Sie sind auf Seite 1von 21

Belajar Mengkonfigurasi MPLS-VPN

(PE-CE with OSPF)di Junos


http://iwing.wordpress.com

Berhubung masih nobitol makanya masih script kiddies, maklum baru belajar hehehehe...........@_@
--------------------------------------------------------------------------------------------
! Topology yang digunakan !
--------------------------------------------------------------------------------------------

------------------------------------------------------------------------------------------------
! Konfigurasi Router cnc1 (CE1) !
------------------------------------------------------------------------------------------------
root@cnc1# show
## Last changed: 2010-07-04 13:57:49 UTC
version 8.4R4.2;
system {
host-name cnc1;
root-authentication {
encrypted-password "$1$rdYbfs2s$UfeiORYzSrjvML7X.mIHy0"; ## SECRET-DATA
}
login {
message "\n\n!========================================================!\n
\n!Router cnc, maintened by:iwing !\n
\n!Access to this device is limited to authorized user only!\n
\n!WARNING!!!:ALL unathourized access is prohibited. !\n
\n!========================================================!\n\n";
user iwing {
uid 2001;
class super-user;
authentication {
encrypted-password "$1$rQy0ZTV0$A1hVDjhzF2niCbd/4MI0K."; ## SECRET-DATA
}
}
}
services {
ftp;
ssh;
telnet;
web-management {
http {
port 80;
}
}
}
syslog {
user * {
any emergency;
}
file messages {
any notice;
authorization info;
}
file interactive-commands {
interactive-commands any;
}
}
}
interfaces {
fxp0 {
unit 0 {
family inet {
address 192.168.10.1/24;
}
}
}
fxp2 {
unit 0 {
family inet {
address 192.168.80.1/24;
}
}
}
lo0 {
unit 0 {
family inet {
address 1.1.1.1/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.0 {
interface lo0.0 {
passive;
}
interface fxp0.0;
interface fxp2.0;
}
}
}

[edit]
root@cnc1#
------------------------------------------------------------------------------------------------
! Konfigurasi Router cnc2 (PE1) !
------------------------------------------------------------------------------------------------
[edit]
root@cnc2# show
## Last changed: 2010-07-04 13:29:13 UTC
version 8.4R4.2;
system {
host-name cnc2;
root-authentication {
encrypted-password "$1$QeV0HEqD$DcAIEpD8DU94YaIzoqsfo/"; ## SECRET-DATA
}
login {
message "\n\n!========================================================!\n
\n!Router cnc, maintened by:iwing !\n
\n!Access to this device is limited to authorized user only!\n
\n!WARNING!!!:ALL unathourized access is prohibited. !\n
\n!========================================================!\n\n";
user iwing {
uid 2000;
class super-user;
authentication {
encrypted-password "$1$a1HVR5jH$yoUbW1IOcAHOdAQCahOpy0"; ## SECRET-DATA
}
}
}
services {
ftp;
ssh;
telnet;
}
syslog {
user * {
any emergency;
}
file messages {
any notice;
authorization info;
}
file interactive-commands {
interactive-commands any;
}
}
}
interfaces {
fxp0 {
unit 0 {
family inet {
address 192.168.10.2/24;
}
family mpls;
}
}
fxp1 {
unit 0 {
family inet {
address 192.168.20.1/24;
}
family mpls;
}
}
lo0 {
unit 0 {
family inet {
address 2.2.2.2/32;
}
}
}
}
routing-options {
router-id 2.2.2.2;
autonomous-system 100;
}
protocols {
rsvp {
traceoptions {
file ldp-log;
flag all;
flag packets detail;
}
interface fxp1.0;
interface fxp0.0;
}
mpls {
label-switched-path pe-cnc2-to-pe-cnc4 {
to 4.4.4.4;
}
interface fxp1.0;
interface fxp0.0;
}
bgp {
family inet {
unicast;
}
group pe-cnc2-to-pe-cnc4 {
type internal;
local-address 2.2.2.2;
family inet {
unicast;
}
family inet-vpn {
unicast;
}
peer-as 100;
neighbor 4.4.4.4;
}
}
ospf {
traffic-engineering;
area 0.0.0.0 {
interface lo0.0 {
passive;
}
interface fxp1.0;
label-switched-path pe-cnc2-to-pe-cnc4;
}
}
}
policy-options {
policy-statement vpncnc-export-policy {
term 1 {
from protocol ospf;
then {
community add vpncnc;
accept;
}
}
term 2 {
then reject;
}
}
policy-statement vpncnc-import-policy {
term 1 {
from {
protocol bgp;
community vpncnc;
}
then accept;
}
term 2 {
then reject;
}
}
community vpncnc members target:100:01;
}
routing-instances {
vpncnc {
instance-type vrf;
interface fxp0.0;
route-distinguisher 100:01;
vrf-import vpncnc-import-policy;
vrf-export vpncnc-export-policy;
vrf-table-label;
protocols {
ospf {
export vpncnc-import-policy;
area 0.0.0.0 {
interface fxp0.0;
}
}
}
}
}

