip address 1.1.1.1 255.255.255.255
end
R2
interface Loopback0
ip address 2.2.2.2 255.255.255.255
end
R2#sh run int s0/0
Building configuration…
Current configuration : 200 bytes
interface Serial0/0
ip address 123.123.123.2 255.255.255.0
encapsulation frame-relay
clock rate 2000000
frame-relay map ip 123.123.123.1 201 broadcast
frame-relay map ip 123.123.123.3 201
end
R2#sh run | s router rip
router rip
network 0.0.0.0
R3
interface Loopback0
ip address 3.3.3.3 255.255.255.255
end
R3#sh run int s0/0
Building configuration…
Current configuration : 200 bytes
!
interface Serial0/0
ip address 123.123.123.3 255.255.255.0
encapsulation frame-relay
clock rate 2000000
frame-relay map ip 123.123.123.1 301 broadcast
frame-relay map ip 123.123.123.2 301
end
R3#sh run | s rip
router rip
network 0.0.0.0
FRSW :
interface Serial0/0
no ip address
encapsulation frame-relay
clock rate 2000000
frame-relay lmi-type cisco
frame-relay intf-type dce
frame-relay route 102 interface Serial0/1 201
frame-relay route 103 interface Serial0/2 301
interface Serial0/1
no ip address
encapsulation frame-relay
clock rate 2000000
frame-relay lmi-type cisco
frame-relay intf-type dce
frame-relay route 201 interface Serial0/0 102
interface Serial0/2
no ip address
encapsulation frame-relay
clock rate 2000000
frame-relay lmi-type cisco
frame-relay intf-type dce
frame-relay route 301 interface Serial0/0 103
***************************************************
LAB 3 Route Summarization
Skenario: Merangkum daftar routing tabel
Note :
Command untuk summarization:
R1(config-if)#ip summary-address rip 10.0.0.0 255.0.0.0
R1(config-if)#ip summary-address rip 11.0.0.0 255.0.0.0
Verifikasi :
(setelah di summary)
R2#sh ip route rip
1.0.0.0/32 is subnetted, 1 subnets
R 1.1.1.1 [120/1] via 12.12.12.1, 00:00:20, Serial0/0
3.0.0.0/32 is subnetted, 1 subnets
R 3.3.3.3 [120/1] via 23.23.23.3, 00:00:14, FastEthernet0/0
R 10.0.0.0/8 [120/1] via 12.12.12.1, 00:00:20, Serial0/0
R 11.0.0.0/8 [120/1] via 12.12.12.1, 00:00:20, Serial0/0
12.0.0.0/8 is variably subnetted, 5 subnets, 2 masks
R 12.0.0.4/32 [120/1] via 12.12.12.1, 00:00:20, Serial0/0
R 12.0.0.1/32 [120/1] via 12.12.12.1, 00:00:20, Serial0/0
R 12.0.0.2/32 [120/1] via 12.12.12.1, 00:00:20, Serial0/0
R 12.0.0.3/32 [120/1] via 12.12.12.1, 00:00:20, Serial0/0
R1
interface Loopback0
ip address 1.1.1.1 255.255.255.255
interface Loopback10
ip address 10.0.0.1 255.255.255.0
interface Loopback11
ip address 10.0.1.1 255.255.255.0
interface Loopback12
ip address 10.0.2.1 255.255.255.0
interface Loopback13
ip address 10.0.3.1 255.255.255.0
interface Loopback14
ip address 10.4.0.1 255.255.255.0
interface Loopback15
ip address 10.5.0.1 255.255.255.0
interface Loopback16
ip address 10.6.0.1 255.255.255.0
interface Loopback17
ip address 10.7.0.1 255.255.255.0
interface Loopback18
ip address 10.8.0.1 255.255.255.0
interface Loopback20
ip address 11.0.0.1 255.255.255.0
interface Loopback21
ip address 11.0.1.1 255.255.255.0
interface Loopback22
ip address 11.0.2.1 255.255.255.0
interface Loopback23
ip address 11.0.3.1 255.255.255.0
interface Loopback24
ip address 11.0.4.1 255.255.255.0
interface Loopback31
ip address 12.0.0.1 255.255.255.255
interface Loopback32
ip address 12.0.0.2 255.255.255.255
interface Loopback33
ip address 12.0.0.3 255.255.255.255
interface Loopback34
ip address 12.0.0.4 255.255.255.255
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
interface Serial0/0
ip address 12.12.12.1 255.255.255.0
clock rate 2000000
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
