Lab 3. EIGRP – Filtering – Prefix List – In

-

Lab 3. EIGRP – Filtering – Prefix List – In

Filtering menggunakan prefix list dipilih bila kita ingin memfilter berdasarkan netmasknya, misal network pada R3 dengan prefix /24 - /28 akan diblok, selain itu akan ditampilkan. Berikut konfigurasinya.

Pertama konfigurasikan Ip dan routing eigrp

R1:
Router-1(config)#int g1/0
Router-1(config-if)#ip add 12.12.12.1 255.255.255.0
Router-1(config-if)#no shutdown
Router-1(config-if)#
Router-1(config-if)#router eigrp 10
Router-1(config-router)#network 12.12.12.0 0.0.0.255
Router-1(config-router)#no auto-summary
R2:
Router-2(config)#int g1/0
Router-2(config-if)#ip add 12.12.12.2 255.255.255.0
Router-2(config-if)#no shutdown
Router-2(config-if)#
Router-2(config-if)#int fa0/0
Router-2(config-if)#ip add 23.23.23.2 255.255.255.0
Router-2(config-if)#no shutdown
Router-2(config)#router eigrp 10
Router-2(config-router)#network 12.12.12.0 0.0.0.255
Router-2(config-router)#network 23.23.23.0 0.0.0.255
Router-2(config-router)#no auto-summary
Router-2(config-router)#
Buat beberapa IP Address dengan netmask yang bervariatif
R3:
Router-3(config)#int fa0/0
Router-3(config-if)#ip add 23.23.23.3 255.255.255.0
Router-3(config-if)#no shutdown
Router-3(config-if)#ex
!
Router-3(config)#int loopback 0
Router-33(config-if)#ip add 3.3.3.3 255.255.255.255
!
Router-3(config-if)#int loopback 1
Router-3(config-if)#ip add 3.3.3.17 255.255.255.240
!
Router-3(config-if)#int loopback 2
Router-3(config-if)#ip add 3.3.3.33 255.255.255.248
!
Router-3(config-if)#int loopback 3
Router-3(config-if)#ip add 3.3.3.100 255.255.255.224
!
Router-3(config-if)#int loopback 4
Router-3(config-if)#ip add 3.3.3.150 255.255.255.252
!
Router-3(config-if)#int loopback 5
Router-3(config-if)#ip add 3.3.3.200 255.255.255.240
!
Router-3(config)#router eigrp 10
Router-3(config-router)#network 0.0.0.0
Router-3(config-router)#no auto-summary

Setelah itu mari kita liat table route di R1
R1#sh ip route
1.0.0.0/32 is subnetted, 1 subnets
C       1.1.1.1 is directly connected, Loopback0
     3.0.0.0/8 is variably subnetted, 6 subnets, 5 masks
D       3.3.3.3/32 [90/156416] via 12.12.12.2, 02:33:14, GigabitEthernet1/0
D       3.3.3.16/28 [90/156416] via 12.12.12.2, 00:04:50, GigabitEthernet1/0
D       3.3.3.32/29 [90/156416] via 12.12.12.2, 00:04:50, GigabitEthernet1/0
D       3.3.3.96/27 [90/156416] via 12.12.12.2, 00:04:50, GigabitEthernet1/0
D       3.3.3.148/30 [90/156416] via 12.12.12.2, 00:04:50, GigabitEthernet1/0
D       3.3.3.192/28 [90/156416] via 12.12.12.2, 00:04:50, GigabitEthernet1/0
     23.0.0.0/24 is subnetted, 1 subnets
D       23.23.23.0 [90/28416] via 12.12.12.2, 02:37:58, GigabitEthernet1/0
     12.0.0.0/24 is subnetted, 1 subnets
C       12.12.12.0 is directly connected, GigabitEthernet1/0

