Konfigurasi MPLS L3VPN dengan Static Routing pada Cisco

Sebelumnya saya sudah membahas konfigurasi L3VPN, tapi pada konfigurasi tersebut baru agar antar PE dapat bertukar informasi Routing antar VRF, jadi yang baru dapat melakukan PING hanya antar Router PE saja, antar Router CE belum dapat melakukan PING, sekarang kita perlu menambahkan static Routing pada masing-masing VRF dan juga di Router CE. Ini adalah topologi lanjutan sebelumnya :

Kita gunakan Static Routing untuk menghubungkan antar Interface loopback CE agar dapat di PING satu sama lain, dari R4 dapat terhubung ke R5, dan dari R6 dapat terhubung ke R7. Konfigurasi IP Addressing dan Routing saya loncat dan langsung saja pada MP-BGP, VRF, dan Static Routing :

Virtual Routing and Forwarding

Kita konfigurasi VRF untuk tiap CE dan tentukan RD, RT, dll sama seperti pada sebelumnya.

R1(config)#ip vrf Dark
R1(config-vrf)#rd 10:1
R1(config-vrf)#route-target both 10:1
R1(config-vrf)#exi
R1(config)#ip vrf Light
R1(config-vrf)#rd 10:2
R1(config-vrf)#route-target both 10:2
R1(config-vrf)#exi

R1(config)#int e0/1
R1(config-if)#ip vrf forwarding Dark
R1(config-if)#ip add 10.10.10.1 255.255.255.0
R1(config-if)#no sh
R1(config-if)#exi
R1(config)#int e0/2
R1(config-if)#ip vrf forwarding Light
R1(config-if)#ip add 10.10.10.1 255.255.255.0
R1(config-if)#no sh
R1(config-if)#exi

R3(config)#ip vrf Dark
R3(config-vrf)#rd 10:1
R3(config-vrf)#route-target both 10:1
R3(config-vrf)#exi
R3(config)#ip vrf Light
R3(config-vrf)#rd 10:2
R3(config-vrf)#route-target both 10:2
R3(config-vrf)#exi
R3(config-if)#ip vrf forwarding Dark
R3(config-if)#ip add 20.20.20.1 255.255.255.0
R3(config-if)#no sh
R3(config-if)#exi
R3(config)#int e0/2              
R3(config-if)#ip vrf forwarding Light
R3(config-if)#ip add 20.20.20.1 255.255.255.0
R3(config-if)#no sh
R3(config-if)#exi

Multi Protocol BGP

Konfigurasi MP BGP untuk mendistribusikan informasi Routing antar VRF.

R1(config)#router bgp 10
R1(config-router)#no syn
R1(config-router)#no auto-summ
R1(config-router)#neighbor 3.3.3.3 remote-as 10
R1(config-router)#neighbor 3.3.3.3 update-source lo0
R1(config-router)#address-fam vpnv4
R1(config-router-af)#neighbor 3.3.3.3 activ
R1(config-router-af)#exi
R1(config-router)#address-fam ipv4 vrf Dark
R1(config-router-af)#redistribute connected
R1(config-router-af)#redistribute static
R1(config-router-af)#exi
R1(config-router)#address-fam ipv4 vrf Light
R1(config-router-af)#redistribute connected
R1(config-router-af)#redistribute static
R1(config-router-af)#exi

R3(config)#router bgp 10
R3(config-router)#no syn
R3(config-router)#no auto-summ
R3(config-router)#neighbor 1.1.1.1 remote-as 10
R3(config-router)#neighbor 1.1.1.1 update-sou lo0
R3(config-router)#address-family vpnv4
R3(config-router-af)#neighbor 1.1.1.1 activ 
R3(config-router)#address-family ipv4 vrf Dark
R3(config-router-af)#redistribute conn
R1(config-router-af)#redistribute static
R3(config-router-af)#exi
R3(config-router)#address-family ipv4 vrf Light
R3(config-router-af)#redistribute conn
R1(config-router-af)#redistribute static
R3(config-router-af)#exi

Static Routing

Konfigurasi Static Routing agar antar Interface loopback CE dapat saling terhubung.

R1(config)#ip route vrf Dark 4.4.4.4 255.255.255.255 10.10.10.2
R1(config)#ip route vrf Light 6.6.6.6 255.255.255.255 10.10.10.2

R3(config)#ip route vrf Dark 5.5.5.5 255.255.255.255 20.20.20.2
R3(config)#ip route vrf Light 7.7.7.7 255.255.255.255 20.20.20.2

R4(config)#ip route 20.20.20.0 255.255.255.0 10.10.10.1   
R4(config)#ip route 5.5.5.5 255.255.255.255 10.10.10.1

R5(config)#ip route 10.10.10.0 255.255.255.0 20.20.20.1
R5(config)#ip route 4.4.4.4 255.255.255.255 20.20.20.1

R6(config)#ip route 20.20.20.0 255.255.255.0 10.10.10.1
R6(config)#ip route 7.7.7.7 255.255.255.255 10.10.10.1

R7(config)#ip route 10.10.10.0 255.255.255.0 20.20.20.1
R7(config)#ip route 6.6.6.6 255.255.255.255 20.20.20.1

Konfirmasi

Untuk konfimasi kita bisa lihat Routing table VRF yang ada di Router PE.

R1#sh ip route vrf Dark

Routing Table: Dark
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area 
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
       a - application route
       + - replicated route, % - next hop override

Gateway of last resort is not set

      4.0.0.0/32 is subnetted, 1 subnets
S        4.4.4.4 [1/0] via 10.10.10.2
      5.0.0.0/32 is subnetted, 1 subnets
B        5.5.5.5 [200/0] via 3.3.3.3, 00:01:20
      10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C        10.10.10.0/24 is directly connected, Ethernet0/1
L        10.10.10.1/32 is directly connected, Ethernet0/1
      20.0.0.0/24 is subnetted, 1 subnets
B        20.20.20.0 [200/0] via 3.3.3.3, 00:01:20

Kemudian kita lakukan PING antar CE yang berada di VRF sama.

R4#ping 5.5.5.5
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 5.5.5.5, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

R6#ping 7.7.7.7
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 7.7.7.7, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

NetBlog

Cari Blog Ini