Lompat ke konten Lompat ke sidebar Lompat ke footer

Cisco | Virtual Private LAN Services (VPLS) - Enterprise Network - V2

 










Berikut konfigurasi dari masing-maing perangkat.
TAHAP-1: KONFIGURASI INTERFACE & ROUING OSPF
hostname CS-903-01
!
router ospf 1
mpls ldp autoconfig
!
interface gi2
no shutdown
ip address 10.0.1.1 255.255.255.252
ip ospf network point-to-point
ip ospf 1 area 0
exit
!
interface gi1
no shutdown
ip address 10.0.1.9 255.255.255.252
ip ospf network point-to-point
ip ospf 1 area 0
exit
!
interface gi3
no shutdown
ip address 10.0.1.5 255.255.255.252
ip ospf network point-to-point
ip ospf 1 area 0
exit
!
interface gi4
no shutdown
ip address 10.0.1.13 255.255.255.252
ip ospf network point-to-point
ip ospf 1 area 0
exit
!
interface BDI 80
no shut
 ip address 10.28.212.46 255.255.255.0
 exit
!
interface Loopback0
 ip address 10.1.1.1 255.255.255.255
 ip ospf 1 area 0
!
-------------------------------------
hostname CS-903-02
!
router ospf 1
mpls ldp autoconfig
!
interface gi2
no shutdown
ip address 10.0.1.18 255.255.255.252
ip ospf network point-to-point
ip ospf 1 area 0
exit
!
interface gi1
no shutdown
ip address 10.0.1.10 255.255.255.252
ip ospf network point-to-point
ip ospf 1 area 0
exit
!
interface gi3
no shutdown
ip address 10.0.1.26 255.255.255.252
ip ospf network point-to-point
ip ospf 1 area 0
exit
!
interface gi4
no shutdown
ip address 10.0.1.29 255.255.255.252
ip ospf network point-to-point
ip ospf 1 area 0
exit
!
interface BDI 80
no shut
 ip address 10.28.212.49 255.255.255.0
 exit
!
interface Loopback0
 ip address 10.1.1.3 255.255.255.255
 ip ospf 1 area 0
!
-------------------------------------
hostname ASR-902-01
!
router ospf 1
mpls ldp autoconfig
!
interface gi2
no shutdown
ip address 10.0.1.17 255.255.255.252
ip ospf network point-to-point
ip ospf 1 area 0
exit
!
interface gi1
no shutdown
ip address 10.0.1.2 255.255.255.252
ip ospf network point-to-point
ip ospf 1 area 0
exit
!
interface gi3
no shutdown
ip address 10.0.1.21 255.255.255.252
ip ospf network point-to-point
ip ospf 1 area 0
exit
!
interface BDI 80
no shut
 ip address 10.28.212.5 255.255.255.0
 exit
!
interface Loopback0
 ip address 10.1.1.2 255.255.255.255
 ip ospf 1 area 0
 exit
!
-------------------------------------
hostname ASR-902-03
!
router ospf 1
mpls ldp autoconfig
!
interface gi2
no shutdown
ip address 10.0.1.30 255.255.255.252
ip ospf network point-to-point
ip ospf 1 area 0
exit
!
interface gi1
no shutdown
ip address 10.0.1.14 255.255.255.252
ip ospf network point-to-point
ip ospf 1 area 0
exit
!
interface BDI 80
no shut
 ip address 10.28.212.48 255.255.255.0
 exit
!
interface Loopback0
 ip address 10.1.1.5 255.255.255.255
 ip ospf 1 area 0
 exit
!
VERIFIKASI

 
 
 
 
 
 

 
 
 
 
