Beruflich Dokumente
Kultur Dokumente
line console 0
login local
Semua MLS
login local
line console 0
login local
- Remote Management
ip domain-name jakarta.id
line vty 0
login local
transport input ssh
access-class 55 in
line vty 1 4
transport input none
access-list 55 permit 172.18.12.20 0.0.0.3
RTR-SRV-FARM
R-EDGE-L
redistribute ospf 99
R-EDGE-L
no auto-summary
R-CORE-2
R-CORE-1
no auto-summary
router ospf 1
router-id 1.1.1.1
redistribute eigrp 100 subnets
R-CORE-3
interface FastEthernet0/0
ip ospf authentication message-digest
interface FastEthernet0/1
ip ospf authentication message-digest
router ospf 3
router-id 2.2.2.2
network 112.176.24.16 0.0.0.3 area 0
R-EDGE-R
interface FastEthernet0/0
router ospf 1
router-id 3.3.3.3
R-EDGE-L
interface Tunnel101
router ospf 99
redistribute bgp 64515 subnets
R-EDGE-R
router ospf 99
network 192.168.123.100 0.0.0.3 area 99
network 112.131.46.96 0.0.0.3 area 99
R-EDGE-L
interface Serial0/0/0
encapsulation frame-relay
frame-relay interface-dlci 102
RTR-HQ
interface Serial0/0/0
encapsulation frame-relay
RTR-BR1
interface Serial0/0/0
encapsulation frame-relay
frame-relay interface-dlci 301
- Jaringan PPP
RTR-BR2
R-EDGE-R
interface Serial0/0/0
encapsulation ppp
- Default Route
RTR-BR2
RTR-HQ
RTR-BR1
- Spesial Route
RTR-HQ
- SRV FARM
MLS-SRV
vlan 10
name SRV-RADIUS
vlan 20
name SRV-DHCP
vlan 30
name SRV-WEB
vlan 40
name SRV-DNS
vlan 50
name TLP
vlan 60
name PC-Admin
interface FastEthernet0/1
switchport access vlan 10
spanning-tree portfast
interface FastEthernet0/2
spanning-tree portfast
interface FastEthernet0/3
interface FastEthernet0/4
interface FastEthernet0/6
switchport access vlan 60
spanning-tree portfast
interface Vlan10
interface Vlan20
ip address 172.18.12.5 255.255.255.252
interface Vlan30
ip address 172.18.12.9 255.255.255.252
interface Vlan60
ip address 172.18.12.21 255.255.255.252
ip helper-address 172.18.12.6
RTR-HQ
interface Tunnel201
RTR-SRV-FARM
interface Tunnel200
ip address 192.168.55.61 255.255.255.252
tunnel source FastEthernet0/0
RTR-HQ
interface Tunnel144
ip address 192.168.66.201 255.255.255.252
tunnel source Serial0/0/0
interface Tunnel145
RTR-SRV-FARM
interface Tunnel1001
RTR-BR2
interface Tunnel1002
- Switching HQ
MLS1
vlan 99
name Remote
vlan 110
name LAN
vlan 120
name TLP
vlan 130
name Wireless
interface Vlan1
ip address 172.16.148.61 255.255.255.252
no shutdown
interface Vlan99
ip address 172.16.99.1 255.255.255.248
interface Vlan110
ip routing
interface FastEthernet0/2
interface FastEthernet0/3
interface FastEthernet0/6
switchport trunk encapsulation dot1q
MLS2
interface FastEthernet0/1
interface Vlan99
ip address 172.16.99.2 255.255.255.248
ip default-gateway 172.16.99.1
MLS3
interface FastEthernet0/1
interface FastEthernet0/3
switchport trunk encapsulation dot1q
interface FastEthernet0/5
interface Vlan99
MLS4
interface FastEthernet0/1
interface FastEthernet0/3
interface FastEthernet0/4
switchport trunk encapsulation dot1q
interface FastEthernet0/5
switchport trunk encapsulation dot1q
interface Vlan99
ip address 172.16.99.4 255.255.255.248
ip default-gateway 172.16.99.1
SW-ACC1
interface FastEthernet0/1
interface FastEthernet0/2
switchport mode trunk
interface FastEthernet0/3
switchport access vlan 110
interface FastEthernet0/4
interface FastEthernet0/5
switchport access vlan 110
spanning-tree portfast
interface FastEthernet0/6
switchport access vlan 110
interface FastEthernet0/7
interface Vlan99