interface Serial0/1
no ip address
shutdown
clock rate 2000000
router rip
version 2
network 1.0.0.0
network 10.0.0.0
network 11.0.0.0
network 12.0.0.0
no auto-summary
R2
interface Loopback0
ip address 2.2.2.2 255.255.255.255
interface FastEthernet0/0
ip address 23.23.23.2 255.255.255.0
duplex auto
speed auto
interface Serial0/0
ip address 12.12.12.2 255.255.255.0
clock rate 2000000
router rip
version 2
network 2.0.0.0
network 12.0.0.0
no auto-summary
R3
interface FastEthernet0/0
ip address 23.23.23.3 255.255.255.0
interface Loopback0
ip address 3.3.3.3 255.255.255.255
R3(config-router)#do sh run | s router
router rip
version 2
network 3.0.0.0
network 23.0.0.0
no auto-summary
R3(config-router)#
Verifikasi ( sebelum dilakukan summarization)
R2#sh ip route rip
1.0.0.0/32 is subnetted, 1 subnets
R 1.1.1.1 [120/1] via 12.12.12.1, 00:00:18, Serial0/0
3.0.0.0/32 is subnetted, 1 subnets
R 3.3.3.3 [120/1] via 23.23.23.3, 00:00:18, FastEthernet0/0
10.0.0.0/24 is subnetted, 9 subnets
R 10.8.0.0 [120/1] via 12.12.12.1, 00:00:18, Serial0/0
R 10.0.2.0 [120/1] via 12.12.12.1, 00:00:18, Serial0/0
R 10.0.3.0 [120/1] via 12.12.12.1, 00:00:18, Serial0/0
R 10.0.0.0 [120/1] via 12.12.12.1, 00:00:18, Serial0/0
R 10.0.1.0 [120/1] via 12.12.12.1, 00:00:18, Serial0/0
R 10.6.0.0 [120/1] via 12.12.12.1, 00:00:18, Serial0/0
R 10.7.0.0 [120/1] via 12.12.12.1, 00:00:18, Serial0/0
R 10.4.0.0 [120/1] via 12.12.12.1, 00:00:18, Serial0/0
R 10.5.0.0 [120/1] via 12.12.12.1, 00:00:18, Serial0/0
11.0.0.0/24 is subnetted, 5 subnets
R 11.0.3.0 [120/1] via 12.12.12.1, 00:00:18, Serial0/0
R 11.0.2.0 [120/1] via 12.12.12.1, 00:00:18, Serial0/0
R 11.0.1.0 [120/1] via 12.12.12.1, 00:00:18, Serial0/0
R 11.0.0.0 [120/1] via 12.12.12.1, 00:00:18, Serial0/0
R 11.0.4.0 [120/1] via 12.12.12.1, 00:00:18, Serial0/0
12.0.0.0/8 is variably subnetted, 5 subnets, 2 masks
R 12.0.0.4/32 [120/1] via 12.12.12.1, 00:00:18, Serial0/0
R 12.0.0.1/32 [120/1] via 12.12.12.1, 00:00:18, Serial0/0
R 12.0.0.2/32 [120/1] via 12.12.12.1, 00:00:19, Serial0/0
R 12.0.0.3/32 [120/1] via 12.12.12.1, 00:00:19, Serial0/0
R3#sh ip route rip
1.0.0.0/32 is subnetted, 1 subnets
R 1.1.1.1 [120/2] via 23.23.23.2, 00:00:24, FastEthernet0/0
2.0.0.0/32 is subnetted, 1 subnets
R 2.2.2.2 [120/1] via 23.23.23.2, 00:00:24, FastEthernet0/0
10.0.0.0/24 is subnetted, 9 subnets
R 10.8.0.0 [120/2] via 23.23.23.2, 00:00:00, FastEthernet0/0
R 10.0.2.0 [120/2] via 23.23.23.2, 00:00:00, FastEthernet0/0
R 10.0.3.0 [120/2] via 23.23.23.2, 00:00:00, FastEthernet0/0
R 10.0.0.0 [120/2] via 23.23.23.2, 00:00:00, FastEthernet0/0
R 10.0.1.0 [120/2] via 23.23.23.2, 00:00:00, FastEthernet0/0
R 10.6.0.0 [120/2] via 23.23.23.2, 00:00:00, FastEthernet0/0
R 10.7.0.0 [120/2] via 23.23.23.2, 00:00:00, FastEthernet0/0
R 10.4.0.0 [120/2] via 23.23.23.2, 00:00:00, FastEthernet0/0
R 10.5.0.0 [120/2] via 23.23.23.2, 00:00:00, FastEthernet0/0
11.0.0.0/24 is subnetted, 5 subnets
R 11.0.3.0 [120/2] via 23.23.23.2, 00:00:00, FastEthernet0/0
R 11.0.2.0 [120/2] via 23.23.23.2, 00:00:00, FastEthernet0/0
R 11.0.1.0 [120/2] via 23.23.23.2, 00:00:00, FastEthernet0/0
R 11.0.0.0 [120/2] via 23.23.23.2, 00:00:00, FastEthernet0/0
R 11.0.4.0 [120/2] via 23.23.23.2, 00:00:00, FastEthernet0/0
12.0.0.0/8 is variably subnetted, 5 subnets, 2 masks
R 12.0.0.4/32 [120/2] via 23.23.23.2, 00:00:00, FastEthernet0/0
R 12.12.12.0/24 [120/1] via 23.23.23.2, 00:00:00, FastEthernet0/0
R 12.0.0.1/32 [120/2] via 23.23.23.2, 00:00:17, FastEthernet0/0
R 12.0.0.2/32 [120/2] via 23.23.23.2, 00:00:17, FastEthernet0/0