[edit]
root@cnc2#
------------------------------------------------------------------------------------------------
! Konfigurasi Router cnc3 (P) !
------------------------------------------------------------------------------------------------
[edit]
root@cnc3# show
## Last changed: 2010-07-04 12:39:54 UTC
version 8.4R4.2;
system {
host-name cnc3;
root-authentication {
encrypted-password "$1$rdYbfs2s$UfeiORYzSrjvML7X.mIHy0"; ## SECRET-DATA
}
login {
message "\n\n!========================================================!\n
\n!Router cnc, maintened by:iwing !\n
\n!Access to this device is limited to authorized user only!\n
\n!WARNING!!!:ALL unathourized access is prohibited. !\n
\n!========================================================!\n\n";
user iwing {
uid 2000;
class super-user;
authentication {
encrypted-password "$1$nBU.RVsT$LMG9TWM9OUQZGvInqYfEu1"; ## SECRET-DATA
}
}
}
services {
ftp;
ssh;
web-management {
http {
port 80;
}
}
}
syslog {
user * {
any emergency;
}
file messages {
any notice;
authorization info;
}
file interactive-commands {
interactive-commands any;
}
}
}
interfaces {
fxp0 {
unit 0 {
family inet {
address 192.168.30.1/24;
}
family mpls;
}
}
fxp1 {
unit 0 {
family inet {
address 192.168.20.2/24;
}
family mpls;
}
}
lo0 {
unit 0 {
family inet {
address 3.3.3.3/32;
}
}
}
}
routing-options {
router-id 3.3.3.3;
autonomous-system 100;
}
protocols {
rsvp {
traceoptions {
file ldp-log;
flag all;
flag packets detail;
}
interface fxp0.0;
interface fxp1.0;
}
mpls {
interface all;
interface fxp0.0;
interface fxp1.0;
}
ospf {
traffic-engineering;
area 0.0.0.0 {
interface lo0.0 {
passive;
}
interface fxp0.0;
interface fxp1.0;
}
}
}

[edit]
root@cnc3#
------------------------------------------------------------------------------------------------
! Konfigurasi Router cnc4 (PE2) !
------------------------------------------------------------------------------------------------
[edit]
root@cnc4# show
## Last changed: 2010-07-04 13:54:31 UTC
version 8.4R4.2;
system {
host-name cnc4;
root-authentication {
encrypted-password "$1$rdYbfs2s$UfeiORYzSrjvML7X.mIHy0"; ## SECRET-DATA
}
login {
message "\n\n!========================================================!\n
\n!Router cnc, maintened by:iwing !\n
\n!Access to this device is limited to authorized user only!\n
\n!WARNING!!!:ALL unathourized access is prohibited. !\n
\n!========================================================!\n\n";
user iwing {
uid 2000;
class super-user;
authentication {
encrypted-password "$1$a4h8jH/6$WNgvFOgNFh2cnvlaHnZms1"; ## SECRET-DATA
}
}
}
services {
ftp;
ssh;
web-management {
http {
port 80;
}
}
}
syslog {
user * {
any emergency;
}
file messages {
any notice;
authorization info;
}
file interactive-commands {
interactive-commands any;
}
}
}
interfaces {
fxp0 {
unit 0 {
family inet {
address 192.168.30.2/24;
}
family mpls;
}
}
fxp2 {
unit 0 {
family inet {
address 192.168.40.1/24;
}
family mpls;
}
}
lo0 {
unit 0 {
family inet {
address 4.4.4.4/32;
}
}
}
}
routing-options {
router-id 4.4.4.4;
autonomous-system 100;
}
protocols {
rsvp {
traceoptions {
file ldp-log;
flag all;
flag packets detail;
}
interface fxp0.0;
interface fxp2.0;
}
mpls {
label-switched-path pe-cnc4-to-pe-cnc2 {
to 2.2.2.2;
}
interface fxp0.0;
interface fxp2.0;
}
bgp {
family inet {
unicast;
}
group pe-cnc4-to-pe-cnc2 {
type internal;
local-address 4.4.4.4;
family inet {
unicast;
}
family inet-vpn {
unicast;
}
peer-as 100;
neighbor 2.2.2.2;
}
}
ospf {
traffic-engineering;
area 0.0.0.0 {
interface lo0.0 {
passive;
}
interface fxp0.0;
interface fxp1.0;
label-switched-path pe-cnc4-to-pe-cnc2;
}
}
}
policy-options {
policy-statement vpncnc-export-policy {
term 1 {
from protocol ospf;
then {
community add vpncnc;
accept;
}
}
term 2 {
then reject;
}
}
policy-statement vpncnc-import-policy {
term 1 {
from {
protocol bgp;
community vpncnc;
}
then accept;
}
term 2 {
then reject;
}
}
community vpncnc members target:100:01;
}
routing-instances {
vpncnc {
instance-type vrf;
interface fxp2.0;
route-distinguisher 100:01;
vrf-import vpncnc-import-policy;
vrf-export vpncnc-export-policy;
vrf-table-label;
protocols {
ospf {
export vpncnc-import-policy;
area 0.0.0.0 {
interface fxp2.0;
}
}
}
}
}