Lalu R2 pun juga di cek
R2#sh ip route
     1.0.0.0/32 is subnetted, 1 subnets
D       1.1.1.1 [90/130816] via 12.12.12.1, 02:40:44, GigabitEthernet1/0
     2.0.0.0/32 is subnetted, 1 subnets
C       2.2.2.2 is directly connected, Loopback0
     3.0.0.0/8 is variably subnetted, 6 subnets, 5 masks
D       3.3.3.3/32 [90/156160] via 23.23.23.3, 02:35:40, FastEthernet0/0
D       3.3.3.16/28 [90/156160] via 23.23.23.3, 00:07:16, FastEthernet0/0
D       3.3.3.32/29 [90/156160] via 23.23.23.3, 00:07:16, FastEthernet0/0
D       3.3.3.96/27 [90/156160] via 23.23.23.3, 00:07:16, FastEthernet0/0
D       3.3.3.148/30 [90/156160] via 23.23.23.3, 00:07:16, FastEthernet0/0
D       3.3.3.192/28 [90/156160] via 23.23.23.3, 00:07:16, FastEthernet0/0
     23.0.0.0/24 is subnetted, 1 subnets
C       23.23.23.0 is directly connected, FastEthernet0/0
     12.0.0.0/24 is subnetted, 1 subnets
C       12.12.12.0 is directly connected, GigabitEthernet1/0

Setelah itu kita konfigurasikan prefix – list filtering pada R2

Router-2(config)#ip prefix-list EIGRP
Router-2(config)#ip prefix-list EIGRP_IN seq 10 deny 3.3.3.0/24 le 28
Router-2(config)#ip prefix-list EIGRP_IN seq 20 permit 0.0.0.0/0 le 32
Router-2(config)#router eigrp 10
Router-2(config-router)#distribute-list prefix EIGRP_IN in

Setelah kita mengkonfigurasikan prefix-list filtering maka semua network 3.3.3.x yang memiliki /24-/28 akan di deny pada R2 dan R1.

untuk mengeceknya, kita bisa melihat routing table di R2.

Router-2#sh ip route
     1.0.0.0/32 is subnetted, 1 subnets
D       1.1.1.1 [90/130816] via 12.12.12.1, 02:54:54, GigabitEthernet1/0
     2.0.0.0/32 is subnetted, 1 subnets
C       2.2.2.2 is directly connected, Loopback0
     3.0.0.0/8 is variably subnetted, 3 subnets, 3 masks
D       3.3.3.3/32 [90/156160] via 23.23.23.3, 02:49:50, FastEthernet0/0
D       3.3.3.32/29 [90/156160] via 23.23.23.3, 00:21:26, FastEthernet0/0
D       3.3.3.148/30 [90/156160] via 23.23.23.3, 00:21:26, FastEthernet0/0
     23.0.0.0/24 is subnetted, 1 subnets
C       23.23.23.0 is directly connected, FastEthernet0/0
     12.0.0.0/24 is subnetted, 1 subnets
C       12.12.12.0 is directly connected, GigabitEthernet1/0

Lakukan verifikasi pada R1 juga dan pastikan network 3.3.3.x yang memiliki /24-/28 sudah tidak ada dalam routing tabelnya.

Komentar

Posting Komentar

Postingan populer dari blog ini

Automation, Backup Config With Paramiko

-
Gambar
  Masih dengan  topologi  yang sama, kali ini akan melakukan backup config menggunakan automation! berikut adalah scriptnya: import paramiko import time      ip_address = "192.168.10.2" username = "fathan"   password = "fathanrafaa"      ssh_client = paramiko.SSHClient() ssh_client.set_missing_host_key_policy(paramiko.AutoAddPolicy()) ssh_client.connect(hostname=ip_address,username=username, password=password)      print "Success login to {0}".format(ip_address) conn = ssh_client.invoke_shell()      conn.send("terminal length 0\n")   conn.send("show run\n") time.sleep(5)     output = conn.recv(65535)     output_file=open("{0}.cfg".format(ip_address),"w") output_file.write(output)  output_file.close()   print "Config in {0} saved!!".format(ip_address)    ssh_client.close()   Kemudian kita input kedalam ubuntu. ...
Baca selengkapnya