R 12.0.0.3/32 [120/2] via 23.23.23.2, 00:00:17, FastEthernet0/0
Command SUMMARIZATION
R1(config-if)#ip summary-address rip 10.0.0.0 255.0.0.0
R1(config-if)#ip summary-address rip 11.0.0.0 255.0.0.0
Verifikasi setelh proses summarize:
R3(config)#do sh ip route
Codes: C – connected, S – static, R – RIP, M – mobile, B – BGP
D – EIGRP, EX – EIGRP external, O – OSPF, IA – OSPF inter area
N1 – OSPF NSSA external type 1, N2 – OSPF NSSA external type 2
E1 – OSPF external type 1, E2 – OSPF external type 2
i – IS-IS, su – IS-IS summary, L1 – IS-IS level-1, L2 – IS-IS level-2
ia – IS-IS inter area, * – candidate default, U – per-user static route
o – ODR, P – periodic downloaded static route
Gateway of last resort is not set
1.0.0.0/32 is subnetted, 1 subnets
R 1.1.1.1 [120/2] via 23.23.23.2, 00:00:17, FastEthernet0/0
2.0.0.0/32 is subnetted, 1 subnets
R 2.2.2.2 [120/1] via 23.23.23.2, 00:00:17, FastEthernet0/0
3.0.0.0/32 is subnetted, 1 subnets
C 3.3.3.3 is directly connected, Loopback0
23.0.0.0/24 is subnetted, 1 subnets
C 23.23.23.0 is directly connected, FastEthernet0/0
10.0.0.0/8 is subnetted, 1 subnets
R 10.0.0.0 [120/2] via 23.23.23.2, 00:00:17, FastEthernet0/0
11.0.0.0/8 is subnetted, 1 subnets
R 11.0.0.0 [120/2] via 23.23.23.2, 00:00:17, FastEthernet0/0
12.0.0.0/8 is variably subnetted, 5 subnets, 2 masks
R 12.0.0.4/32 [120/2] via 23.23.23.2, 00:00:19, FastEthernet0/0
R 12.12.12.0/24 [120/1] via 23.23.23.2, 00:00:19, FastEthernet0/0
R 12.0.0.1/32 [120/2] via 23.23.23.2, 00:00:19, FastEthernet0/0
R 12.0.0.2/32 [120/2] via 23.23.23.2, 00:00:19, FastEthernet0/0
R 12.0.0.3/32 [120/2] via 23.23.23.2, 00:00:19, FastEthernet0/0
LAB 4 RIP CONVERGENCE Timers
Skenario :
Tunning update times , mengubah waktu update R1 dan R2 menjadi 10 detik sedangkan R3 tetap bernilai default 30 detik
Note :
Nilai default untuk RIP : RIP update 30 detik , hold time 180 detik , flush 240 detik.
Command-ny a adalah : timers basic [interval-update] [invalid] [hold-time] [flush_time] dibawah routing konfigurasi
R1 & R2
Router rip
Timers basic 10.60.60.80
R3
Dibawah konfigurasi interface
Ip rip advertise 30
R1#sh ip proto
Routing Protocol is “rip”
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Sending updates every 30 seconds, next due in 28 seconds
Invalid after 180 seconds, hold down 180, flushed after 240
Verifikasi :
R3 ( masih default 30 )
Routing Protocol is “rip”
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Sending updates every 30 seconds, next due in 18 seconds
Invalid after 180 seconds, hold down 180, flushed after 240
R1 dan R2
R2(config-router)#do sh ip proto
Routing Protocol is “rip”
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Sending updates every 10 seconds, next due in 5 seconds
Invalid after 60 seconds, hold down 60, flushed after 80
*************************************************************
LAB 5 RIP – mindah Jalur – offset List
(memakai Topologi LAB 1 RIP Authentication)
Skenario : Path manipulation dengan menggunakn offset list ( ubah nilai hop ) sesuai yang diinginkan
Note : nilai maksimum 15 , 16 berarti unreachable
Untuk Menuju Lo R1 , secarad default R2 akan mencari Hop terpendek yaitu via serial 0/0
R2#sh ip route 1.1.1.1
Routing entry for 1.1.1.1/32
Known via “rip”, distance 120, metric 1
Redistributing via rip
Last update from 12.12.12.1 on Serial0/0, 00:00:17 ago
Routing Descriptor Blocks:
* 12.12.12.1, from 12.12.12.1, 00:00:17 ago, via Serial0/0
Route metric is 1, traffic share count is 1
R2#traceroute 1.1.1.1
Type escape sequence to abort.