[edit]
root@cnc4#
------------------------------------------------------------------------------------------------
! Konfigurasi Router cnc5 (CE2) !
------------------------------------------------------------------------------------------------
[edit]
root@cnc5# show
## Last changed: 2010-07-04 13:28:14 UTC
version 8.4R4.2;
system {
host-name cnc5;
root-authentication {
encrypted-password "$1$rdYbfs2s$UfeiORYzSrjvML7X.mIHy0"; ## SECRET-DATA
}
login {
message "\n\n!========================================================!\n
\n!Router cnc, maintened by:iwing !\n
\n!Access to this device is limited to authorized user only!\n
\n!WARNING!!!:ALL unathourized access is prohibited. !\n
\n!========================================================!\n\n";
user iwing {
uid 2000;
class super-user;
authentication {
encrypted-password "$1$a4h8jH/6$WNgvFOgNFh2cnvlaHnZms1"; ## SECRET-DATA
}
}
}
services {
ftp;
ssh;
web-management {
http {
port 80;
}
}
}
syslog {
user * {
any emergency;
}
file messages {
any notice;
authorization info;
}
file interactive-commands {
interactive-commands any;
}
}
}
interfaces {
fxp2 {
unit 0 {
family inet {
address 192.168.40.2/24;
}
}
}
fxp4 {
unit 0 {
family inet {
address 192.168.90.1/24;
}
}
}
lo0 {
unit 0 {
family inet {
address 5.5.5.5/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.0 {
interface lo0.0 {
passive;
}
interface fxp2.0;
interface fxp4.0;
}
}
}

[edit]
root@cnc5#
------------------------------------------------------------------------------------------------
! How to check 1 (run show mpls interface) and (run show rsvp interface) !
------------------------------------------------------------------------------------------------
[edit]
root@cnc2# run show mpls interface
Interface State Administrative groups
fxp1.0 Up <none>

[edit]
root@cnc2# run show rsvp interface
RSVP interface: 2 active
Active Subscr- Static Available Reserved Highwater
Interface State resv iption BW BW BW mark
fxp0.0 Up 0 100% 10Mbps 10Mbps 0bps 0bps
fxp1.0 Up 1 100% 10Mbps 10Mbps 0bps 0bps

[edit]

[edit]
root@cnc3# run show mpls interface
Interface State Administrative groups
fxp0.0 Up <none>
fxp1.0 Up <none>

[edit]
root@cnc3# run show rsvp interface
RSVP interface: 2 active
Active Subscr- Static Available Reserved Highwater
Interface State resv iption BW BW BW mark
fxp0.0 Up 1 100% 10Mbps 10Mbps 0bps 0bps
fxp1.0 Up 1 100% 10Mbps 10Mbps 0bps 0bps

[edit]
root@cnc3#

[edit]
root@cnc4# run show mpls interface
Interface State Administrative groups
fxp0.0 Up <none>

[edit]
root@cnc4# run show rsvp interface
RSVP interface: 2 active
Active Subscr- Static Available Reserved Highwater
Interface State resv iption BW BW BW mark
fxp0.0 Up 1 100% 10Mbps 10Mbps 0bps 0bps
fxp2.0 Up 0 100% 10Mbps 10Mbps 0bps 0bps

[edit]
root@cnc4#
------------------------------------------------------------------------------------------------
! How to check 2 (run show mpls lsp) !
------------------------------------------------------------------------------------------------
[edit]
root@cnc2# run show mpls lsp
Ingress LSP: 1 sessions
To From State Rt ActivePath P LSPname
4.4.4.4 2.2.2.2 Up 2 * pe-cnc2-to-pe-cnc4
Total 1 displayed, Up 1, Down 0

Egress LSP: 1 sessions


To From State Rt Style Labelin Labelout LSPname
2.2.2.2 4.4.4.4 Up 0 1 FF 3 - pe-cnc4-to-pe-cnc2
Total 1 displayed, Up 1, Down 0

Transit LSP: 0 sessions


Total 0 displayed, Up 0, Down 0

[edit]
root@cnc2#

[edit]
root@cnc3# run show mpls lsp
Ingress LSP: 0 sessions
Total 0 displayed, Up 0, Down 0

Egress LSP: 0 sessions


Total 0 displayed, Up 0, Down 0

Transit LSP: 2 sessions


To From State Rt Style Labelin Labelout LSPname
2.2.2.2 4.4.4.4 Up 1 1 FF 100000 3 pe-cnc4-to-pe-cnc2
4.4.4.4 2.2.2.2 Up 1 1 FF 100016 3 pe-cnc2-to-pe-cnc4
Total 2 displayed, Up 2, Down 0

[edit]
root@cnc3#

edit]
root@cnc4# run show mpls lsp
Ingress LSP: 1 sessions
To From State Rt ActivePath P LSPname
2.2.2.2 4.4.4.4 Up 2 * pe-cnc4-to-pe-cnc2
Total 1 displayed, Up 1, Down 0

Egress LSP: 1 sessions


To From State Rt Style Labelin Labelout LSPname
4.4.4.4 2.2.2.2 Up 0 1 FF 3 - pe-cnc2-to-pe-cnc4
Total 1 displayed, Up 1, Down 0

Transit LSP: 0 sessions


Total 0 displayed, Up 0, Down 0

[edit]
root@cnc4#
------------------------------------------------------------------------------------------------
! How to check 3 (run show bgp summary) !
------------------------------------------------------------------------------------------------
[edit]
root@cnc2# run show bgp summary
Groups: 1 Peers: 1 Down peers: 0
Table Tot Paths Act Paths Suppressed History Damp State Pending
inet.0 0 0 0 0 0 0
bgp.l3vpn.0 2 2 0 0 0 0
Peer AS InPkt OutPkt OutQ Flaps Last Up/Dwn
State|#Active/Received/Damped...
4.4.4.4 100 194 146 0 0 57:45 Establ
inet.0: 0/0/0
bgp.l3vpn.0: 2/2/0
vpncnc.inet.0: 2/2/0

