setelah 3 hari begadangan ngoprek RUTER 7606 dan Quagga
\nakhirnya Malem ini gue berhasil juga, jalanin Service Dynamic routing
\ndi Mesin BSD biar gak susah susah tambahin static route ke INHERENT<\/p>\n
Bagi Local node yang belum memiliki ASN,\u00a0 bisa ikuti tips dan triks berikut.<\/p>\n
Dengan konfirmasi terlebih dahulu ke Para Petinggi\u00a0 Admin\u00a0 INHERENT
\nservice OSPF di router INHERENT UNILA\u00a0 gue aktifin.seperti biasa enable dulu<\/p>\n
IBRUNILA01>en
\nPassword:
\nIBRUNILA01#<\/p>\n
IBRUNILA01# configure terminal<\/p>\n
router ospf 100
\nlog-adjacency-changes
\nredistribute bgp 65009 subnets
\nnetwork 167.205.143.0 0.0.0.255 area 0
\n!<\/p>\n
Setting BGP di Router INHERENT<\/p>\n
cuted….
\nrouter bgp 65009
\n…
\nredistribute ospf 100 route-map DENY_PRIVATE_ADDRESS
\n….<\/p>\n
route-map DENY_PRIVATE_ADDRESS
\nmatch ip address 50<\/p>\n
access-list 50 deny\u00a0\u00a0 10.0.0.0 0.255.255.255
\naccess-list 50 deny\u00a0\u00a0 172.16.0.0 0.15.255.255
\naccess-list 50 permit any<\/p>\n
Yups Beres deh maenan dengan ROUTER 7606<\/p>\n
Sekarang kita tinggal install quagga support zebra dan ospf
\nrouter-inherent# cd \/usr\/ports\/net\/quagga<\/p>\n
\u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
\n\u2502\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Options for quagga 0.99.7_2
\n\u2502 \u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
\n\u2502 \u2502\u00a0 [X] ISISD\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Enable experimental ISIS daemon
\n\u2502 \u2502\u00a0 [X] PAM\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 PAM authentication for vtysh
\n\u2502 \u2502\u00a0 [X] OSPF_NSSA\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 NSSA support (RFC1587)
\n\u2502 \u2502\u00a0 [X] OSPF_OPAQUE_LSA\u00a0 OSPF
\n\u2502 \u2502\u00a0 [X] RTADV\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 IPv6 Router Advertisements
\n\u2502 \u2502\u00a0 [ ] SNMP\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 SNMP support
\n\u2502 \u2502\u00a0 [X] TCPSOCKETS\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Use TCP\/IP sockets
\n\u2502 \u2502\u00a0 [X] TCPMD5\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Use experimental MD5 patch for BGP
\n\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
\n[\u00a0 OK\u00a0 ]\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Cancel<\/p>\n
router-inherent# make && make install clean<\/p>\n
abis itu aktifin service quagga, dengan memasukkan statement berikut pada etc.rc.conf<\/p>\n
router-inherent# vi \/etc\/rc.conf<\/p>\n
quagga_enable=”YES”
\nquagga_flags=”-d”
\nquagga_daemons=”zebra ospfd”<\/p>\n
and create file configurasi zebra.conf\u00a0 dan ospfd.conf di direktori \/usr\/local\/etc\/quagga<\/p>\n
contoh konfirasi zebra.conf yg dipake di mesin gue<\/p>\n
Current configuration:
\n!
\nhostname Router
\npassword KutuSapiKejepit
\nenable password KutuSapiKejepit
\n!
\ninterface em0
\nipv6 nd suppress-ra
\n!
\ninterface lo0
\n!
\ninterface pflog0
\nipv6 nd suppress-ra
\n!
\ninterface pfsync0
\nipv6 nd suppress-ra
\n!
\ninterface re0
\nipv6 nd suppress-ra
\n!
\ninterface rl0
\nipv6 nd suppress-ra
\n!
\nip forwarding
\n!