================================
TAHAP-2: KONFIGURASI ROUTING BGP
================================
CS-903-01
!
router bgp 65001
 bgp router-id 10.1.1.1
 bgp log-neighbor-changes
 neighbor iBGP peer-group
 neighbor iBGP remote-as 65001
 neighbor 10.0.1.10 remote-as 65001
 neighbor iBGP update-source Loopback0
 neighbor 10.1.1.2 peer-group iBGP
 neighbor 10.1.1.3 peer-group iBGP
 neighbor 10.1.1.4 peer-group iBGP
 neighbor 10.1.1.5 peer-group iBGP
 !
 address-family ipv4
  neighbor iBGP route-reflector-client
  neighbor 10.0.1.10 activate
  neighbor 10.0.1.10 next-hop-self
  neighbor 10.1.1.2 activate
  neighbor 10.1.1.3 activate
  neighbor 10.1.1.4 activate
  neighbor 10.1.1.5 activate
  exit-address-family
 !
 address-family vpnv4
  neighbor iBGP send-community extended
  neighbor iBGP route-reflector-client
  neighbor 10.0.1.10 activate
  neighbor 10.0.1.10 next-hop-self
  neighbor 10.1.1.2 activate
  neighbor 10.1.1.3 activate
  neighbor 10.1.1.4 activate
  neighbor 10.1.1.5 activate
 exit-address-family
 !
 address-family l2vpn vpls
  neighbor iBGP send-community extended
  neighbor iBGP route-reflector-client
  neighbor iBGP suppress-signaling-protocol ldp
  neighbor 10.0.1.10 activate
  neighbor 10.0.1.10 next-hop-self
  neighbor 10.1.1.2 activate
  neighbor 10.1.1.3 activate
  neighbor 10.1.1.4 activate
  neighbor 10.1.1.5 activate
 exit-address-family
!
-------------------------------------
CS-903-02
!
router bgp 65001
 bgp router-id 10.1.1.3
 bgp log-neighbor-changes
 neighbor iBGP peer-group
 neighbor iBGP remote-as 65001
 neighbor 10.0.1.9 remote-as 65001
 neighbor iBGP update-source Loopback0
 neighbor 10.1.1.2 peer-group iBGP
 neighbor 10.1.1.1 peer-group iBGP
 neighbor 10.1.1.4 peer-group iBGP
 neighbor 10.1.1.5 peer-group iBGP
 !
 address-family ipv4
  neighbor iBGP route-reflector-client
  neighbor 10.0.1.9 activate
  neighbor 10.0.1.9 next-hop-self
  neighbor 10.1.1.2 activate
  neighbor 10.1.1.1 activate
  neighbor 10.1.1.4 activate
  neighbor 10.1.1.5 activate
  exit-address-family
 !
 address-family vpnv4
  neighbor iBGP send-community extended
  neighbor iBGP route-reflector-client
  neighbor 10.0.1.9 activate
  neighbor 10.0.1.9 next-hop-self
  neighbor 10.1.1.2 activate
  neighbor 10.1.1.1 activate
  neighbor 10.1.1.4 activate
  neighbor 10.1.1.5 activate
 exit-address-family
 !
 address-family l2vpn vpls
  neighbor iBGP send-community extended
  neighbor iBGP route-reflector-client
  neighbor iBGP suppress-signaling-protocol ldp
  neighbor 10.0.1.9 activate
  neighbor 10.0.1.9 next-hop-self
  neighbor 10.1.1.2 activate
  neighbor 10.1.1.1 activate
  neighbor 10.1.1.4 activate
  neighbor 10.1.1.5 activate
 exit-address-family
--------------------------------
ASR-902-01
!
router bgp 65001
 bgp router-id 10.1.1.2
 bgp log-neighbor-changes
 neighbor iBGP peer-group
 neighbor iBGP remote-as 65001
 neighbor iBGP update-source Loopback0
 neighbor 10.1.1.1 peer-group iBGP
 neighbor 10.1.1.3 peer-group iBGP
 !
 address-family ipv4
  neighbor 10.1.1.1 activate
  neighbor 10.1.1.3 activate
  exit-address-family
 !
 address-family vpnv4
  neighbor iBGP send-community extended
  neighbor 10.1.1.1 activate
  neighbor 10.1.1.3 activate
 exit-address-family
 !
 address-family l2vpn vpls
  neighbor iBGP send-community extended
  neighbor iBGP suppress-signaling-protocol ldp
  neighbor 10.1.1.1 activate
  neighbor 10.1.1.3 activate
 exit-address-family
-------------------------------------
ASR-902-03
!
router bgp 65001
 bgp router-id 10.1.1.5
 bgp log-neighbor-changes
 neighbor iBGP peer-group
 neighbor iBGP remote-as 65001
 neighbor iBGP update-source Loopback0
 neighbor 10.1.1.1 peer-group iBGP
 neighbor 10.1.1.3 peer-group iBGP
 !
 address-family ipv4
  neighbor 10.1.1.1 activate
  neighbor 10.1.1.3 activate
  exit-address-family
 !
 address-family vpnv4
  neighbor iBGP send-community extended
  neighbor 10.1.1.1 activate
  neighbor 10.1.1.3 activate
 exit-address-family
 !
 address-family l2vpn vpls
  neighbor iBGP send-community extended
  neighbor iBGP suppress-signaling-protocol ldp
  neighbor 10.1.1.1 activate
  neighbor 10.1.1.3 activate
 exit-address-family
VERIFIKASI BGP