[edit]
root@cnc2#

[edit]
root@cnc4# run show bgp summary
Groups: 1 Peers: 1 Down peers: 0
Table Tot Paths Act Paths Suppressed History Damp State Pending
inet.0 0 0 0 0 0 0
bgp.l3vpn.0 2 2 0 0 0 0
Peer AS InPkt OutPkt OutQ Flaps Last Up/Dwn
State|#Active/Received/Damped...
2.2.2.2 100 145 197 0 0 1:21:36 Establ
inet.0: 0/0/0
bgp.l3vpn.0: 2/2/0
vpncnc.inet.0: 2/2/0

[edit]
root@cnc4#

------------------------------------------------------------------------------------------------
! How to check 4 (run show bgp neighbor) !
------------------------------------------------------------------------------------------------
[edit]
root@cnc2# run show bgp neighbor
Peer: 4.4.4.4+179 AS 100 Local: 2.2.2.2+2470 AS 100
Type: Internal State: Established Flags: <Sync>
Last State: OpenConfirm Last Event: RecvKeepAlive
Last Error: None
Options: <Preference LocalAddress AddressFamily PeerAS Rib-group Refresh>
Address families configured: inet-unicast inet-vpn-unicast
Local Address: 2.2.2.2 Holdtime: 90 Preference: 170
Number of flaps: 0
Peer ID: 4.4.4.4 Local ID: 2.2.2.2 Active Holdtime: 90
Keepalive Interval: 30 Peer index: 0
BFD: disabled, down
NLRI advertised by peer: inet-unicast inet-vpn-unicast
NLRI for this session: inet-unicast inet-vpn-unicast
Peer supports Refresh capability (2)
Table inet.0 Bit: 10000
RIB State: BGP restart is complete
Send state: in sync
Active prefixes: 0
Received prefixes: 0
Suppressed due to damping: 0
Advertised prefixes: 0
Table bgp.l3vpn.0
RIB State: BGP restart is complete
RIB State: VPN restart is complete
Send state: not advertising
Active prefixes: 2
Received prefixes: 2
Suppressed due to damping: 0
Table vpncnc.inet.0 Bit: 40000
RIB State: BGP restart is complete
RIB State: VPN restart is complete
Send state: in sync
Active prefixes: 2
Received prefixes: 2
Suppressed due to damping: 0
Advertised prefixes: 2
Last traffic (seconds): Received 9 Sent 21 Checked 14
Input messages: Total 223 Updates 9 Refreshes 3 Octets 4935
Output messages: Total 166 Updates 11 Refreshes 3 Octets 4047
Output Queue[0]: 0
Output Queue[1]: 0
Output Queue[3]: 0

[edit]
root@cnc2#

[edit]
root@cnc4# run show bgp neighbor
Peer: 2.2.2.2+2470 AS 100 Local: 4.4.4.4+179 AS 100
Type: Internal State: Established Flags: <Sync>
Last State: OpenConfirm Last Event: RecvKeepAlive
Last Error: None
Options: <Preference LocalAddress AddressFamily PeerAS Rib-group Refresh>
Address families configured: inet-unicast inet-vpn-unicast
Local Address: 4.4.4.4 Holdtime: 90 Preference: 170
Number of flaps: 0
Peer ID: 2.2.2.2 Local ID: 4.4.4.4 Active Holdtime: 90
Keepalive Interval: 30 Peer index: 0
BFD: disabled, down
NLRI advertised by peer: inet-unicast inet-vpn-unicast
NLRI for this session: inet-unicast inet-vpn-unicast
Peer supports Refresh capability (2)
Table inet.0 Bit: 10000
RIB State: BGP restart is complete
Send state: in sync
Active prefixes: 0
Received prefixes: 0
Suppressed due to damping: 0
Advertised prefixes: 0
Table bgp.l3vpn.0
RIB State: BGP restart is complete
RIB State: VPN restart is complete
Send state: not advertising
Active prefixes: 2
Received prefixes: 2
Suppressed due to damping: 0
Table vpncnc.inet.0 Bit: 40000
RIB State: BGP restart is complete
RIB State: VPN restart is complete
Send state: in sync
Active prefixes: 2
Received prefixes: 2
Suppressed due to damping: 0
Advertised prefixes: 2
Last traffic (seconds): Received 9 Sent 20 Checked 31
Input messages: Total 165 Updates 11 Refreshes 3 Octets 4028
Output messages: Total 224 Updates 9 Refreshes 3 Octets 4988
Output Queue[0]: 0
Output Queue[1]: 0
Output Queue[3]: 0

[edit]
root@cnc4#
------------------------------------------------------------------------------------------------
! How to check 5 !
------------------------------------------------------------------------------------------------
[edit]
root@cnc2# run ping 192.168.80.2 count 5 routing-instance vpncnc
PING 192.168.80.2 (192.168.80.2): 56 data bytes
64 bytes from 192.168.80.2: icmp_seq=0 ttl=63 time=14.727 ms
64 bytes from 192.168.80.2: icmp_seq=1 ttl=63 time=2.671 ms
64 bytes from 192.168.80.2: icmp_seq=2 ttl=63 time=2.209 ms
64 bytes from 192.168.80.2: icmp_seq=3 ttl=63 time=2.963 ms
64 bytes from 192.168.80.2: icmp_seq=4 ttl=63 time=3.306 ms

