Lab51. MPLS VPN

topologiDalam artikel ini adalah sambungan dari artikel saya sebelumnya mengenai MPLS Backbone jadi harap menyesuaikan saja. Dan sebelum membaca tulisan saya yang acak acakan bisa membaca sedikit mengenai VRF

Dalam konfigurasi di artikel ini terbagi menjadi beberapa tahapan sebagai berikut.
Pada PE Router:

A.1 Membuat VRF
A.2 Mengkonfigurasi IP Address & VRF pada PE yang menuju CE
A.3 Mengaktifkan MP-BGP
A.4 Menambahkan routing PE-CE

Pada CE Router:

B.1 Konfigurasikan IP Address CE
B.2 Konfigurasi Default Route

A.1 Membuat VRF
Sekilas tentang VRF itu sendiri

  • VRF (Virtual Routing Forwarding) diperlukan untuk setiap customer, misalnya terdapat 2 customer maka kita juga mengkonfigurasikan 2 VRF.
  • Virtual Router ini seolah-olah seperti masing-masing customer memiliki router sendiri yang mengatur trafik mereka melalui MPLS domain.
  • Masing-masing VRF memiliki identitas sendiri-sendiri untuk setiap customer
  • Karena VRF inilah, dimungkinkan customer berbeda namun memiliki IP Address yang sama dapat diakomodir menggunakan MPLS Network

Berikut langkah-langkahnya

Router PE1
ip vrf BCA.KIRI
 rd 65000:2
 route-target export 65000:2
 route-target import 65000:2
!
ip vrf BRI.KIRI
 rd 65000:1
 route-target export 65000:1
 route-target import 65000:1
============================
Router PE2
ip vrf BCA.KANAN
 rd 65000:2
 route-target export 65000:2
 route-target import 65000:2
!
ip vrf BRI.KANAN
 rd 65000:1
 route-target export 65000:1
 route-target import 65000:1

Pada masing-masing PE terdapat 2 customer contohnya di PE1 BRI dan BCA, maka kita membuat 2 VRF yang bernama VRF BRI.KIRI dan VRF BCA.KIRI
VRF memiliki 2 komponen utama yakni:
RD (Route Distinguisher)

  • RD merupakan identitas dari sebuah VRF
  • Setiap Customer memiliki VRF sendiri sendiri
  • Penulisan RD dapat dituliskan seperti format berikut

16-bit AS Number : 32-bit numer -> contoh : 65000:1
32-bit IP Address : 15-bit number -> contoh : 192.168.0.1:1

RT (Route Target)

  • RT digunakan untuk menentukan route yang mana yang akan di import ke dalam VRF dan menentukan route yang mana yang akan di export
  • Sifatnya seperti routing policy
  • Format penulisanya seperti RD

A.2 Konfigurasi IP Address & VRF pada PE yang menuju CE
Setelah VRF dikonfigurasikan, maka kita bisa mengkonfigurasi IP Address yang sama pada beberapa interface router. Tanpa VRF pada router tidak bisa dikonfigurasikan IP Address yang sama kecuali di bridging.

============================
Router PE1
interface FastEthernet0/0
 description ### Link to BRI ###
 ip vrf forwarding BRI.KIRI
 ip address 19.168.0.1 255.255.255.252
!
interface FastEthernet0/1
 description ### Link to BRI ###
 ip vrf forwarding BCA.KIRI
 ip address 192.168.0.1 255.255.255.252
============================
Router PE2
interface FastEthernet0/0
 description ### Link to BRI ###
 ip vrf forwarding BRI.KANAN
 ip address 192.168.0.5 255.255.255.252
!
interface FastEthernet0/1
 description ### Link to BCA ###
 ip vrf forwarding BCA.KANAN
 ip address 192.168.0.5 255.255.255.252
============================

Verifikasi di Router PE1 & PE2

#sh ip vrf
#sh ip vrf int

A.3 Mengaktifkan MP-BGP
MP-BGP (Multi Protocol BGP) digunakan untuk membawa informasi routing, IPV4 prefixes, VPN Customer dll menuju PE router lainya.

A.3.1 Konfigurasi MP-BGP untuk VPN

===========================
Mengaktifkan MP-BGP
===========================
Router PE1
router bgp 65000
 neighbor 10.10.10.2 remote-as 65000
 !
 address-family vpnv4
  neighbor 10.10.10.2 activate
===========================
Router PE2
router bgp 65000
 neighbor 10.10.10.1 remote-as 65000
 !
 address-family vpnv4
  neighbor 10.10.10.1 activate

A.3.2 Konfigurasi Routing PE-CE
Routing Protocol yang digunakan pada koneksi router PE dan CE ada beberapa pilihan antara lain :
1) Static
2) RIPv2
3) EIGRP
4) OSPF
5) BGP

Perlu diperhatikan konfigurasi dibawah bukanlah konfigurasi continue, pilih salah satu jangan semuanya.