\nline vty
\n!
\nend<\/p>\n
dan ini adalah\u00a0 ospfd.conf yang ada dimesin gue<\/p>\n
! Zebra configuration saved from vty
\n!\u00a0\u00a0 2007\/07\/19 19:04:49
\n!
\nhostname ospfd
\npassword KutuKurap
\nenable password KutuKurap
\nlog stdout
\n!
\n!
\n!
\ninterface em0
\n!
\ninterface lo0
\n!
\ninterface pflog0
\n!
\ninterface pfsync0
\n!
\ninterface re0
\n!
\ninterface rl0
\n!
\nrouter ospf
\nnetwork 167.205.143.0\/24 area 0.0.0.0
\nnetwork 222.124.196.96\/27\u00a0 area 0.0.0.1 -> area 1 untuk publish IP Public UNILA di Inherent
\nnetwork 192.168.1.0\/24 area 0.0.0.1\u00a0\u00a0\u00a0 -> area 1 gue pake untuk semua server di Net1
\n!
\nline vty
\n!<\/p>\n
OK beres Bos….<\/p>\n
tinggal tes dengan masuk ke console ospf (quagga)<\/p>\n
router-inherent# telnet localhost os
\nospfd.conf\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ospfd.conf.sav
\nrouter-inherent# telnet localhost ospfd
\nTrying ::1…
\nConnected to localhost.
\nEscape character is ‘^]’.<\/p>\n
Hello, this is Quagga (version 0.99.7).
\nCopyright 1996-2005 Kunihiro Ishiguro, et al.<\/p>\n
User Access Verification<\/p>\n
Password:
\nospfd> en
\nPassword:
\nospfd#<\/p>\n
ospfd# sh ip ospf border-routers
\n============ OSPF router routing table =============
\nR\u00a0\u00a0\u00a0 167.205.190.9\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 [10] area: 0.0.0.0, ASBR
\nvia 167.205.143.1, re0<\/p>\n
ospfd#<\/p>\n
Yups, berarti mesin BSD sudah bisa membaca tabel route dari ROUTER INHERENT<\/p>\n
kalo gak percaya liat aja tabel routingnya, pasti dah banyak yang masuk<\/p>\n
ospfd# sh ip ospf route
\n============ OSPF network routing table ============
\nN\u00a0\u00a0\u00a0 167.205.143.0\/28\u00a0\u00a0\u00a0\u00a0\u00a0 [10] area: 0.0.0.0
\ndirectly attached to re0
\nN\u00a0\u00a0\u00a0 192.168.1.0\/24\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 [10] area: 0.0.0.1
\ndirectly attached to em0<\/p>\n
============ OSPF router routing table =============
\nR\u00a0\u00a0\u00a0 167.205.190.9\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 [10] area: 0.0.0.0, ASBR
\nvia 167.205.143.1, re0<\/p>\n
============ OSPF external routing table ===========
\nN E2 64.110.140.165\/32\u00a0\u00a0\u00a0\u00a0 [10\/1] tag: 65011
\nvia 167.205.143.1, re0
\nN E2 64.110.141.48\/28\u00a0\u00a0\u00a0\u00a0\u00a0 [10\/1] tag: 65008
\nvia 167.205.143.1, re0
\nN E2 152.118.0.0\/18\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 [10\/1] tag: 65008
\nvia 167.205.143.1, re0
\nN E2 152.118.64.0\/18\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 [10\/1] tag: 65008
\nvia 167.205.143.1, re0
\nN E2 152.118.128.0\/18\u00a0\u00a0\u00a0\u00a0\u00a0 [10\/1] tag: 65008
\nvia 167.205.143.1, re0
\nN E2 152.118.192.0\/18\u00a0\u00a0\u00a0\u00a0\u00a0 [10\/1] tag: 65008
\nvia 167.205.143.1, re0
\nN E2 167.205.0.0\/17\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 [10\/1] tag: 65008
\nvia 167.205.143.1, re0