 
 
 
 
 
====================================
TAHAP-3 : KONFIG MPLS LABEL PROTOCOL
===============================================
NOTED: YANG BLOK KUNING KONFIG INI HANYA OPTIONAL CORE-01 DAN CORE-02. PERLU DIKONFIG JIKA DI ROUTERNYA AKAN DITURUNKAN VLAN.

CS-903-01

!
mpls label protocol ldp
multilink bundle-name authenticated
l2vpn vfi context VLAN10
 vpn id 10
 autodiscovery bgp signaling bgp
  ve id 11
!
l2vpn vfi context VLAN20
 vpn id 20
 autodiscovery bgp signaling bgp
  ve id 11
!
l2vpn vfi context VLAN30
 vpn id 30
 autodiscovery bgp signaling bgp
  ve id 11
!
l2vpn vfi context VLAN40
 vpn id 40
 autodiscovery bgp signaling bgp
  ve id 11
  exit
!
mpls ldp router-id Loopback0
-------------------------------------- 
NOTED: YANG BLOK KUNING KONFIG INI HANYA OPTIONAL CORE-01 DAN CORE-02. PERLU DIKONFIG JK DI ROUTERNYA AKAN DITURUNKAN VLAN.

CS-903-02

!
mpls label protocol ldp
multilink bundle-name authenticated
l2vpn vfi context VLAN10
 vpn id 10
 autodiscovery bgp signaling bgp
  ve id 11
!
l2vpn vfi context VLAN20
 vpn id 20
 autodiscovery bgp signaling bgp
  ve id 11
!
l2vpn vfi context VLAN30
 vpn id 30
 autodiscovery bgp signaling bgp
  ve id 11
!
l2vpn vfi context VLAN40
 vpn id 40
 autodiscovery bgp signaling bgp
  ve id 11
  exit
!
mpls ldp router-id Loopback0

--------------------------------
ASR-902-01
!
mpls label protocol ldp
multilink bundle-name authenticated
l2vpn vfi context VLAN10
 vpn id 10
 autodiscovery bgp signaling bgp
  ve id 12
!
l2vpn vfi context VLAN20
 vpn id 20
 autodiscovery bgp signaling bgp
  ve id 12
!
l2vpn vfi context VLAN30
 vpn id 30
 autodiscovery bgp signaling bgp
  ve id 12
!
l2vpn vfi context VLAN40
 vpn id 40
 autodiscovery bgp signaling bgp
  ve id 12
  exit
!
mpls ldp router-id Loopback0
----------------
ASR-902-03
!
mpls label protocol ldp
multilink bundle-name authenticated
l2vpn vfi context VLAN10
 vpn id 10
 autodiscovery bgp signaling bgp
  ve id 13
!
l2vpn vfi context VLAN20
 vpn id 20
 autodiscovery bgp signaling bgp
  ve id 13
!
l2vpn vfi context VLAN30
 vpn id 30
 autodiscovery bgp signaling bgp
  ve id 13
!
l2vpn vfi context VLAN40
 vpn id 40
 autodiscovery bgp signaling bgp
  ve id 13
  exit
!
mpls ldp router-id Loopback0
!
VERIFIKASI: 


















