Tracing the route to 1.1.1.1
1 12.12.12.1 64 msec * 72 msec
Diinginkan untuk menuju lo R1 dari R2 melalui jalur Ethernet, maka bias dengan mengubah hop menjadi lebih dari 2 .dalam hal ini 5 :
R1(config-router)#offset-list ?
<0-99> Access list of networks to apply offset (0 selects all networks)
<1300-1999> Access list of networks to apply offset (expanded range)
WORD Access-list name
R1(config-router)#offset-list 0 out 5 s0/0
Verifikasi :
R2#ping 1.1.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 36/71/124 ms
R2#sh ip route 1.1.1.1
Routing entry for 1.1.1.1/32
Known via “rip”, distance 120, metric 2
Redistributing via rip
Last update from 23.23.23.3 on FastEthernet0/0, 00:00:13 ago
Routing Descriptor Blocks:
* 23.23.23.3, from 23.23.23.3, 00:00:13 ago, via FastEthernet0/0
Route metric is 2, traffic share count is 1
R2#trace 1.1.1.1
Type escape sequence to abort.
Tracing the route to 1.1.1.1
1 23.23.23.3 96 msec 72 msec 20 msec
2 13.13.13.1 48 msec * 140 msec
*************************************************************
Lab 6 RIP FILTERING – Standard Access list
Skenario : memfilter ip yang akan dilewakan dengan menggunakan access-list
Note :
Genap saja (di bit terakhir) : access-list 1 permit 0.0.0.0 255.255.255.254
Ganji;l saja (di bit terakhir) : access-list 1 permit 0.0.0.1 255.255.255.254
R2
interface Serial0/0
ip address 12.12.12.2 255.255.255.0
clock rate 2000000
R2#sh run int f0/0
interface FastEthernet0/0
ip address 23.23.23.2 255.255.255.0
duplex auto
speed auto
end
R2#sh run | s rip
router rip
version 2
network 12.0.0.0
network 23.0.0.0
distribute-list 1 in Serial0/0 !!
no auto-summary
access-list 1 permit 0.0.0.0 255.255.255.254 !!!
R1
interface Loopback1
ip address 10.0.0.1 255.255.255.255
interface Loopback2
ip address 10.0.0.2 255.255.255.255
interface Loopback3
ip address 10.0.0.3 255.255.255.255
interface Loopback4
ip address 10.0.0.4 255.255.255.255
interface Loopback5
ip address 10.0.0.5 255.255.255.255
interface Loopback6
ip address 10.0.0.6 255.255.255.255
interface Serial0/0
ip address 12.12.12.1 255.255.255.0
clock rate 2000000
router rip
version 2
network 10.0.0.0
network 12.0.0.0
no auto-summary
R3
interface FastEthernet0/0
ip address 23.23.23.3 255.255.255.0
router rip
version 2
network 23.0.0.0
no auto-summary
Sebelum diterapkan !!—
R3#sh ip route
23.0.0.0/24 is subnetted, 1 subnets
C 23.23.23.0 is directly connected, FastEthernet0/0
10.0.0.0/32 is subnetted, 6 subnets
R 10.0.0.2 [120/2] via 23.23.23.2, 00:00:04, FastEthernet0/0
R 10.0.0.3 [120/2] via 23.23.23.2, 00:00:04, FastEthernet0/0
R 10.0.0.1 [120/2] via 23.23.23.2, 00:00:04, FastEthernet0/0
R 10.0.0.6 [120/2] via 23.23.23.2, 00:00:04, FastEthernet0/0
R 10.0.0.4 [120/2] via 23.23.23.2, 00:00:04, FastEthernet0/0
R 10.0.0.5 [120/2] via 23.23.23.2, 00:00:04, FastEthernet0/0
12.0.0.0/24 is subnetted, 1 subnets
R 12.12.12.0 [120/1] via 23.23.23.2, 00:00:04, FastEthernet0/0
R3#ping 10.0.0.5
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.0.5, timeout is 2 seconds:
.!!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 8/56/132 ms
R2(config)#access-list 1 permit 0.0.0.0 255.255.255.254
R2(config)#!!!! hanya yang genap yang boleh lewat !!