--- 192.168.80.2 ping statistics ---


5 packets transmitted, 5 packets received, 0% packet loss
round-trip min/avg/max/stddev = 2.209/5.175/14.727/4.789 ms

[edit]
root@cnc2#

[edit]
root@cnc4# run ping 192.168.90.2 count 5 routing-instance vpncnc
PING 192.168.90.2 (192.168.90.2): 56 data bytes
64 bytes from 192.168.90.2: icmp_seq=0 ttl=63 time=14.421 ms
64 bytes from 192.168.90.2: icmp_seq=1 ttl=63 time=4.052 ms
64 bytes from 192.168.90.2: icmp_seq=2 ttl=63 time=4.367 ms
64 bytes from 192.168.90.2: icmp_seq=3 ttl=63 time=2.962 ms
64 bytes from 192.168.90.2: icmp_seq=4 ttl=63 time=5.776 ms

--- 192.168.90.2 ping statistics ---


5 packets transmitted, 5 packets received, 0% packet loss
round-trip min/avg/max/stddev = 2.962/6.316/14.421/4.151 ms

[edit]
root@cnc4#

------------------------------------------------------------------------------------------------
! How to check 6 (run show route) !
------------------------------------------------------------------------------------------------
[edit]
root@cnc1# run show route

inet.0: 8 destinations, 8 routes (8 active, 0 holddown, 0 hidden)


+ = Active Route, - = Last Active, * = Both

1.1.1.1/32 *[Direct/0] 01:28:56


> via lo0.0
5.5.5.5/32 *[OSPF/10] 00:05:01, metric 20
> to 192.168.10.2 via fxp0.0
192.168.10.0/24 *[Direct/0] 01:28:56
> via fxp0.0
192.168.10.1/32 *[Local/0] 01:28:56
Local via fxp0.0
192.168.80.0/24 *[Direct/0] 01:28:56
> via fxp2.0
192.168.80.1/32 *[Local/0] 01:28:56
Local via fxp2.0
192.168.90.0/24 *[OSPF/10] 00:05:01, metric 30
> to 192.168.10.2 via fxp0.0
224.0.0.5/32 *[OSPF/10] 01:28:59, metric 1
MultiRecv

__juniper_private2__.inet.0: 1 destinations, 1 routes (0 active, 0 holddown, 1 hidden)

[edit]
root@cnc1#

[edit]
root@cnc2# run show route

inet.0: 7 destinations, 7 routes (7 active, 0 holddown, 0 hidden)


+ = Active Route, - = Last Active, * = Both
2.2.2.2/32 *[Direct/0] 00:57:56
> via lo0.0
3.3.3.3/32 *[OSPF/10] 00:57:07, metric 10
> to 192.168.20.2 via fxp1.0
4.4.4.4/32 *[OSPF/10] 00:56:50, metric 1
> to 192.168.20.2 via fxp1.0, label-switched-path pe-cnc2-to-pe-cnc4
192.168.20.0/24 *[Direct/0] 00:57:56
> via fxp1.0
192.168.20.1/32 *[Local/0] 00:57:56
Local via fxp1.0
192.168.30.0/24 *[OSPF/10] 00:56:50, metric 11
> to 192.168.20.2 via fxp1.0, label-switched-path pe-cnc2-to-pe-cnc4
224.0.0.5/32 *[OSPF/10] 00:58:01, metric 1
MultiRecv

inet.3: 1 destinations, 1 routes (1 active, 0 holddown, 0 hidden)


+ = Active Route, - = Last Active, * = Both

4.4.4.4/32 *[RSVP/7] 00:56:45, metric 1


> to 192.168.20.2 via fxp1.0, label-switched-path pe-cnc2-to-pe-cnc4

__juniper_private2__.inet.0: 1 destinations, 1 routes (0 active, 0 holddown, 1 hidden)

vpncnc.inet.0: 7 destinations, 7 routes (7 active, 0 holddown, 0 hidden)


+ = Active Route, - = Last Active, * = Both

1.1.1.1/32 *[OSPF/10] 00:03:32, metric 10


> to 192.168.10.1 via fxp0.0
5.5.5.5/32 *[BGP/170] 00:03:38, MED 10, localpref 100, from 4.4.4.4
AS path: I
> to 192.168.20.2 via fxp1.0, label-switched-path pe-cnc2-to-pe-cnc4
192.168.10.0/24 *[Direct/0] 00:03:45
> via fxp0.0
192.168.10.2/32 *[Local/0] 00:03:45
Local via fxp0.0
192.168.80.0/24 *[OSPF/10] 00:03:32, metric 20
> to 192.168.10.1 via fxp0.0
192.168.90.0/24 *[BGP/170] 00:03:38, MED 20, localpref 100, from 4.4.4.4
AS path: I
> to 192.168.20.2 via fxp1.0, label-switched-path pe-cnc2-to-pe-cnc4
224.0.0.5/32 *[OSPF/10] 00:03:47, metric 1
MultiRecv

mpls.0: 4 destinations, 4 routes (4 active, 0 holddown, 0 hidden)


