Building Enterprise Linux MPLS Virtual WAN

Building Enterprise Linux MPLS Virtual WAN

Virtual Wide Area Networking

Wide Area Networking adalah suatu area luas (kota / wilayah) yang berbeda geografis yang saling terhubung satu dengan lain dalam suatu topologi jaringan komputer. Pada artikel ini kita akan membahas mengenai Virtual WAN (Virtual Wide Area Networking), yang bertujuan menghubungkan beberapa subnet wilayah, kota ataupun kantor perusahaan menjadi satu topologi. Subnet yang akan kita hubungkan menggunakan alamat IP Private 192.xxx.xxx.xxx yang tidak dikenal oleh internet. Jadi Virtual WAN lebih ditujukan untuk pemakaian pribadi (personal atau corporate). Hubungan antar subnet mirip dengan internet atau WAN, pengguna dapat langsung melakukan sharing data antar komputer beda subnet, printer dan pemanfaatan aplikasi. Gambar dibawah ini merupakan contoh topologi subnet kantor surabaya, madiun dan ponorogo, kita akan menggabungkan menjadi satu topologi Virtual WAN menggunakan kombinasi OpenVPN dan BGP Routing

Protocol.

BGP Inside OpenVPN

Diagram dibawah ini menunjukkan pemanfaatan teknologi Tunneling VPN (garis biru) untuk membawa BGP routing protocol yang menghubungkan jaringan antar subnet. Setiap AS Number (ASN) dihubungkan oleh jalur tunnel VPN, paket data routing BGP yang melintas selalu dibungkus (encapsulation) dan di enkripsi (encryption), sehingga meningkatkan keamanan komunikasi data antar subnet.

Informasi AS Number

Madiun = ASN 1003

Ponorogo = ASN 1002

Surabaya = ASN 1001

Topologi Lengkap Virtual WAN

Gambar dibawah ini menunjukkan penggabungan topologi antar subnet dengan diagram BGP routing inside OpenVPN. Setiap perangkat PC Router Linux terpasang aplikasi OpenVPN dan Quagga Routing Daemon, hanya saja pada kantor surabaya router kita fungsikan sebagai OpenVPN Server dan harus memakai IP Publik Statis. Koneksi kantor madiun maupun ponorogo bisa memakai koneksi IP dinamis dan kita fungsikan sebagai VPN Client. Berikut ini data koneksi setiap PC Router.

Kantor Surabaya

Koneksi Internet : Dedicated Leased Line 512kbps – 1Mbps

IP Publik : 122.200.52.41

Subnet LAN : 192.168.0.0/24

IP VPN : 10.8.1.1

ASN : 1001

Kantor Madiun

Koneksi Internet : Telkom Speedy Unlimited

IP Telkom Speedy : 125.22.156.45 (IP dinamis)

Subnet LAN : 192.168.10.0/24

IP VPN : 10.8.1.3

ASN : 1003

Kantor Ponorogo

Koneksi Internet : FastNet First Media

IP FastNet : 122.34.200.70 (IP dinamis)

Subnet LAN : 192.168.1.0/24

IP VPN : 10.8.1.4

ASN : 1002

Konfigurasi Virtual WAN

PC Router Kantor Surabaya

vim /etc/openvpn/server.conf (OpenVPN Server)

dev tap

ca ca.crt

cert server.crt

key server.key # This file should be kept secret

dh dh1024.pem

server 10.8.1.0 255.255.255.0

ifconfig-pool-persist ipp.txt

client-to-client

duplicate-cn

keepalive 10 120

persist-key

persist-tun

status openvpn-status.log

verb 3

vim /etc/quagga/daemons

zebra = yes

bgpd = yes

ospfd = no

ospf6d = no

ripd = no

ripngd = no

isisd = no

vim /etc/quagga/debian.conf

vtysh_enable=yes

zebra_options=" --daemon"

bgpd_options=" --daemon"

ospfd_options=" --daemon"

ospf6d_options="--daemon -A ::1"

ripd_options=" --daemon"

ripngd_options="--daemon -A ::1"

isisd_options=" --daemon -A 127.0.0.1"