R2(config)#router rip
R2(config-router)#distribute-list 1 in s0/0
Verifikasi :
R3#clear ip route *
R3#sh ip route
23.0.0.0/24 is subnetted, 1 subnets
C 23.23.23.0 is directly connected, FastEthernet0/0
10.0.0.0/32 is subnetted, 3 subnets
R 10.0.0.2 [120/2] via 23.23.23.2, 00:00:02, FastEthernet0/0
R 10.0.0.6 [120/2] via 23.23.23.2, 00:00:02, FastEthernet0/0
R 10.0.0.4 [120/2] via 23.23.23.2, 00:00:02, FastEthernet0/0
12.0.0.0/24 is subnetted, 1 subnets
R 12.12.12.0 [120/1] via 23.23.23.2, 00:00:02, FastEthernet0/0
*****************************************************************
LAB 7 RIP – FILTERING – ADMINISTRATIVE DISTANCE
Skenario : Manipulasi nilai AD
Note :
nilai AD 255 sama saja dengan unreachable dan tidak ditambahkan pada routing tabel
R1
interface Serial0/0
ip address 12.12.12.1 255.255.255.0
clock rate 2000000
end
R1#sh run int lo 0
Building configuration…
Current configuration : 63 bytes
!
interface Loopback0
ip address 1.1.1.1 255.255.255.255
end
R1#sh run | s rip
router rip
version 2
network 1.0.0.0
network 10.0.0.0
network 12.0.0.0
no auto-summary
R2
R2#sh run int f0/0
Building configuration…
Current configuration : 95 bytes
!
interface FastEthernet0/0
ip address 23.23.23.2 255.255.255.0
duplex auto
speed auto
end
R2#sh run int lo 0
Building configuration…
Current configuration : 63 bytes
!
interface Loopback0
ip address 2.2.2.2 255.255.255.255
end
R2#sh run | s rip
router rip
version 2
network 2.0.0.0
network 12.0.0.0
network 23.0.0.0
no auto-summary
R3
interface Loopback0
ip address 3.3.3.3 255.255.255.255
end
R3#sh run int f0/0
Building configuration…
Current configuration : 95 bytes
!
interface FastEthernet0/0
ip address 23.23.23.3 255.255.255.0
duplex auto
speed auto
end
R3#sh run | s rip
router rip
version 2
network 3.0.0.0
network 23.0.0.0
no auto-summary
Kondisi Default :
R1#ping 3.3.3.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 3.3.3.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 12/52/84 ms
R1#sh ip route 3.3.3.3
Routing entry for 3.3.3.3/32
Known via “rip”, distance 120, metric 2
Redistributing via rip
Last update from 12.12.12.2 on Serial0/0, 00:00:25 ago
Routing Descriptor Blocks:
* 12.12.12.2, from 12.12.12.2, 00:00:25 ago, via Serial0/0
Route metric is 2, traffic share count is 1
R1#ping 3.3.3.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 3.3.3.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/52/112 ms
Manipulasi AD dan Verifikasi
R1#conf t
R1(config)#access-list 1 permit host 3.3.3.3
R1(config)#router rip
R1(config-router)#distance 255 0.0.0.0 255.255.255.255 1
R1(config-router)#do clear ip route *
R1(config-router)#do sh ip route 3.3.3.3
% Network not in table
R1(config-router)#
*********************************************
LAB 8 RIP – Filtering – Offset list
(menggunakan topologi dan konfig sebelumnya)
SKENARIO : Manipulasi nilai Offset dalam hal ini jumlah Hop
Note : nilai offset 16 diartikan inaccessible, maksimum yang diperbolehkan agak masih bias di akses adalah 15.
Mengembalikan konfg sebelumnya agar menjadi default :
R1(config-router)#no distance 255 0.0.0.0 255.255.255.255 1
R1(config-router)#no access-list 1
Setting manipulasi Hop dengan offset list :
Jika di R2
R2(config-router)#offset-list 1 out 16 s0/0
R2(config-router)#access-list 1 permit host 3.3.3.3
Jika di R1
R1(config)#router rip
R1(config-router)#offset-list 1 in 16 s0/0
Verifikasi:
R1#sh ip route 3.3.3.3
% Network not in table
R1#ping 3.3.3.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 3.3.3.3, timeout is 2 seconds:
…..
Success rate is 0 percent (0/5)
**********************************
LAB 9 . RIP Unicast UPDATE
[ Menggunakan Topologi sebelumnya]
Skenario : setting Update routing RIP dengan UNICAST
Note :
RIPV2 default-nya menggunakan Paket Multicast.