+ = Active Route, - = Last Active, * = Both

0 *[MPLS/0] 00:58:00, metric 1


Receive
1 *[MPLS/0] 00:58:00, metric 1
Receive
2 *[MPLS/0] 00:58:00, metric 1
Receive
17 *[VPN/0] 00:03:47
to table vpncnc.inet.0, Pop

bgp.l3vpn.0: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden)


+ = Active Route, - = Last Active, * = Both

100:1:5.5.5.5/32
*[BGP/170] 00:03:38, MED 10, localpref 100, from 4.4.4.4
AS path: I
> to 192.168.20.2 via fxp1.0, label-switched-path pe-cnc2-to-pe-cnc4
100:1:192.168.90.0/24
*[BGP/170] 00:03:38, MED 20, localpref 100, from 4.4.4.4
AS path: I
> to 192.168.20.2 via fxp1.0, label-switched-path pe-cnc2-to-pe-cnc4
[edit]
root@cnc2#

[edit]
root@cnc3# run show route

inet.0: 8 destinations, 8 routes (8 active, 0 holddown, 0 hidden)


+ = Active Route, - = Last Active, * = Both

2.2.2.2/32 *[OSPF/10] 01:44:33, metric 10


> to 192.168.20.1 via fxp1.0
3.3.3.3/32 *[Direct/0] 01:46:32
> via lo0.0
4.4.4.4/32 *[OSPF/10] 01:45:12, metric 10
> to 192.168.30.2 via fxp0.0
192.168.20.0/24 *[Direct/0] 01:46:32
> via fxp1.0
192.168.20.2/32 *[Local/0] 01:46:32
Local via fxp1.0
192.168.30.0/24 *[Direct/0] 01:46:32
> via fxp0.0
192.168.30.1/32 *[Local/0] 01:46:32
Local via fxp0.0
224.0.0.5/32 *[OSPF/10] 01:46:41, metric 1
MultiRecv

__juniper_private2__.inet.0: 1 destinations, 1 routes (0 active, 0 holddown, 1 hidden)

mpls.0: 7 destinations, 7 routes (7 active, 0 holddown, 0 hidden)


+ = Active Route, - = Last Active, * = Both

0 *[MPLS/0] 01:46:40, metric 1


Receive
1 *[MPLS/0] 01:46:40, metric 1
Receive
2 *[MPLS/0] 01:46:40, metric 1
Receive
100000 *[RSVP/7] 01:44:20, metric 1
> to 192.168.20.1 via fxp1.0, label-switched-path pe-cnc4-to-pe-cnc2
100000(S=0) *[RSVP/7] 01:44:20, metric 1
> to 192.168.20.1 via fxp1.0, label-switched-path pe-cnc4-to-pe-cnc2
100016 *[RSVP/7] 01:44:14, metric 1
> to 192.168.30.2 via fxp0.0, label-switched-path pe-cnc2-to-pe-cnc4
100016(S=0) *[RSVP/7] 01:44:14, metric 1
> to 192.168.30.2 via fxp0.0, label-switched-path pe-cnc2-to-pe-cnc4

[edit]
root@cnc3#

[edit]
root@cnc4# run show route

inet.0: 7 destinations, 7 routes (7 active, 0 holddown, 0 hidden)


+ = Active Route, - = Last Active, * = Both

2.2.2.2/32 *[OSPF/10] 01:20:52, metric 1


> to 192.168.30.1 via fxp0.0, label-switched-path pe-cnc4-to-pe-cnc2
3.3.3.3/32 *[OSPF/10] 01:21:31, metric 10
> to 192.168.30.1 via fxp0.0
4.4.4.4/32 *[Direct/0] 01:22:25
> via lo0.0
192.168.20.0/24 *[OSPF/10] 01:20:43, metric 11
> to 192.168.30.1 via fxp0.0, label-switched-path pe-cnc4-to-pe-cnc2
192.168.30.0/24 *[Direct/0] 01:22:25
> via fxp0.0
192.168.30.2/32 *[Local/0] 01:22:25
Local via fxp0.0
224.0.0.5/32 *[OSPF/10] 01:22:32, metric 1
MultiRecv
inet.3: 1 destinations, 1 routes (1 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both

2.2.2.2/32 *[RSVP/7] 01:20:47, metric 1


> to 192.168.30.1 via fxp0.0, label-switched-path pe-cnc4-to-pe-cnc2

__juniper_private2__.inet.0: 1 destinations, 1 routes (0 active, 0 holddown, 1 hidden)

vpncnc.inet.0: 7 destinations, 7 routes (7 active, 0 holddown, 0 hidden)


+ = Active Route, - = Last Active, * = Both

1.1.1.1/32 *[BGP/170] 00:05:38, MED 10, localpref 100, from 2.2.2.2


AS path: I
> to 192.168.30.1 via fxp0.0, label-switched-path pe-cnc4-to-pe-cnc2
5.5.5.5/32 *[OSPF/10] 00:05:45, metric 10
> to 192.168.40.2 via fxp2.0
192.168.40.0/24 *[Direct/0] 00:05:59
> via fxp2.0
192.168.40.1/32 *[Local/0] 00:05:59
Local via fxp2.0
192.168.80.0/24 *[BGP/170] 00:05:38, MED 20, localpref 100, from 2.2.2.2
AS path: I
> to 192.168.30.1 via fxp0.0, label-switched-path pe-cnc4-to-pe-cnc2
192.168.90.0/24 *[OSPF/10] 00:05:45, metric 20
> to 192.168.40.2 via fxp2.0
224.0.0.5/32 *[OSPF/10] 00:06:00, metric 1
MultiRecv

mpls.0: 4 destinations, 4 routes (4 active, 0 holddown, 0 hidden)