vim /etc/quagga/bgpd.conf

hostname bgpd

password zebra

enable password ardelindo

log stdout

router bgp 1001

bgp router-id 10.8.1.1

network 122.200.50.0/24

network 192.168.0.0/24

neighbor 10.8.1.3 remote-as 1003


line vty

#############################

##TEST KONFIGURASI

##KANTOR SURABAYA

#############################

Router> show ip route

Codes: K - kernel route, C - connected, S - static, R - RIP, O - OSPF,

I - ISIS, B - BGP, > - selected route, * - FIB route

K>* 0.0.0.0/0 via 122.200.52.1, eth1

C>* 10.8.1.0/24 is directly connected, tap0

C>* 122.200.52.0/25 is directly connected, eth1

C>* 127.0.0.0/8 is directly connected, lo


K>* 192.168.0.218/32 via 10.8.1.2, tap0

B>* 192.168.1.0/24 [20/0] via 10.8.1.4, tap0, 03:29:27

B>* 192.168.10.0/24 [20/0] via 10.8.1.3, tap0, 15:03:25

bgpd> show ip bgp neighbors

BGP neighbor is 10.8.1.3, remote AS 1003, local AS 1001, external link

BGP version 4, remote router ID 10.8.1.3

BGP state = Established, up for 15:05:21

Last read 00:00:21, hold time is 180, keepalive interval is 60 seconds

Neighbor capabilities:

Route refresh: advertised and received(old & new)

Address family IPv4 Unicast: advertised and received

Message statistics:

Inq depth is 0

Outq depth is 0

Sent Rcvd

Opens: 10 2

Notifications: 3 5

Updates: 15 5

Keepalives: 1521 1512

Route Refresh: 0 0

Capability: 0 0

Total: 1549 1524

Minimum time between advertisement runs is 30 seconds

For address family: IPv4 Unicast

Community attribute sent to this neighbor(both)

1 accepted prefixes

Connections established 5; dropped 3

Last reset 1d00h58m, due to BGP Notification send

Local host: 10.8.1.1, Local port: 179

Foreign host: 10.8.1.3, Foreign port: 42912

Nexthop: 10.8.1.1

Nexthop global: fe80::2ff:79ff:fe7c:31a8

Nexthop local: ::

BGP connection: non shared network

Read thread: on Write thread: off








Message statistics:

Inq depth is 0

Outq depth is 0

Sent Rcvd

Opens: 5 2

Notifications: 1 2

Updates: 14 4


Route Refresh: 0 0

Capability: 0 0

Total: 1536 1517




1 accepted prefixes


Last reset 03:31:38, due to BGP Notification received



Nexthop: 10.8.1.1

Nexthop global: fe80::2ff:79ff:fe7c:31a8

Nexthop local: ::



bgpd> show ip bgp summary

BGP router identifier 10.8.1.1, local AS number 1001

RIB entries 7, using 448 bytes of memory

Peers 2, using 5024 bytes of memory

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd

10.8.1.3 4 1003 1524 1549 0 0 0 15:06:00 1

10.8.1.4 4 1002 1518 1537 0 0 0 03:32:03 1

Total number of neighbors 2

PC Router Kantor Madiun

vim /etc/openvpn/client.conf (VPN Client)

client

dev tap

proto udp

remote 122.200.52.41 1194

resolv-retry infinite

nobind

persist-key

persist-tun

ca ca.crt

cert madiun.crt

key madiun.key

comp-lzo

verb 3

vim /etc/quagga/daemons

zebra = yes

bgpd = yes

ospfd = no

ospf6d = no

ripd = no

ripngd = no

isisd = no

vim /etc/quagga/debian.conf

vtysh_enable=yes

zebra_options=" --daemon"

bgpd_options=" --daemon"

ospfd_options=" --daemon"

ospf6d_options="--daemon -A ::1"

ripd_options=" --daemon"

ripngd_options="--daemon -A ::1"

isisd_options=" --daemon -A 127.0.0.1"

