Tujuan Lab :
- Menerapkan autentikasi antar routing IS-IS.
Topologi Lab :
Metode Lab :
- Set autentikasi pada R2 dan R3 dengan password idnmd5.
Verifikasi Lab :
- Pastikan semua IP loopback bisa di ping.
- Cek routing tabelnya, pastikan semua IP dan loopback router ada.
- Cek IS-IS database dan neighbornya.
- Cek di show run konfigurasi autentikasinya.
Konfigurasi
R3(config)#key chain idn
R3(config-keychain)#key 1
R3(config-keychain-key)#key-string idnmd5
R3(config)#int fa0/0
R3(config-if)#isis authentication mode md5 level-2
R3(config-if)#isis authentication key-chain idn
R2(config)#key chain idn
R2(config-keychain)#key 1
R2(config-keychain-key)#key-string idnmd5
R3(config)#int fa0/1
R3(config-if)#isis authentication mode md5 level-2
R3(config-if)#isis authentication key-chain idn
Verifikasi
Pastikan semua router bisa saling ping
R1#ping 2.2.2.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 20/31/56 ms R1#ping 3.3.3.3 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 3.3.3.3, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 16/47/76 ms R1#
Cek routing tabelnya pastikan semua IPnya sudah masuk
R3#sh ip route Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route Gateway of last resort is not set 1.0.0.0/32 is subnetted, 1 subnets i L2 1.1.1.1 [115/30] via 23.23.23.2, FastEthernet0/0 2.0.0.0/32 is subnetted, 1 subnets i L2 2.2.2.2 [115/20] via 23.23.23.2, FastEthernet0/0 3.0.0.0/32 is subnetted, 1 subnets C 3.3.3.3 is directly connected, Loopback0 23.0.0.0/24 is subnetted, 1 subnets C 23.23.23.0 is directly connected, FastEthernet0/0 12.0.0.0/24 is subnetted, 1 subnets i L2 12.12.12.0 [115/20] via 23.23.23.2, FastEthernet0/0 R3#
Pastikan semua interface dan protokol isis sudah adjaceny dengan baik.
R2#sh clns neighbor System Id Interface SNPA State Holdtime Type Protocol R1 Fa0/0 c00c.0bb0.0000 Up 27 L2 IS-IS R3 Fa0/1 c00e.0bb0.0000 Up 8 L2 IS-IS R2#