Command yang digunakan : passive-interface [interface]
Passsive Interface pada RIP : tidak mengirim tapi tetap menerima update paket.
Command yang digunakan – 1 . neighbor {ip lawan} dan jadikan passive interface.
Sebelum
router rip
version 2
network 2.0.0.0
network 12.0.0.0
network 23.0.0.0
neighbor 23.23.23.3
no auto-summary
sesudah
router rip
version 2
passive-interface Fastethernet0/0
network 2.0.0.0
network 12.0.0.0
network 23.0.0.0
neighbor 23.23.23.3
neighbor 12.12.12.1
no auto-summary
Default capture debug ( ip multicast 224.0.0.9) :
*Mar 1 00:12:21.967: IP: s=23.23.23.2 (local), d=224.0.0.9 (FastEthernet0/0), len 52, sending broad/multicast
*Mar 1 00:12:21.971: UDP src=520, dst=520
R2(config-router)#
*Mar 1 00:12:24.467: IP: s=23.23.23.3 (FastEthernet0/0), d=224.0.0.9, len 52, rcvd 2
*Mar 1 00:12:24.471: UDP src=520, dst=520
Setelah apply Passive-interface dan perintah neighbor 23.23.23.3
*Mar 1 00:11:38.983: ICMP type=8, code=0
*Mar 1 00:11:38.987: IP: tableid=0, s=3.3.3.3 (FastEthernet0/0), d=23.23.23.2 (FastEthernet0/0), routed via RIB
*Mar 1 00:11:38.987: IP: s=3.3.3.3 (FastEthernet0/0), d=23.23.23.2 (FastEthernet0/0), len 100, rcvd 3
***********************************
LAB 10 RIP – BROADCAST UPDATE
Memakai konfig dan topologi sebelumnya :
Skenario :
Mengubah default update packet RIP dari MULTICAST ke Broadcast
Note : command : ip rip v2-broadcast ( dalam konfigurasi routing rip )
R2
R2(config)#int f0/0
R2(config-if)#ip rip v2-broadcast
R3
R3(config)#int f0/0
R3(config-if)#ip rip v2
R3(config-if)#ip rip v2-broadcast
R3(config-if)#do debug ip packet deta
IP packet debugging is on (detailed)
R3(config-if)#
*Mar 1 00:27:07.747: IP: s=23.23.23.2 (FastEthernet0/0), d=255.255.255.255, len 52, rcvd 2
*Mar 1 00:27:07.751: UDP src=520, dst=520
*Mar 1 00:27:08.367: IP: s=23.23.23.3 (local), d=255.255.255.255 (FastEthernet0/0), len 52, sending broad/multicast
*Mar 1 00:27:08.371: UDP src=520, dst=520
*******************************************
LAB 11 RIP Default Route – Default Information Originate
Merupakan salah satu cara mendistribusikan default route ke dalam RIP, cara lainnya adalah dg redistribute static default route dan ip default-network.
Skenario : mendistribusikan default route ke dalam RIP
Note :
Konfigurasi memakai sebelumnya ( dengan menghilangkan passive interface dan broadcast )
Plus penambahan beberapa interface loopback :
interface Loopback1
ip address 33.33.33.1 255.255.255.255
R3#sh run int lo 2
interface Loopback2
ip address 33.33.33.2 255.255.255.255
R3#sh run int lo 3
interface Loopback3
ip address 33.33.33.3 255.255.255.255
R3#sh run | s rip
router rip
version 2
network 3.0.0.0
network 23.0.0.0
no auto-summary
network 33.x.x.x tidak di advertise
R1#ping 33.33.33.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 33.33.33.1, timeout is 2 seconds:
…..
