R-ISP-01
interface Ethernet0/2
description to MIKROTIK
ip address 10.0.10.2 255.255.255.252
ip nat outside
no shut
exit
!
interface Ethernet0/1
description to BTM-INET-02
ip address 10.0.4.2 255.255.255.252
ip nat inside
no shut
exit
!
interface Ethernet0/0
description to-BTM-INET-01
ip address 10.0.1.2 255.255.255.252
ip nat inside
no shut
exit
!
router bgp 65002
redistribute static
neighbor 10.0.4.1 remote-as 65001
neighbor 10.0.4.1 description to R-INET-01
neighbor 10.0.4.1 version 4
neighbor 10.0.4.1 next-hop-self
neighbor 10.0.1.1 remote-as 65001
neighbor 10.0.1.1 description R-INET-02
neighbor 10.0.1.1 version 4
neighbor 10.0.1.1 next-hop-self
default-information originate
!
ip route 0.0.0.0 0.0.0.0 10.0.10.1
ip route 202.191.100.0 255.255.255.0 10.0.1.1
ip route 202.191.100.0 255.255.255.0 10.0.4.1
!
access-list 1 permit any
!
ip nat inside source list 1 interface ethernet0/2 overload
!
description to MIKROTIK
ip address 10.0.10.2 255.255.255.252
ip nat outside
no shut
exit
!
interface Ethernet0/1
description to BTM-INET-02
ip address 10.0.4.2 255.255.255.252
ip nat inside
no shut
exit
!
interface Ethernet0/0
description to-BTM-INET-01
ip address 10.0.1.2 255.255.255.252
ip nat inside
no shut
exit
!
router bgp 65002
redistribute static
neighbor 10.0.4.1 remote-as 65001
neighbor 10.0.4.1 description to R-INET-01
neighbor 10.0.4.1 version 4
neighbor 10.0.4.1 next-hop-self
neighbor 10.0.1.1 remote-as 65001
neighbor 10.0.1.1 description R-INET-02
neighbor 10.0.1.1 version 4
neighbor 10.0.1.1 next-hop-self
default-information originate
!
ip route 0.0.0.0 0.0.0.0 10.0.10.1
ip route 202.191.100.0 255.255.255.0 10.0.1.1
ip route 202.191.100.0 255.255.255.0 10.0.4.1
!
access-list 1 permit any
!
ip nat inside source list 1 interface ethernet0/2 overload
!
R-ISP-02
interface Ethernet0/2
description to MIKROTIK
ip address 10.0.20.2 255.255.255.252
ip nat outside
no shut
exit
!
interface Ethernet0/1
description to BTM-INET-02
ip address 10.0.5.2 255.255.255.252
ip nat inside
no shut
exit
!
interface Ethernet0/0
description to-BTM-INET-01
ip address 10.0.2.2 255.255.255.252
ip nat inside
no shut
exit
!
router bgp 65003
redistribute static
neighbor 10.0.5.1 remote-as 65001
neighbor 10.0.5.1 description to R-INET-02
neighbor 10.0.5.1 version 4
neighbor 10.0.5.1 next-hop-self
neighbor 10.0.2.1 remote-as 65001
neighbor 10.0.2.1 description R-INET-01
neighbor 10.0.2.1 version 4
neighbor 10.0.2.1 next-hop-self
default-information originate
!
ip route 0.0.0.0 0.0.0.0 10.0.20.1
ip route 202.191.100.0 255.255.255.0 10.0.2.1
ip route 202.191.100.0 255.255.255.0 10.0.5.1
!
access-list 1 permit any
!
ip nat inside source list 1 interface ethernet0/2 overload
!
description to MIKROTIK
ip address 10.0.20.2 255.255.255.252
ip nat outside
no shut
exit
!
interface Ethernet0/1
description to BTM-INET-02
ip address 10.0.5.2 255.255.255.252
ip nat inside
no shut
exit
!
interface Ethernet0/0
description to-BTM-INET-01
ip address 10.0.2.2 255.255.255.252
ip nat inside
no shut
exit
!
router bgp 65003
redistribute static
neighbor 10.0.5.1 remote-as 65001
neighbor 10.0.5.1 description to R-INET-02
neighbor 10.0.5.1 version 4
neighbor 10.0.5.1 next-hop-self
neighbor 10.0.2.1 remote-as 65001
neighbor 10.0.2.1 description R-INET-01
neighbor 10.0.2.1 version 4
neighbor 10.0.2.1 next-hop-self
default-information originate
!
ip route 0.0.0.0 0.0.0.0 10.0.20.1
ip route 202.191.100.0 255.255.255.0 10.0.2.1
ip route 202.191.100.0 255.255.255.0 10.0.5.1
!
access-list 1 permit any
!
ip nat inside source list 1 interface ethernet0/2 overload
!