+ = Active Route, - = Last Active, * = Both

0 *[MPLS/0] 01:22:31, metric 1


Receive
1 *[MPLS/0] 01:22:31, metric 1
Receive
2 *[MPLS/0] 01:22:31, metric 1
Receive
17 *[VPN/0] 00:06:00
to table vpncnc.inet.0, Pop

bgp.l3vpn.0: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden)


+ = Active Route, - = Last Active, * = Both

100:1:1.1.1.1/32
*[BGP/170] 00:05:38, MED 10, localpref 100, from 2.2.2.2
AS path: I
> to 192.168.30.1 via fxp0.0, label-switched-path pe-cnc4-to-pe-cnc2
100:1:192.168.80.0/24
*[BGP/170] 00:05:38, MED 20, localpref 100, from 2.2.2.2
AS path: I
> to 192.168.30.1 via fxp0.0, label-switched-path pe-cnc4-to-pe-cnc2

[edit]
root@cnc4#

[edit]
root@cnc5# run show route

inet.0: 8 destinations, 8 routes (8 active, 0 holddown, 0 hidden)


+ = Active Route, - = Last Active, * = Both

1.1.1.1/32 *[OSPF/10] 00:04:16, metric 20


> to 192.168.40.1 via fxp2.0
5.5.5.5/32 *[Direct/0] 01:00:33
> via lo0.0
192.168.40.0/24 *[Direct/0] 01:00:33
> via fxp2.0
192.168.40.2/32 *[Local/0] 01:00:33
Local via fxp2.0
192.168.80.0/24 *[OSPF/10] 00:04:16, metric 30
> to 192.168.40.1 via fxp2.0
192.168.90.0/24 *[Direct/0] 01:00:33
> via fxp4.0
192.168.90.1/32 *[Local/0] 01:00:33
Local via fxp4.0
224.0.0.5/32 *[OSPF/10] 01:00:34, metric 1
MultiRecv

__juniper_private2__.inet.0: 1 destinations, 1 routes (0 active, 0 holddown, 1 hidden)

[edit]
root@cnc5#
------------------------------------------------------------------------------------------------
! How to check 6 (run show route table vpncnc.inet.0) !
------------------------------------------------------------------------------------------------
[edit]
root@cnc2# run show route table vpncnc.inet.0

vpncnc.inet.0: 7 destinations, 7 routes (7 active, 0 holddown, 0 hidden)


+ = Active Route, - = Last Active, * = Both

1.1.1.1/32 *[OSPF/10] 00:06:30, metric 10


> to 192.168.10.1 via fxp0.0
5.5.5.5/32 *[BGP/170] 00:06:36, MED 10, localpref 100, from 4.4.4.4
AS path: I
> to 192.168.20.2 via fxp1.0, label-switched-path pe-cnc2-to-pe-cnc4
192.168.10.0/24 *[Direct/0] 00:06:43
> via fxp0.0
192.168.10.2/32 *[Local/0] 00:06:43
Local via fxp0.0
192.168.80.0/24 *[OSPF/10] 00:06:30, metric 20
> to 192.168.10.1 via fxp0.0
192.168.90.0/24 *[BGP/170] 00:06:36, MED 20, localpref 100, from 4.4.4.4
AS path: I
> to 192.168.20.2 via fxp1.0, label-switched-path pe-cnc2-to-pe-cnc4
224.0.0.5/32 *[OSPF/10] 00:06:45, metric 1
MultiRecv

[edit]
root@cnc2#

[edit]
root@cnc4# run show route table vpncnc.inet.0

vpncnc.inet.0: 7 destinations, 7 routes (7 active, 0 holddown, 0 hidden)


+ = Active Route, - = Last Active, * = Both

1.1.1.1/32 *[BGP/170] 00:09:07, MED 10, localpref 100, from 2.2.2.2


AS path: I
> to 192.168.30.1 via fxp0.0, label-switched-path pe-cnc4-to-pe-cnc2
5.5.5.5/32 *[OSPF/10] 00:09:14, metric 10
> to 192.168.40.2 via fxp2.0
192.168.40.0/24 *[Direct/0] 00:09:28
> via fxp2.0
192.168.40.1/32 *[Local/0] 00:09:28
Local via fxp2.0
192.168.80.0/24 *[BGP/170] 00:09:07, MED 20, localpref 100, from 2.2.2.2
AS path: I
> to 192.168.30.1 via fxp0.0, label-switched-path pe-cnc4-to-pe-cnc2
192.168.90.0/24 *[OSPF/10] 00:09:14, metric 20
> to 192.168.40.2 via fxp2.0
224.0.0.5/32 *[OSPF/10] 00:09:29, metric 1
MultiRecv