Success rate is 0 percent (0/5)
R1 # sh ip route
Gateway of last resort is not set
1.0.0.0/32 is subnetted, 1 subnets
C 1.1.1.1 is directly connected, Loopback0
3.0.0.0/32 is subnetted, 1 subnets
R 3.3.3.3 [120/2] via 12.12.12.2, 00:00:23, Serial0/0
23.0.0.0/24 is subnetted, 1 subnets
R 23.23.23.0 [120/1] via 12.12.12.2, 00:00:23, Serial0/0
10.0.0.0/32 is subnetted, 6 subnets
C 12.12.12.0 is directly connected, Serial0/0
R* 0.0.0.0/0 [120/2] via 12.12.12.2, 00:00:14, Serial0/0
Penambahan default Route ke dalam RIP :
R3(config)#router rip
R3(config-router)#default-information originate
Verifikasi :
R1#ping 33.33.33.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 33.33.33.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/53/132 ms
R1#sh ip route 33.33.33.1
% Network not in table
*************************
LAB 12 RIP Default Route – Redistribute Static Route
( memakai Konfig sebelumnya )
Skenario : redistribusi static routing ke dalam RIP
R3(config-router)#no default-information originate
R3(config-router)#
R2
R2(config)#ip route 0.0.0.0 0.0.0.0 23.3.23.3
R2(config)#router rip
R2(config-router)#redistribute static
Verifikasi :
Pass
*************************************
LAB 13 RIP Rdistribute Static
Skenario : meredistribute static routing ke dalam RIP
R1 :
R1#sh ip int brief
Interface IP-Address OK? Method Status Protocol
FastEthernet0/0 unassigned YES NVRAM administratively down down
Serial0/0 12.12.12.1 YES NVRAM up up
FastEthernet0/1 unassigned YES NVRAM administratively down down
Serial0/1 unassigned YES NVRAM administratively down down
Loopback0 1.1.1.1 YES NVRAM up up
Loopback1 11.11.11.1 YES NVRAM up up
Loopback2 11.11.11.2 YES NVRAM up up
Loopback3 11.11.11.3 YES NVRAM up up
Loopback4 11.11.11.4 YES NVRAM up up
R1#sh run | s rip
router rip
version 2
network 1.0.0.0
network 12.0.0.0
no auto-summary
Apply
R2
R2(config)#ip route 11.11.11.3 255.255.255.255 12.12.12.1
R2(config)#router rip
R2(config-router)#redistribute static
R2(config-router)#
Verifikasi ( dari R3) :
R3#sh ip route 11.11.11.2
% Subnet not in table
R3#sh ip route 11.11.11.3
Routing entry for 11.11.11.3/32
Known via “rip”, distance 120, metric 1
Redistributing via rip
Last update from 23.23.23.2 on FastEthernet0/0, 00:00:09 ago
Routing Descriptor Blocks:
* 23.23.23.2, from 23.23.23.2, 00:00:09 ago, via FastEthernet0/0
Route metric is 1, traffic share count is 1
R3#sh ip route
1.0.0.0/32 is subnetted, 1 subnets
R 1.1.1.1 [120/2] via 23.23.23.2, 00:00:21, FastEthernet0/0
2.0.0.0/32 is subnetted, 1 subnets
R 2.2.2.2 [120/1] via 23.23.23.2, 00:00:21, FastEthernet0/0
33.0.0.0/32 is subnetted, 3 subnets
C 33.33.33.1 is directly connected, Loopback2
C 33.33.33.3 is directly connected, Loopback3
C 33.33.33.2 is directly connected, Loopback1
3.0.0.0/32 is subnetted, 1 subnets
C 3.3.3.3 is directly connected, Loopback0
23.0.0.0/24 is subnetted, 1 subnets
C 23.23.23.0 is directly connected, FastEthernet0/0
11.0.0.0/32 is subnetted, 1 subnets
R 11.11.11.3 [120/1] via 23.23.23.2, 00:00:23, FastEthernet0/0
12.0.0.0/24 is subnetted, 1 subnets
R 12.12.12.0 [120/1] via 23.23.23.2, 00:00:23, FastEthernet0/0
R3#ping 11.11.11.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 11.11.11.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/40/136 ms
*************************************
LAB 14 RIP Redistribute Connected
Skenario : Meredistribute Ip address yang terdeteksi Up di router R1
Note : command redistribute connected di dalam konfig router rip
Verifikasi : ( dibawah)
R1
R1#sh ip int brief
Interface IP-Address OK? Method Status Protocol
FastEthernet0/0 unassigned YES NVRAM administratively down down
Serial0/0 12.12.12.1 YES NVRAM up up
FastEthernet0/1 unassigned YES NVRAM administratively down down
Serial0/1 unassigned YES NVRAM administratively down down
Loopback0 1.1.1.1 YES NVRAM up up
Loopback1 11.11.11.1 YES NVRAM up up
Loopback2 11.11.11.2 YES NVRAM up up
Loopback3 11.11.11.3 YES NVRAM up up
Loopback4 11.11.11.4 YES NVRAM up up
R1#sh run | s rip
router rip
version 2
network 1.0.0.0
network 12.0.0.0
no auto-summary
R1#
R3
R3#ping 11.11.11.4
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 11.11.11.4, timeout is 2 seconds:
…..