BTM-ASR-INET-01
interface Loopback0
ip address 10.1.1.1 255.255.255.255
exit
!
interface gi1
description ISP-1
ip address 10.0.1.1 255.255.255.252
no shut
exit
!
interface gi2
description R-ISP-B
ip address 10.0.2.1 255.255.255.252
no shut
exit
!
interface gi4
description BTM-INET-02
ip address 202.191.100.253 255.255.255.252
no shut
exit
!
interface gi3
description FIREWALL-TIER-1
ip address 202.191.100.67 255.255.255.248
standby 1 ip 202.191.100.69
standby 1 preempt
standby 1 priority 110
standby 1 track 100 decrement 20
no shut
exit
!
track 10 ip sla 11 reachability
!
track 20 ip sla 12 reachability
!
track 100 list boolean and
object 10
object 20
exit
!
ip sla 11
icmp-echo 10.0.1.2 source-ip 10.0.1.1
threshold 400
timeout 2000
frequency 5
!
ip sla schedule 11 life forever start-time now
!
ip sla 12
icmp-echo 10.0.2.2 source-ip 10.0.2.1
threshold 400
timeout 2000
frequency 5
!
ip sla schedule 12 life forever start-time now
!
router bgp 65001
neighbor 10.0.1.2 remote-as 65002
neighbor 10.0.1.2 description ISP-1
neighbor 10.0.1.2 version 4
neighbor 10.0.2.2 remote-as 65003
neighbor 10.0.2.2 description ISP-2
neighbor 10.0.2.2 version 4
neighbor 202.191.100.254 remote-as 65001
neighbor 202.191.100.254 description IBGP-To-R-INET-02
neighbor 202.191.100.254 version 4
!
address-family ipv4
network 202.191.254.1 mask 255.255.255.255
network 10.1.1.1 mask 255.255.255.255
network 202.191.100.0
aggregate-address 202.191.99.0 255.255.254.0
neighbor 10.0.1.2 activate
neighbor 10.0.1.2 soft-reconfiguration inbound
neighbor 10.0.2.2 activate
neighbor 10.0.2.2 soft-reconfiguration inbound
neighbor 202.191.100.254 activate
neighbor 202.191.100.254 soft-reconfiguration inbound
neighbor 202.191.100.254 next-hop-self
exit
!
ip route 202.191.100.0 255.255.255.0 202.191.100.65
!
interface GigabitEthernet5
no shut
no ip address
channel-group 1 mode active
exit
!
interface GigabitEthernet6
no shut
no ip address
channel-group 1 mode active
exit
!
interface Port-channel1
no shut
no ip address
!
interface Port-channel1.1035
no shut
description to SITE-2
encapsulation dot1Q 1035
ip address 10.92.153.185 255.255.255.252
exit
!
interface Port-channel1.1036
no shut
description to SITE-2
encapsulation dot1Q 1036
ip address 10.92.153.189 255.255.255.252
exit
ip address 10.1.1.1 255.255.255.255
exit
!
interface gi1
description ISP-1
ip address 10.0.1.1 255.255.255.252
no shut
exit
!
interface gi2
description R-ISP-B
ip address 10.0.2.1 255.255.255.252
no shut
exit
!
interface gi4
description BTM-INET-02
ip address 202.191.100.253 255.255.255.252
no shut
exit
!
interface gi3
description FIREWALL-TIER-1
ip address 202.191.100.67 255.255.255.248
standby 1 ip 202.191.100.69
standby 1 preempt
standby 1 priority 110
standby 1 track 100 decrement 20
no shut
exit
!
track 10 ip sla 11 reachability
!
track 20 ip sla 12 reachability
!
track 100 list boolean and
object 10
object 20
exit
!
ip sla 11
icmp-echo 10.0.1.2 source-ip 10.0.1.1
threshold 400
timeout 2000
frequency 5
!
ip sla schedule 11 life forever start-time now
!
ip sla 12
icmp-echo 10.0.2.2 source-ip 10.0.2.1
threshold 400
timeout 2000
frequency 5
!
ip sla schedule 12 life forever start-time now
!
router bgp 65001
neighbor 10.0.1.2 remote-as 65002
neighbor 10.0.1.2 description ISP-1
neighbor 10.0.1.2 version 4
neighbor 10.0.2.2 remote-as 65003
neighbor 10.0.2.2 description ISP-2
neighbor 10.0.2.2 version 4
neighbor 202.191.100.254 remote-as 65001
neighbor 202.191.100.254 description IBGP-To-R-INET-02
neighbor 202.191.100.254 version 4
!
address-family ipv4
network 202.191.254.1 mask 255.255.255.255
network 10.1.1.1 mask 255.255.255.255
network 202.191.100.0
aggregate-address 202.191.99.0 255.255.254.0
neighbor 10.0.1.2 activate
neighbor 10.0.1.2 soft-reconfiguration inbound
neighbor 10.0.2.2 activate
neighbor 10.0.2.2 soft-reconfiguration inbound
neighbor 202.191.100.254 activate
neighbor 202.191.100.254 soft-reconfiguration inbound
neighbor 202.191.100.254 next-hop-self
exit
!
ip route 202.191.100.0 255.255.255.0 202.191.100.65
!
interface GigabitEthernet5
no shut
no ip address
channel-group 1 mode active
exit
!