\nN E2 167.205.62.239\/32\u00a0\u00a0\u00a0\u00a0 [10\/1] tag: 65008
\nvia 167.205.143.1, re0
\nN E2 167.205.128.0\/27\u00a0\u00a0\u00a0\u00a0\u00a0 [10\/1] tag: 65011
\nvia 167.205.143.1, re0
\nN E2 167.205.128.240\/28\u00a0\u00a0\u00a0 [10\/1] tag: 65011
\nvia 167.205.143.1, re0
\nN E2 167.205.129.0\/29\u00a0\u00a0\u00a0\u00a0\u00a0 [10\/1] tag: 65011
\nvia 167.205.143.1, re0
\nN E2 167.205.130.0\/27\u00a0\u00a0\u00a0\u00a0\u00a0 [10\/1] tag: 65008
\nvia 167.205.143.1, re0
\nN E2 167.205.130.32\/28\u00a0\u00a0\u00a0\u00a0 [10\/1] tag: 65008
\nvia 167.205.143.1, re0
\nN E2 167.205.130.64\/29\u00a0\u00a0\u00a0\u00a0 [10\/1] tag: 65008<\/p>\n
Model\u00a0 OSPF ini\u00a0 seyogyanya juga akan gue gunakan untuk semua PTS
\nyang akan nyambung ke SIMPUL Unila<\/p>\n
————————————————————–
\nArea 0 –> 167.205.143.0\/24 (dipakai semua)
\nArea 1 –> PTS A\u00a0 | IP publik INHERENT | IP publik PTS A (Internet)
\nArea 2 –> PTS B | IP publik INHERENT | IP publik PTS B (Internet)
\nArea 3 –> PTS C\u00a0 | IP publik INHERENT | IP publik PTS C (Internet)
\nArea 4 –> PTS D| IP publik INHERENT | IP publik PTS D (Internet)
\nArea 5 –> PTS E | IP publik INHERENT | IP publik PTS E (Internet)
\nArea 6 –> PTS F| IP publik INHERENT | IP publik PTS F\u00a0 (Internet)
\n——————————————————————-<\/p>\n","protected":false},"excerpt":{"rendered":"
setelah 3 hari begadangan ngoprek RUTER 7606 dan Quagga akhirnya Malem ini gue berhasil juga, jalanin Service Dynamic routing di Mesin BSD biar gak susah susah tambahin static route ke INHERENT Bagi Local node yang belum memiliki ASN,\u00a0 bisa ikuti tips dan triks berikut. Dengan konfirmasi terlebih dahulu ke Para Petinggi\u00a0 Admin\u00a0 INHERENT service OSPF … Continue reading “Quagga,FreeBSD dan ROUTER INHERENT”<\/span><\/a><\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1348,5],"tags":[],"class_list":["post-88","post","type-post","status-publish","format-standard","hentry","category-kiat-sukses-menjadi-seorang-network-engineer-2","category-old-post-dari-unilanet"],"_links":{"self":[{"href":"https:\/\/dosen.unila.ac.id\/gigih\/wp-json\/wp\/v2\/posts\/88"}],"collection":[{"href":"https:\/\/dosen.unila.ac.id\/gigih\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dosen.unila.ac.id\/gigih\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dosen.unila.ac.id\/gigih\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/dosen.unila.ac.id\/gigih\/wp-json\/wp\/v2\/comments?post=88"}],"version-history":[{"count":0,"href":"https:\/\/dosen.unila.ac.id\/gigih\/wp-json\/wp\/v2\/posts\/88\/revisions"}],"wp:attachment":[{"href":"https:\/\/dosen.unila.ac.id\/gigih\/wp-json\/wp\/v2\/media?parent=88"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dosen.unila.ac.id\/gigih\/wp-json\/wp\/v2\/categories?post=88"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dosen.unila.ac.id\/gigih\/wp-json\/wp\/v2\/tags?post=88"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}