vim /etc/quagga/bgpd.conf

hostname bgpd

password zebra

enable password ardelindo

log stdout

router bgp 1003

bgp router-id 10.8.1.3

network 192.168.10.0/24


line vty

#############################

##TEST KONFIGURASI

##KANTOR MADIUN

#############################

Router> show ip route

Codes: K - kernel route, C - connected, S - static, R - RIP, O - OSPF,

I - ISIS, B - BGP, > - selected route, * - FIB route

K>* 0.0.0.0/0 via 192.168.1.1, eth1

O 10.8.1.0/24 [110/10] is directly connected, tap0, 1d00h34m

C>* 10.8.1.0/24 is directly connected, tap0

B>* 122.200.50.0/24 [20/0] via 10.8.1.1, tap0, 14:29:07

C>* 127.0.0.0/8 is directly connected, lo

B>* 192.168.0.0/24 [20/0] via 10.8.1.1, tap0, 14:29:07

B 192.168.1.0/24 [20/0] via 10.8.1.4, tap0, 02:54:53


O 192.168.10.0/24 [110/10] is directly connected, eth2, 1d00h34m







10.8.1.1 4 1001 1484 1499 0 0 0 14:32:29 3


bgpd> show ip bgp neighbors








Message statistics:

Inq depth is 0

Outq depth is 0

Sent Rcvd

Opens: 7 3

Notifications: 7 0

Updates: 4 12


Route Refresh: 0 0

Capability: 0 0

Total: 1500 1484




3 accepted prefixes


Last reset never



Nexthop: 10.8.1.3

Nexthop global: fe80::2ff:9dff:fecd:a17b

Nexthop local: ::








10.8.1.1 4 1001 1519 1534 0 0 0 15:07:23 3


Test Koneksi Virtual WAN Kantor Surabaya

Sekarang kita test dari komputer klien kantor surabaya ke kantor madiun.

root@budi:~# ping 192.168.10.92

PING 192.168.10.92 (192.168.10.92) 56(84) bytes of data.

64 bytes from 192.168.10.92: icmp_seq=1 ttl=62 time=384 ms

64 bytes from 192.168.10.92: icmp_seq=2 ttl=62 time=49.0 ms




^C

--- 192.168.10.92 ping statistics ---

5 packets transmitted, 5 received, 0% packet loss, time 4006ms

rtt min/avg/max/mdev = 39.318/116.054/384.335/134.354 ms

root@budi:~#

root@budi:~# traceroute 192.168.10.92

traceroute to 192.168.10.92 (192.168.10.92), 30 hops max, 60 byte packets

1 192.168.0.71 (192.168.0.71) 0.252 ms 0.199 ms 0.195 ms

2 10.8.1.3 (10.8.1.3) 1301.948 ms 1314.478 ms 1342.800 ms (IP VPN)

3 192.168.10.92 (192.168.10.92) 1375.937 ms 1396.767 ms 1413.436 ms

Tracemap Cheops

Dari tracemap aplikasi cheops dapat kita lihat bahwa routing dari IP 192.168.0.253 ke 192.168.10.92 melalui IP VPN 10.8.1.3 kantor madiun.

MPLS Virtual WAN Mobile Internet Broadband Access

Pada blog sebelumnya kita membahas konfigurasi MPLS Virtual WAN, dengan memanfaatkan VPN bridging dan Routing BGP. Sekarang kita membahas akses MPLS Virtual WAN melalui mobile internet broadband access (Ex: Smart Telecom Internet Unlimited 153kbps), untuk menghubungi komputer yang berada di subnet ardelindo (192.168.0.0/24), ruang pelatihan (192.168.3.0/24) dan customer (192.168.1.0/24). Datacenter customer dan ardelindo datacenter adalah storage penyimpanan data terpusat, jadi saya bisa setiap saat mengambil file yang diperlukan agar bisa dikerjakan dirumah. Kedua saya juga bisa melakukan remote maintenance walaupun sedang berada diluar kantor.