interface GigabitEthernet6
no shut
no ip address
channel-group 1 mode active
exit
!
interface Port-channel1
no shut
no ip address
!
interface Port-channel1.1035
no shut
description to SITE-2
encapsulation dot1Q 1035
ip address 10.92.153.185 255.255.255.252
exit
!
interface Port-channel1.1036
no shut
description to SITE-2
encapsulation dot1Q 1036
ip address 10.92.153.189 255.255.255.252
exit
BTM-ASR-INET-02
interface Loopback0
ip address 10.1.1.2 255.255.255.255
exit
!
interface gi1
description ISP-1
ip address 10.0.4.1 255.255.255.252
no shut
exit
!
interface gi2
description R-ISP-B
ip address 10.0.5.1 255.255.255.252
no shut
exit
!
interface gi4
description BTM-INET-02
ip address 202.191.100.254 255.255.255.252
no shut
exit
!
interface gi3
description FIREWALL-TIER-1
ip address 202.191.100.68 255.255.255.248
standby 1 ip 202.191.100.69
standby 1 preempt
no shut
exit
!
router bgp 65001
neighbor 10.0.4.2 remote-as 65002
neighbor 10.0.4.2 description ISP-1
neighbor 10.0.4.2 version 4
neighbor 10.0.5.2 remote-as 65003
neighbor 10.0.5.2 description ISP-2
neighbor 10.0.5.2 version 4
neighbor 202.191.100.253 remote-as 65001
neighbor 202.191.100.253 description IBGP-To-R-INET-01
neighbor 202.191.100.253 version 4
!
address-family ipv4
network 10.1.1.2 mask 255.255.255.255
network 202.191.100.0
network 202.191.9.0 mask 255.255.254.0
aggregate-address 202.191.99.0 255.255.254.0
neighbor 10.0.4.2 activate
neighbor 10.0.4.2 soft-reconfiguration inbound
neighbor 10.0.5.2 activate
neighbor 10.0.5.2 soft-reconfiguration inbound
neighbor 202.191.100.253 activate
neighbor 202.191.100.253 soft-reconfiguration inbound
neighbor 202.191.100.253 next-hop-self
exit
!
ip route 202.191.100.0 255.255.255.0 202.191.100.65
!
interface GigabitEthernet5
no shut
no ip address
channel-group 1 mode active
exit
!
interface GigabitEthernet6
no shut
no ip address
channel-group 1 mode active
exit
!
interface Port-channel1
no shut
no ip address
!
interface Port-channel1.1037
no shut
description to SITE-2
encapsulation dot1Q 1035
ip address 10.92.153.193 255.255.255.252
exit
!
interface Port-channel1.1038
no shut
description to SITE-2
encapsulation dot1Q 1036
ip address 10.92.153.97 255.255.255.252
exit
ip address 10.1.1.2 255.255.255.255
exit
!
interface gi1
description ISP-1
ip address 10.0.4.1 255.255.255.252
no shut
exit
!
interface gi2
description R-ISP-B
ip address 10.0.5.1 255.255.255.252
no shut
exit
!
interface gi4
description BTM-INET-02
ip address 202.191.100.254 255.255.255.252
no shut
exit
!
interface gi3
description FIREWALL-TIER-1
ip address 202.191.100.68 255.255.255.248
standby 1 ip 202.191.100.69
standby 1 preempt
no shut
exit
!
router bgp 65001
neighbor 10.0.4.2 remote-as 65002
neighbor 10.0.4.2 description ISP-1
neighbor 10.0.4.2 version 4
neighbor 10.0.5.2 remote-as 65003
neighbor 10.0.5.2 description ISP-2
neighbor 10.0.5.2 version 4
neighbor 202.191.100.253 remote-as 65001
neighbor 202.191.100.253 description IBGP-To-R-INET-01
neighbor 202.191.100.253 version 4
!
address-family ipv4
network 10.1.1.2 mask 255.255.255.255
network 202.191.100.0
network 202.191.9.0 mask 255.255.254.0
aggregate-address 202.191.99.0 255.255.254.0
neighbor 10.0.4.2 activate
neighbor 10.0.4.2 soft-reconfiguration inbound
neighbor 10.0.5.2 activate
neighbor 10.0.5.2 soft-reconfiguration inbound
neighbor 202.191.100.253 activate
neighbor 202.191.100.253 soft-reconfiguration inbound
neighbor 202.191.100.253 next-hop-self
exit
!
ip route 202.191.100.0 255.255.255.0 202.191.100.65
!
interface GigabitEthernet5
no shut
no ip address
channel-group 1 mode active
exit
!
interface GigabitEthernet6
no shut
no ip address
channel-group 1 mode active
exit
!
interface Port-channel1
no shut
no ip address
!
interface Port-channel1.1037
no shut
description to SITE-2
encapsulation dot1Q 1035
ip address 10.92.153.193 255.255.255.252
exit
!
interface Port-channel1.1038
no shut
description to SITE-2
encapsulation dot1Q 1036
ip address 10.92.153.97 255.255.255.252
exit
Posting Komentar untuk " "