==================================
TAHAP-4 : KONFIG VPLS - D-LNIK PORT
=============================================
ASR-902-01
!
int gi4
description *LINK TO SW-01*
 no ip address
 no shutdown
!
 service instance 10 ethernet
  encapsulation dot1q 10
  rewrite ingress tag pop 1 symmetric
  exi
!
service instance 20 ethernet
  encapsulation dot1q 20
  rewrite ingress tag pop 1 symmetric
  exi
!
service instance 30 ethernet
  encapsulation dot1q 30
  rewrite ingress tag pop 1 symmetric
  exi
!
service instance 40 ethernet
  encapsulation dot1q 40
  rewrite ingress tag pop 1 symmetric
  exi
  exit
----------------------------- 
ASR-902-03
!
int gi3
description *LINK TO SW-03*
 no ip address
 no shutdown
!
 service instance 10 ethernet
  encapsulation dot1q 10
  rewrite ingress tag pop 1 symmetric
  exi
!
service instance 20 ethernet
  encapsulation dot1q 20
  rewrite ingress tag pop 1 symmetric
  exi
!
service instance 30 ethernet
  encapsulation dot1q 30
  rewrite ingress tag pop 1 symmetric
  exi
!
service instance 40 ethernet
  encapsulation dot1q 40
  rewrite ingress tag pop 1 symmetric
  exi
  exit

===========================================================
TAHAP-5 : KONFIG BRIDGE-DOMAIN (DIROUTER-EDGE)
==========================================================
ASR-902-01
!
bridge-domain 10
 member GigabitEthernet4 service-instance 10
 member vfi VLAN10
!
bridge-domain 20
 member GigabitEthernet4 service-instance 20
 member vfi VLAN20
!
bridge-domain 30
 member GigabitEthernet4 service-instance 30
 member GigabitEthernet5 service-instance 30
 member vfi VLAN30
!
bridge-domain 40
 member GigabitEthernet4 service-instance 40
 member vfi VLAN40
!
----------------------
ASR-902-03
!
bridge-domain 10
 member GigabitEthernet3 service-instance 10
 member GigabitEthernet4 service-instance 10
 member vfi VLAN10
!
bridge-domain 20
 member GigabitEthernet3 service-instance 20
 member vfi VLAN20
!
bridge-domain 30
 member GigabitEthernet3 service-instance 30
 member vfi VLAN30
!
bridge-domain 40
 member GigabitEthernet3 service-instance 40
 member vfi VLAN40
===========================================================
TAHAP-6 : KONFIG SWITCH SW-9200-01 & 
SW-9200-02
==========================================================
vlan 10
vlan 20
vlan 30
vlan 40
!
interface Ethernet0/0
 switchport trunk encapsulation dot1q
 switchport mode trunk
end
!
interface Ethernet0/1
 switchport access vlan 10
 switchport mode access
end
VERIFIKASI:
Ping dari PC_002 ke PC_102 dan sebaliknya. Perhatikan bahwa kedua PC ini belum diset gateway, hanya buat testing bahwa L2 sudah berhasil.


 
 
 
 
 
 
 
 
 
 
  
 
KESIMPULAN
Lab dengan MPLS-VPLS sudah berhasil/sukses..!! 
----------------------------------------------------------
VERIFIKASI
sh mpls ldp neighbor  brief
sh mpls l2transport summary
show bridge-domain 10
show bridge-domain 20
show mpls ip binding all
show l2vpn vfi name VLAN10

show l2vpn signaling rib detail
show l2vpn service all

sh run bridge-domain 20
sh run bridge-domain 10

show l2vpn atom vc
show l2vpn vfi detail

sh mpls forwarding-tab
sh mpls forwarding-table | i 10.1

show xconnect pwmib
-------------
#tag
pln batam

Posting Komentar untuk "Cisco | Virtual Private LAN Services (VPLS) - Enterprise Network - V2"