[edit]
root@cnc4#
------------------------------------------------------------------------------------------------
! How to check 7 (run show route table bgp.l3vpn.0) !
------------------------------------------------------------------------------------------------
[edit]
root@cnc2# run show route table bgp.l3vpn.0

bgp.l3vpn.0: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden)


+ = Active Route, - = Last Active, * = Both

100:1:5.5.5.5/32
*[BGP/170] 00:07:03, MED 10, localpref 100, from 4.4.4.4
AS path: I
> to 192.168.20.2 via fxp1.0, label-switched-path pe-cnc2-to-pe-cnc4
100:1:192.168.90.0/24
*[BGP/170] 00:07:03, MED 20, localpref 100, from 4.4.4.4
AS path: I
> to 192.168.20.2 via fxp1.0, label-switched-path pe-cnc2-to-pe-cnc4

[edit]
root@cnc2#

[edit]
root@cnc4# run show route table bgp.l3vpn.0

bgp.l3vpn.0: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden)


+ = Active Route, - = Last Active, * = Both

100:1:1.1.1.1/32
*[BGP/170] 00:09:55, MED 10, localpref 100, from 2.2.2.2
AS path: I
> to 192.168.30.1 via fxp0.0, label-switched-path pe-cnc4-to-pe-cnc2
100:1:192.168.80.0/24
*[BGP/170] 00:09:55, MED 20, localpref 100, from 2.2.2.2
AS path: I
> to 192.168.30.1 via fxp0.0, label-switched-path pe-cnc4-to-pe-cnc2

[edit]
root@cnc4#
------------------------------------------------------------------------------------------------
! How to check 8 (run show route table bgp.l3vpn.0 detai []) !
------------------------------------------------------------------------------------------------
[edit]
root@cnc2# run show route table bgp.l3vpn.0 detail 192.168.90.0/24

bgp.l3vpn.0: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden)


100:1:192.168.90.0/24 (1 entry, 0 announced)
*BGP Preference: 170/-101
Route Distinguisher: 100:1
Next hop type: Indirect
Next-hop reference count: 6
Source: 4.4.4.4
Next hop type: Router, Next hop index: 422
Next hop: 192.168.20.2 via fxp1.0 weight 0x1, selected
Label-switched-path pe-cnc2-to-pe-cnc4
Label operation: Push 17, Push 100016(top)
Protocol next hop: 4.4.4.4
Push 17
Indirect next hop: 8967000 131070
State: <Active Int Ext>
Local AS: 100 Peer AS: 100
Age: 7:46 Metric: 20 Metric2: 1
Task: BGP_100.4.4.4.4+179
AS path: I
Communities: target:100:1 rte-type:0.0.0.0:1:0
VPN Label: 17
Localpref: 100
Router ID: 4.4.4.4
Secondary Tables: vpncnc.inet.0
[edit]
root@cnc2#

[edit]
root@cnc4# run show route table bgp.l3vpn.0 detail 192.168.80.0/24

bgp.l3vpn.0: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden)


100:1:192.168.80.0/24 (1 entry, 0 announced)
*BGP Preference: 170/-101
Route Distinguisher: 100:1
Next hop type: Indirect
Next-hop reference count: 6
Source: 2.2.2.2
Next hop type: Router, Next hop index: 422
Next hop: 192.168.30.1 via fxp0.0 weight 0x1, selected
Label-switched-path pe-cnc4-to-pe-cnc2
Label operation: Push 17, Push 100000(top)
Protocol next hop: 2.2.2.2
Push 17
Indirect next hop: 89a4000 131070
State: <Active Int Ext>
Local AS: 100 Peer AS: 100
Age: 11:25 Metric: 20 Metric2: 1
Task: BGP_100.2.2.2.2+2470
AS path: I
Communities: target:100:1 rte-type:0.0.0.0:1:0
VPN Label: 17
Localpref: 100
Router ID: 2.2.2.2
Secondary Tables: vpncnc.inet.0

[edit]
root@cnc4#
------------------------------------------------------------------------------------------------
! How to check 9 (run show route table mpls protocol vpn detail) !
------------------------------------------------------------------------------------------------
[edit]
root@cnc2# run show route table mpls protocol vpn detail

mpls.0: 4 destinations, 4 routes (4 active, 0 holddown, 0 hidden)


17 (1 entry, 0 announced)
*VPN Preference: 0
Next table: vpncnc.inet.0
Label operation: Pop
Next-hop reference count: 1
State: <Active NotInstall Int Ext>
Age: 9:04
Task: RT
AS path: I

[edit]
root@cnc2

[edit]
root@cnc4# run show route table mpls protocol vpn detail

mpls.0: 4 destinations, 4 routes (4 active, 0 holddown, 0 hidden)


17 (1 entry, 0 announced)
*VPN Preference: 0
Next table: vpncnc.inet.0
Label operation: Pop
Next-hop reference count: 1
State: <Active NotInstall Int Ext>
Age: 13:26
Task: RT
AS path: I

[edit]
root@cnc4#
------------------------------------------------------------------------------------------------
! How to check 10 (ping from Custumer to Custumer)
------------------------------------------------------------------------------------------------

"Sekian dulu, semoga bermanfaat dan salam sedogedoi", saya mau belajar lagi teorinya T_T, kalau
ada yang keliru tolong beritahu saya, terima kasih... @_@ “CMIIW”

Das könnte Ihnen auch gefallen