Lokasi saya berada di perumahan bukit rivaria sawangan - depok, yang saya gunakan Personal Computer rakitan, terhubung langsung ke HP nokia 2865 melalui kabel DKU-2. Device ppp0 adalah perangkat yang dibuat linux otomatis saat kita terhubung ke jaringan Smart Telecom Internet Unlimited. Alamat IP VPN adaah sebagai berikut:

Rumah Sawangan root@ubuntu:~# ifconfig ppp0 ppp0 Link encap:Point-to-Point Protocol inet addr:10.10.54.194 P-t-P:10.17.4.12 Mask:255.255.255.255 UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1000 Metric:1 RX packets:4284 errors:1 dropped:0 overruns:0 frame:0 TX packets:4492 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:3 RX bytes:1615893 (1.5 MiB) TX bytes:612388 (598.0 KiB) Kantor Ardelindo root@aples-desktop:~# ifconfig tap0 tap0 Link encap:Ethernet HWaddr 00:ff:1c:6b:97:d1 inet addr:10.8.1.1 Bcast:10.8.1.255 Mask:255.255.255.0 inet6 addr: fe80::2ff:1cff:fe6b:97d1/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:762478 errors:0 dropped:0 overruns:0 frame:0 TX packets:844504 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:71179776 (67.8 MB) TX bytes:77438801 (73.8 MB) Customer ABCDE root@ubuntu:~# ifconfig tap0 tap0 Link encap:Ethernet HWaddr 00:ff:c7:6f:74:d5

inet addr:10.8.1.4 Bcast:10.8.1.255 Mask:255.255.255.0 inet6 addr: fe80::2ff:c7ff:fe6f:74d5/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:103107 errors:0 dropped:0 overruns:0 frame:0 TX packets:55442 errors:0 dropped:99 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:7824984 (7.4 MB) TX bytes:4262522 (4.0 MB)

Pengujian koneksi Setelah semua terhubung ke jaringan VPN, kita lakukan test koneksi dengan ICMP melalui PC Desktop rumah sawangan. root@ubuntu:~# ping 10.8.1.1 PING 10.8.1.1 (10.8.1.1) 56(84) bytes of data. 64 bytes from 10.8.1.1: icmp_seq=2 ttl=64 time=527 ms 64 bytes from 10.8.1.1: icmp_seq=3 ttl=64 time=543 ms 64 bytes from 10.8.1.1: icmp_seq=4 ttl=64 time=559 ms --- 10.8.1.1 ping statistics --- 4 packets transmitted, 3 received, 25% packet loss, time 3007ms rtt min/avg/max/mdev = 527.763/543.808/559.862/13.118 ms root@ubuntu:~# ping 10.8.1.4 PING 10.8.1.4 (10.8.1.4) 56(84) bytes of data. 64 bytes from 10.8.1.4: icmp_seq=3 ttl=64 time=585 ms 64 bytes from 10.8.1.4: icmp_seq=4 ttl=64 time=586 ms 64 bytes from 10.8.1.4: icmp_seq=6 ttl=64 time=606 ms --- 10.8.1.4 ping statistics --- 6 packets transmitted, 3 received, 50% packet loss, time 5010ms rtt min/avg/max/mdev = 585.956/593.302/606.980/9.720 ms

dari hasil diatas kita lihat bahwa semua sudah terhubung dengan jaringan VPN. Konfigurasi Routing BGP Nah sekarang kita lakukan konfigurasi routing BGP untuk menghubungkan subnet kantor ardelindo, ruang pelatihan dan customer. Dalam contoh ini saya hanya perlihatkan settingan BGP nya, untuk keterangan lebih detail lihat di tutorial MPLS Virtual WAN. Kantor Ardelindo root@ubuntu:~# telnet 10.8.1.1 bgpd bgpd> enable bgpd# configure terminal bgpd(config)# show running-config router bgp 1001 bgp router-id 10.8.1.1 network 10.8.1.0/24 network 122.200.50.0/24 network 192.168.0.0/24 neighbor 10.8.1.4 remote-as 1005 neighbor 10.8.1.13 remote-as 1008 neighbor 192.168.0.90 remote-as 1001 neighbor 192.168.0.253 remote-as 1001