Success rate is 0 percent (0/5)
R3#sh ip route 11.11.11.4
% Network not in table
R3#sh ip route
1.0.0.0/32 is subnetted, 1 subnets
R 1.1.1.1 [120/2] via 23.23.23.2, 00:00:28, FastEthernet0/0
2.0.0.0/32 is subnetted, 1 subnets
R 2.2.2.2 [120/1] via 23.23.23.2, 00:00:28, FastEthernet0/0
33.0.0.0/32 is subnetted, 3 subnets
C 33.33.33.1 is directly connected, Loopback2
C 33.33.33.3 is directly connected, Loopback3
C 33.33.33.2 is directly connected, Loopback1
3.0.0.0/32 is subnetted, 1 subnets
C 3.3.3.3 is directly connected, Loopback0
23.0.0.0/24 is subnetted, 1 subnets
C 23.23.23.0 is directly connected, FastEthernet0/0
12.0.0.0/24 is subnetted, 1 subnets
R 12.12.12.0 [120/1] via 23.23.23.2, 00:00:00, FastEthernet0/0
Apply :
R1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R1(config)#router rip
R1(config-router)#redistribute connected
Verifikasi :
R3#sh ip route 11.11.11.4
Routing entry for 11.11.11.4/32
Known via “rip”, distance 120, metric 2
Redistributing via rip
Last update from 23.23.23.2 on FastEthernet0/0, 00:00:14 ago
Routing Descriptor Blocks:
* 23.23.23.2, from 23.23.23.2, 00:00:14 ago, via FastEthernet0/0
Route metric is 2, traffic share count is 1
R3#ping 11.11.11.4
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 11.11.11.4, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/52/144 ms
R3#sh ip route
1.0.0.0/32 is subnetted, 1 subnets
R 1.1.1.1 [120/2] via 23.23.23.2, 00:00:23, FastEthernet0/0
2.0.0.0/32 is subnetted, 1 subnets
R 2.2.2.2 [120/1] via 23.23.23.2, 00:00:23, FastEthernet0/0
33.0.0.0/32 is subnetted, 3 subnets
C 33.33.33.1 is directly connected, Loopback2
C 33.33.33.3 is directly connected, Loopback3
C 33.33.33.2 is directly connected, Loopback1
3.0.0.0/32 is subnetted, 1 subnets
C 3.3.3.3 is directly connected, Loopback0
23.0.0.0/24 is subnetted, 1 subnets
C 23.23.23.0 is directly connected, FastEthernet0/0
11.0.0.0/32 is subnetted, 4 subnets
R 11.11.11.3 [120/2] via 23.23.23.2, 00:00:24, FastEthernet0/0
R 11.11.11.2 [120/2] via 23.23.23.2, 00:00:24, FastEthernet0/0
R 11.11.11.1 [120/2] via 23.23.23.2, 00:00:24, FastEthernet0/0
R 11.11.11.4 [120/2] via 23.23.23.2, 00:00:24, FastEthernet0/0
12.0.0.0/24 is subnetted, 1 subnets
R 12.12.12.0 [120/1] via 23.23.23.2, 00:00:24, FastEthernet0/0
*********************************
LAB 15 RIP Redistribute EIGRP
Skenario : redistribute EIGRP ke dalam RIP
Note : rip menendefinisikan hop count untuk EIGRP untuk proses ini
( memakai konfigurasi sebelumnya dengan menghilangkan redistribusi statiknya)
R1#sh run | s eigrp
router eigrp 1
network 11.11.11.1 0.0.0.0
no auto-summary
R1#conf t
R1(config)#router rip
R1(config-router)#no redistribute static
R1(config-router)#redistribute eigrp 1 metric 1
( eigrp proses 1 dan metric/hop 1)
Verifikasi :
R3#sh ip route
1.0.0.0/32 is subnetted, 1 subnets
R 1.1.1.1 [120/2] via 23.23.23.2, 00:00:24, FastEthernet0/0
2.0.0.0/32 is subnetted, 1 subnets
R 2.2.2.2 [120/1] via 23.23.23.2, 00:00:24, FastEthernet0/0
33.0.0.0/32 is subnetted, 3 subnets
C 33.33.33.1 is directly connected, Loopback2
C 33.33.33.3 is directly connected, Loopback3
C 33.33.33.2 is directly connected, Loopback1
3.0.0.0/32 is subnetted, 1 subnets
C 3.3.3.3 is directly connected, Loopback0
23.0.0.0/24 is subnetted, 1 subnets
C 23.23.23.0 is directly connected, FastEthernet0/0
11.0.0.0/32 is subnetted, 1 subnets
R 11.11.11.1 [120/2] via 23.23.23.2, 00:00:02, FastEthernet0/0
12.0.0.0/24 is subnetted, 1 subnets
R 12.12.12.0 [120/1] via 23.23.23.2, 00:00:02, FastEthernet0/0
R3#ping 11.11.11.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 11.11.11.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/56/108 ms