ip default-gateway 172.16.99.1
SW-ACC2
interface FastEthernet0/1
interface FastEthernet0/2
switchport mode trunk
interface FastEthernet0/3
channel-group 1 mode on
interface FastEthernet0/4
channel-group 1 mode on
interface Vlan99
ip address 172.16.99.6 255.255.255.248
ip default-gateway 172.16.99.1
TLP-GW-1
interface FastEthernet0/0
channel-group 48
interface FastEthernet0/1
channel-group 48
- Switching Branch 1
SW1-BR1
vlan 99
name Remote
vlan 110
name AP-Lantai-1-Marketing
vlan 210
name AP-Lantai-2-Manager
vlan 200
name LAN
vlan 250
name TLP
vlan 251
name TLP-GW
vtp mode server
interface Port-channel1
switchport access vlan 251
interface FastEthernet0/1
switchport mode trunk
interface FastEthernet0/2
interface FastEthernet0/3
switchport access vlan 200
spanning-tree portfast
interface FastEthernet0/4
switchport access vlan 99
spanning-tree portfast
interface FastEthernet0/5
channel-group 1 mode on
interface FastEthernet0/6
interface Vlan99
ip default-gateway 10.99.99.254
SW2-BR1
interface FastEthernet0/1
spanning-tree portfast
interface FastEthernet0/3
interface Vlan99
ip default-gateway 10.99.99.254
- Switching Branch 2
SW-BR2
vlan 10
vlan 20
interface FastEthernet0/1
switchport mode trunk
interface FastEthernet0/2
interface FastEthernet0/3
switchport access vlan 10
spanning-tree portfast
interface FastEthernet0/4
switchport access vlan 20
spanning-tree portfast
MLS-SRV
router ospf 1
RTR-SRV-FARM
router ospf 1
network 192.168.101.0 0.0.0.3 area 0
network 192.168.55.60 0.0.0.3 area 0
RTR-HQ
router ospf 1
network 192.168.44.108 0.0.0.3 area 0
MLS1
router ospf 1
RTR-BR1
router ospf 1
RTR-BR2
router ospf 1
network 172.51.10.0 0.0.0.7 area 0
network 172.51.20.0 0.0.0.3 area 0
- Wireless Branch 1
Pada AP Branch 1, setting controller ke ip WLC, yaitu 10.99.99.100
Pada WLC-BRANCH1, buat wireless LAN dengan identitas sesuai di soal, dengan central
control : Local switching, central authentication.
Buat AP Groups sesuai di soal dengan memasukkan access point AP Branch 1 ke dalam group
“ahmad123”
Konekan Laptop Ani ke SSID Lantai 2 Manager dengan user “ani” dan password “ani123”
- Telephony Service
Cukup konfigurasikan Etherchannel pada masing masing Telephony gateway yang sudah
- NAT SRV-FARM
MLS-SRV
interface FastEthernet0/0
ip nat outside
interface FastEthernet0/1
ip nat inside
MLS1
RTR-HQ
interface FastEthernet0/0
ip nat outside
interface FastEthernet0/1
ip nat inside
interface Serial0/0/0
ip nat outside
RTR-BR1
interface FastEthernet0/0.110
ip nat inside
interface FastEthernet0/0.200
ip nat inside
interface FastEthernet0/0.210
ip nat inside
RTR-BR2
interface FastEthernet0/0.10
ip nat inside
interface FastEthernet0/0.20
ip nat outside
interface Serial0/0/0
ip nat outside
- Wireless HQ
Setting AP Karyawan dengan router ip 192.168.66.1 dan subnet mask 255.255.255.240, start ip
address 192.168.166.2, maximum number of users 5. dns server 172.18.12.14
Bagian menu wireless --> Basic wireless setting, SSID KarYawanHQ, Standard channel 7
Bagian menu wireless --> Wireless security, mode WPA enterprise, Encryption TKIP, Radius
server 172.18.12.2
MLS1
interface Vlan110
ip helper-address 172.18.12.6
interface Vlan120
ip helper-address 172.18.12.6
RTR-BR1
interface FastEthernet0/0.110
ip helper-address 172.18.12.6
interface FastEthernet0/0.200
ip helper-address 172.18.12.6
interface FastEthernet0/0.210
ip helper-address 172.18.12.6
interface FastEthernet0/0.250
ip helper-address 172.18.12.6
- Default Route