Customer ABCDE root@ubuntu:~# telnet 10.8.1.4 bgpd bgpd# show running-config router bgp 1005 bgp router-id 10.8.1.4 network 192.168.1.0/24 neighbor 10.8.1.1 remote-as 1001 neighbor 10.8.1.13 remote-as 1008 Rumah Sawangan root@ubuntu:~# telnet 127.0.0.1 bgpd bgpd# show running-config router bgp 1008 bgp router-id 10.8.1.13 neighbor 10.8.1.1 remote-as 1001 neighbor 10.8.1.4 remote-as 1005 Routing Table BGP Kemudian setelah terhubung kita lihat routing table melalui zebra dan bgpd. Rumah Sawangan root@ubuntu:~# telnet 127.0.0.1 zebra Router> show ip route Codes: K - kernel route, C - connected, S - static, R - RIP, O - OSPF, I - ISIS, B - BGP, > - selected route, * - FIB route K>* 0.0.0.0/0 is directly connected, ppp0 B 10.8.1.0/24 [20/0] via 10.8.1.1 inactive, 01:26:21 C>* 10.8.1.0/24 is directly connected, tap0 C>* 10.17.4.12/32 is directly connected, ppp0 B>* 122.200.50.0/24 [20/0] via 10.8.1.1, tap0, 01:26:21 C>* 127.0.0.0/8 is directly connected, lo K * 169.254.0.0/16 is directly connected, eth0 inactive B>* 192.168.0.0/24 [20/0] via 10.8.1.1, tap0, 01:26:21 B>* 192.168.1.0/24 [20/0] via 10.8.1.4, tap0, 01:24:26 S>* 192.168.1.99/32 [1/0] via 10.8.1.4, tap0 S>* 192.168.1.100/32 [1/0] via 10.8.1.4, tap0 Interface tap0 : perangkat VPN bridging root@ubuntu:~# telnet 127.0.0.1 bgpd bgpd> show ip bgp BGP table version is 0, local router ID is 10.8.1.13 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal Origin codes: i - IGP, e - EGP, ? - incomplete Network Next Hop Metric LocPrf Weight Path *> 10.8.1.0/24 10.8.1.1 0 0 1001 i *> 122.200.50.0/24 10.8.1.1 0 0 1001 i *> 192.168.0.0 10.8.1.1 0 0 1001 i *> 192.168.1.0 10.8.1.4 0 0 1005 i *> 192.168.6.0 10.8.1.2 0 1001 1003 i *> 192.168.10.0 10.8.1.2 0 1001 1003 i Total number of prefixes 6 bgpd> show ip bgp neighbors BGP neighbor is 10.8.1.1, remote AS 1001, local AS 1008, external link BGP version 4, remote router ID 10.8.1.1 BGP state = Established, up for 01:18:43 Last read 00:00:43, hold time is 180, keepalive interval is 60 seconds Neighbor capabilities: Route refresh: advertised and received(old & new) Address family IPv4 Unicast: advertised and received

Received 179 messages, 0 notifications, 0 in queue Sent 180 messages, 1 notifications, 0 in queue Route refresh request: received 0, sent 0 Minimum time between advertisement runs is 30 seconds For address family: IPv4 Unicast Community attribute sent to this neighbor(both) 7 accepted prefixes bgpd> show ip bgp summary BGP router identifier 10.8.1.13, local AS number 1008 3 BGP AS-PATH entries 0 BGP community entries Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd 10.8.1.1 4 1001 181 183 0 0 0 01:20:39 7 10.8.1.4 4 1005 176 188 0 0 0 01:21:32 1 Total number of neighbors 2