===========================
MPLS VPN - PE CE Static Routing 
===========================
Router PE1
ip route vrf BRI.KIRI 10.0.0.1 255.255.255.255 192.168.0.2
!
router bgp 65000
 !        
 address-family ipv4 vrf BRI.KIRI
  redistribute connected
  redistribute static
============================
Router PE2
ip route vrf BRI.KANAN 10.0.0.2 255.255.255.255 192.168.0.6
router bgp 65000
 address-family ipv4 vrf BRI.KANAN
  redistribute connected
  redistribute static
============================
Konfigurasi IP Address router CE
============================
Router CE-BRI1
interface Loopback0
 ip address 10.0.0.1 255.255.255.255
!
interface FastEthernet0/0
 description ### Link to MPLS ###
 ip address 192.168.0.2 255.255.255.252
ip route 0.0.0.0 0.0.0.0 192.168.0.1
============================
Router CE-BRI2
interface Loopback0
 ip address 10.0.0.2 255.255.255.255
!
interface FastEthernet0/0
 description ### Link to MPLS ###
 ip address 192.168.0.6 255.255.255.252
ip route 0.0.0.0 0.0.0.0 192.168.0.5
============================
============================
MPLS VPN - PE CE RIP Routing
============================
Router PE1
router rip
 version 2
 !
 address-family ipv4 vrf BCA.KIRI
  redistribute bgp 65000 metric transparent
  network 192.168.0.0
  no auto-summary
router bgp 65000
 address-family ipv4 vrf BCA.KIRI
  redistribute rip
============================
Router PE2
router rip
 version 2
 !
 address-family ipv4 vrf BCA.KANAN
  redistribute bgp 65000 metric transparent
  network 192.168.0.0
  no auto-summary
router bgp 65000
 address-family ipv4 vrf BCA.KANAN
  redistribute rip
============================
Router CE-BRI1
router rip
version 2
network 0.0.0.0 
no auto-summary
============================
Router CE-BRI2
router rip
version2
network 0.0.0.0
no aut0-summary
============================

============================
MPLS VPN - PE CE EIGRP routing
===========================
Router PE1
router eigrp 65000
 auto-summary
 !
 address-family ipv4 vrf BRI.KIRI
  redistribute bgp 65000 metric 1 1 1 1 1
  network 192.168.0.0
  auto-summary
  autonomous-system 100
router bgp 65000
 address-family ipv4 vrf BRI.KIRI
redistribute eigrp 100
===========================
Router PE2
router eigrp 65000
 auto-summary
 !
 address-family ipv4 vrf BRI.KANAN
  redistribute bgp 65000 metric 1 1 1 1 1
  network 192.168.0.0
  auto-summary
  autonomous-system 100
!
router bgp 65000
 address-family ipv4 vrf BRI.KANAN
redistribute eigrp 100
===========================
Router CE-BRI1
router eigrp 100
network 0.0.0.0
no auto-summary
===========================
Router CE-BRI2
router  eigrp 100
network 0.0.0.0
no auto-summary
===========================
===========================
MPLS VPN - PE CE BGP Routing
===========================
Router PE1
router bgp 65000
address-family 192.168.0.2 ipv4 vrf BCA.KIRI
neigh 192.168.0.2 remote-as 100
neigh 192.168.0.2 activate
neigh 192.168.0.2 as-override
============================
Router PE2
router bgp 65000
address-family ipv4 vrf BCA.KANAN
neigh 192.168.0.6 remote-as 100
neigh 192.168.0.6 activate
neigh 192.168.0.6 as-override
============================
Router CE-BCA1
router bgp 100
neigh 192.168.0.1 remote-as 65000
net 10.0.0.1 mask 255.255.255.255
============================
Router CE-BCA2
router bgp 100
neigh 192.168.0.5 remote-as 65000
net 10.0.0.2 mask 255.255.255.255
=============================
=============================
MPLS VPN - PE CE OSPF Routing
============================
Router PE1
router ospf 100 vrf BRI.KIRI
 log-adjacency-changes
 redistribute bgp 65000 subnets
 network 192.168.0.1 0.0.0.0 area 0
router bgp 65000
 address-family ipv4 vrf BRI.KIRI
  redistribute ospf 100 vrf BRI.KIRI match internal external 1 external 2
============================
Router PE2
router ospf 100 vrf BRI.KANAN
 log-adjacency-changes
 redistribute bgp 65000 subnets
 network 192.168.0.5 0.0.0.0 area 0
router bgp 65000
address-family ipv4 vrf BRI.KANAN
 redistribute ospf 100 vrf BRI.KANAN match internal external 1 external 2
=============================

2 thoughts on “Lab51. MPLS VPN

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.