root@ubuntu:~# netstat -nr Kernel IP routing table Destination Gateway Genmask Flags MSS Window irtt Iface 192.168.1.99 10.8.1.4 255.255.255.255 UGH 0 0 0 tap0 192.168.1.100 10.8.1.4 255.255.255.255 UGH 0 0 0 tap0 10.17.4.12 0.0.0.0 255.255.255.255 UH 0 0 0 ppp0 192.168.6.0 10.8.1.2 255.255.255.0 UG 0 0 0 tap0 192.168.4.0 10.8.1.1 255.255.255.0 UG 0 0 0 tap0 122.200.50.0 10.8.1.1 255.255.255.0 UG 0 0 0 tap0 192.168.3.0 10.8.1.1 255.255.255.0 UG 0 0 0 tap0 192.168.0.0 10.8.1.1 255.255.255.0 UG 0 0 0 tap0 10.8.1.0 0.0.0.0 255.255.255.0 U 0 0 0 tap0 192.168.10.0 10.8.1.2 255.255.255.0 UG 0 0 0 tap0 0.0.0.0 0.0.0.0 0.0.0.0 U 0 0 0 ppp0 Interface tap0 : perangkat VPN bridging Kantor Ardelindo root@ubuntu:~# telnet 10.8.1.1 zebra Router> show ip route Codes: K - kernel route, C - connected, S - static, R - RIP, O - OSPF, I - ISIS, B - BGP, > - selected route, * - FIB route K>* 0.0.0.0/0 via 122.200.52.1, eth1 C>* 10.8.1.0/24 is directly connected, tap0 C>* 10.8.10.0/24 is directly connected, tap1 C>* 122.200.52.0/25 is directly connected, eth1 C>* 127.0.0.0/8 is directly connected, lo C>* 192.168.0.0/24 is directly connected, eth3 K>* 192.168.0.63/32 via 10.8.1.5, tap0 K>* 192.168.0.218/32 via 10.8.1.5, tap0 B>* 192.168.1.0/24 [20/0] via 10.8.1.4, tap0, 01:25:44 S>* 192.168.1.99/32 [1/0] via 10.8.1.4, tap0 S>* 192.168.1.100/32 [1/0] via 10.8.1.4, tap0 root@ubuntu:~# telnet 10.8.1.1 bgpd bgpd> show ip bgp BGP table version is 0, local router ID is 10.8.1.1 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale, R Removed Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path *> 10.8.1.0/24 0.0.0.0 0 32768 i *> 122.200.50.0/24 0.0.0.0 0 32768 i *> 192.168.0.0 0.0.0.0 0 32768 i *> 192.168.1.0 10.8.1.13 0 1008 1005 i *>i192.168.3.0 192.168.0.253 0 100 0 i *>i192.168.4.0 192.168.0.253 0 100 0 i *> 192.168.6.0 10.8.1.2 0 0 1003 i *> 192.168.10.0 10.8.1.2 0 0 1003 i Total number of prefixes 8 bgpd> show ip bgp summary BGP router identifier 10.8.1.1, local AS number 1001 RIB entries 15, using 960 bytes of memory Peers 8, using 20 KiB of memory Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd 10.8.1.2 4 1003 1915 1970 0 0 0 1d02h09m 2 10.8.1.4 4 1005 7162 7391 0 0 0 2d12h46m Idle 10.8.1.12 4 1007 82 121 0 0 0 5d03h37m Active 10.8.1.13 4 1008 1237 1387 0 0 0 01:24:49 1 192.168.0.90 4 1001 148 153 0 0 0 2d05h02m Active 192.168.0.253 4 1001 2894 2942 0 0 0 00:07:48 2 Total number of neighbors 6 Customer ABCDE root@ubuntu:~# telnet 10.8.1.4 zebra Router> show ip route Codes: K - kernel route, C - connected, S - static, R - RIP, O - OSPF, I - ISIS, B - BGP, > - selected route, * - FIB route K>* 0.0.0.0/0 via 192.168.0.2, eth3 B 10.8.1.0/24 [20/0] via 10.8.1.1 inactive, 01:27:16 C>* 10.8.1.0/24 is directly connected, tap0 B>* 122.200.50.0/24 [20/0] via 10.8.1.1, tap0, 01:27:16 C>* 127.0.0.0/8 is directly connected, lo K>* 169.254.0.0/16 is directly connected, eth1 B 192.168.0.0/24 [20/0] via 10.8.1.1, tap0, 01:27:16 C>* 192.168.0.0/24 is directly connected, eth3 S>* 192.168.0.71/32 [1/0] via 10.8.1.2, tap0 S>* 192.168.0.253/32 [1/0] via 10.8.1.2, tap0 C>* 192.168.1.0/24 is directly connected, eth1 root@ubuntu:~# telnet 10.8.1.4 bgpd bgpd> show ip bgp BGP table version is 0, local router ID is 10.8.1.4 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale, R Removed Origin codes: i - IGP, e - EGP, ? - incomplete Network Next Hop Metric LocPrf Weight Path *> 10.8.1.0/24 10.8.1.13 0 1008 1001 i *> 122.200.50.0/24 10.8.1.13 0 1008 1001 i *> 192.168.0.0 10.8.1.13 0 1008 1001 i *> 192.168.1.0 0.0.0.0 0 32768 i *> 192.168.3.0 10.8.1.13 0 1008 1001 i *> 192.168.4.0 10.8.1.13 0 1008 1001 i *> 192.168.6.0 10.8.1.13 0 1008 1001 1003 i *> 192.168.10.0 10.8.1.13 0 1008 1001 1003 i Total number of prefixes 8

bgpd> show ip bgp summary BGP router identifier 10.8.1.4, local AS number 1005 RIB entries 15, using 960 bytes of memory Peers 3, using 7536 bytes of memory Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd 10.8.1.1 4 1001 5868 7357 0 0 0 2d12h52m Idle 10.8.1.13 4 1008 693 712 0 0 0 01:31:35 7 Total number of neighbors 2 Pengujian koneksi antar subnet Dari hasil routing diatas bisa kita simpulkan sekarang semua subnet sudah terhubung. Untuk meyakinkan kita lakukan test ICMP dari PC rumah sawangan ke setiap server yang ada pada gambar topologi diatas.

Ke Kantor Ardelindo root@ubuntu:~# ping 192.168.0.71 (Ardelindo Datacenter) PING 192.168.0.71 (192.168.0.71) 56(84) bytes of data. 64 bytes from 192.168.0.71: icmp_seq=2 ttl=64 time=509 ms 64 bytes from 192.168.0.71: icmp_seq=4 ttl=64 time=609 ms 64 bytes from 192.168.0.71: icmp_seq=5 ttl=64 time=530 ms root@ubuntu:~# ping 192.168.0.3 (Ardelindo IP Phone) PING 192.168.0.3 (192.168.0.3) 56(84) bytes of data. 64 bytes from 192.168.0.3: icmp_seq=1 ttl=63 time=1130 ms 64 bytes from 192.168.0.3: icmp_seq=2 ttl=63 time=685 ms 64 bytes from 192.168.0.3: icmp_seq=3 ttl=63 time=681 ms Ke Customer ABCDE root@ubuntu:~# ping 192.168.1.100 (Datacenter) PING 192.168.1.100 (192.168.1.100) 56(84) bytes of data. 64 bytes from 192.168.1.100: icmp_seq=1 ttl=63 time=585 ms 64 bytes from 192.168.1.100: icmp_seq=2 ttl=63 time=628 ms 64 bytes from 192.168.1.100: icmp_seq=3 ttl=63 time=606 ms root@ubuntu:~# ping 192.168.1.102 (Application Server) PING 192.168.1.102 (192.168.1.102) 56(84) bytes of data. 64 bytes from 192.168.1.102: icmp_seq=1 ttl=63 time=643 ms 64 bytes from 192.168.1.102: icmp_seq=2 ttl=63 time=601 ms 64 bytes from 192.168.1.102: icmp_seq=3 ttl=63 time=1398 ms root@ubuntu:~# ping 192.168.1.99 (Webmail) PING 192.168.1.99 (192.168.1.99) 56(84) bytes of data. 64 bytes from 192.168.1.99: icmp_seq=1 ttl=64 time=572 ms 64 bytes from 192.168.1.99: icmp_seq=2 ttl=64 time=589 ms 64 bytes from 192.168.1.99: icmp_seq=3 ttl=64 time=625 ms root@ubuntu:~# ping 192.168.1.103 (Backup Server) PING 192.168.1.103 (192.168.1.103) 56(84) bytes of data. 64 bytes from 192.168.1.103: icmp_seq=1 ttl=63 time=801 ms 64 bytes from 192.168.1.103: icmp_seq=2 ttl=63 time=685 ms 64 bytes from 192.168.1.103: icmp_seq=3 ttl=63 time=644 ms 64 bytes from 192.168.1.103: icmp_seq=4 ttl=63 time=843 ms

Akses Ardelindo dan Customer ABCDE

Sekarang kita lakukan akses secara nyata menggunakan nautilus untuk mengambil data yang ada di ardelindo dan customer, serta melakukan akses webmail secara lokal.

Koneksi ke Ardelindo Datacenter

Koneksi Ke Ardelindo Hotspot Management

Koneksi Ke Customer ABCDE

Building Enterprise Linux MPLS Virtual WAN

Documents

Transcript of Building Enterprise Linux MPLS Virtual WAN