No Exp : 01 | “Dedicated Router” | Kelompok 6 |
Mata Pel : Diagnosa WAN | Kelas : 3 TKJ B | |
Jurusan : TKJ | Inst : Bpk. Rudi H Ibu Netty |
Anggota Kelompok :
· Aziz Noor Sapto Ramdhani (04)
· Faishal Arif Utomo (09)
· Ghulam Fakih (14)
· Hutami Widyastuti (16)
1. Tujuan
· Agar siswa dapat mengerti pengertian, fungsi, dan penggunaan dari Dedicated router
· Agar siswa dapat mengelompokan sendiri mana router yang dapat di gunakan untuk Core Layer, Distributte Layer, dan Access Layer.
· Agar siswa dapat mengkonfigurasi router tersebut.
2. Pendahuluan
Router adalah sebuah alat jaringan komputer yang mengirimkan paket data melalui sebuah jaringan atau Internet menuju tujuannya, melalui sebuah proses yang dikenal sebagai routing. Proses routing terjadi pada lapisan 3 (Lapisan jaringan seperti Internet Protocol) dari stack protokol tujuh-lapis OSI. Sementara itu fungsi sedeerhana dari sebuah router adalah sebagai penghubung antar dua atau lebih jaringan untuk meneruskan data dari satu jaringan ke jaringan lainnya. Router berbeda dengan switch. Switch merupakan penghubung beberapa alat untuk membentuk suatu Local Area Network (LAN).
Setelah kita mengetahui tentang pengertian dan fungsi dari router itu sendiri, sekarang kita memasuki pada pokok pembahasan yaiteu te
ntang Dedicated Router. Dedicated router adalah perangkat router yang dibuat dengan desain dan fungsi router oleh vendor. Contoh: Cisco Router.
Hierarki Picture
1. Core Layer
Menurut sumber yang telah saya baca dan terjemahkan jadi lapisan ini dianggap sebagai tulang punggung jaringan dan termasuk high-end switch dan kabel berkecepatan tinggi seperti fiber optic dan lapisan inti bertanggung jawab untuk cepat dan transportasi data dapat diandalkan di seluruh jaringan. Pada core layer keefektivitasan adalah kuncinya. Sistem yang lebih sedikit dan lebih cepat menciptakan backbone yang lebih efisien. Ada beberapa peralatan yang tersedian dalam layer ini. Contoh peralatan core layer Cisco meliputi:
· Cisco switches seperti 7000, 7200, 7500, and 12000 (dipakai dalam WAN)
· Catalyst switches seperti 6000, 5000, dan 4000 (dipakain dalam LAN)
· T-1 and E-1 lines, Frame relay connections, jaringan ATM, Switched Multimegabit Data Service (SMDS)
- Provides up to twice the performance compared to the Cisco 7301—up to two million packets per second (mpps) in Cisco Express Forwarding (CEF)
- Offers four built-in Gigabit Ethernet (GE) ports
- Provides one dedicated 10/100-Mbps copper Ethernet port for management
- Provides one USB port for general storage and security token storage
- Provides a single Cisco 7000 Series port adapter slot
- Offers front-to-back airflow and single-sided management
Cisco rotuer 7201
2. Distribution Layer
Lapisan ini mencakup LAN berbasis router dan layer 3 switch. Lapisan ini memastikan bahwa paket yang benar diarahkan antara subnet dan VLAN di perusahaan anda. Lapisan ini juga disebut lapisan Workgroup .Lapisan ini bertanggung jawab atas routing. Juga menyediakan konektivitas jaringan berbasis pada kebijakan, termasuk:
- Packet filtering (firewalling)
- QoS
- Access Layer Aggregation Point
- Control Broadcast and Multicast
- Application Gateways
Lapisan ini juga melakukan antrian dan menyediakan manipulasi paket data dari lalu lintas jaringan.
Hal ini di lapisan di mana kita mulai melakukan kontrol atas transmisi jaringan, termasuk apa yang masuk dan apa yang keluar dari jaringan. Kita juga akan membatasi dan menciptakan broadcast domain, menciptakan virtual LAN, jika perlu, dan melakukan berbagai tugas pengelolaan, termasuk mendapatkan ringkasan rute. Dalam ringkasan rute, kita menggabungkan lalu lintas dari subnet banyak ke dalam koneksi jaringan inti. Dalam router Cisco, perintah untuk mendapatkan ringkasan routing adalah:
show ip route summary (menunjukkan ringkasan ip route)
Contoh peralatan pada layer ini Cisco-spesifik lapisan termasuk 2600,4000, 4500 router series,
Cisco Catalyst 6500 Series Switches
Supports all Cisco Catalyst 6500 Series modules, including:Supervisor enginesFast Ethernet modules (with IEEE 802.3af Power over Ethernet [PoE])Gigabit Ethernet modules (with IEEE 802.3af PoE)10 Gigabit Ethernet modulesFlex WAN modulesShared Port Adaptors/SPA Interface ProcessorsMulti-Gigabit services modules (content services ,firewall, intrusion detection, IP Security [IPSec], VPN, network analysis, and Secure Sockets Layer [SSL] acceleration).
Cisco Catalyst 6513 Switch
3. Access Layer
Lapisan ini meliputi hub dan switch. Lapisan ini juga disebut lapisan desktop karena berfokus pada node klien yang terhubung, seperti workstation ke jaringan. Lapisan ini memastikan bahwa paket yang dikirim ke komputer pengguna akhir.
Access layer berisi perangkat yang memungkinkan kelompok kerja dan pengguna untuk menggunakan layanan yang diberikan oleh distribution layer dan core latyer. Pada access layer, kita memiliki kemampuan untuk memperluas atau collision domain kontrak menggunakan repeater, hub, atau switch standar. Berkenaan dengan lapisan ini, switch bukan sebuah perangkat bertenaga tinggi, seperti yang ditemukan di core layer.
Beberapa perangkat yang termasuk Access Layer :
- Cisco 3900 Series Integrated Services Routers
- Cisco 2900 Series Integrated Services Routers
- Cisco 1900 Series Integrated Services Routers
- Cisco 800 Series Routers
- Linksys by Cisco WRT54GL SoHo Router
Cisco 800 Series Routers
3. Alat dan Bahan
· Seperangkat PC (OS Windows XP/7)
· Software Simulator Packet Tracer
· Microsoft Office Visio
· Modul tentang Dedicated Router
4. Soal Pembelajaran
a. Identifikasi Dedicated Router.
b. Kelompokan Dedicated Router tersebut apakah digunakan untuk Core Layer, Distributte Layer, atau Access Layer.
c. Tentukan penempatan perangkat sesuai spesifikasi dan seri.
d. Buat topologi yang terdapat router tersebut.
e. Lakukan konfigurasi pada router tersebut.
5. Langkah Kerja
A. Cari sebanyak-banyaknya jenis dan tipe-tipe dari dedicated router.
B. Kelompokan router yang telah kita dapatkan apakah digunakan untuk Core Layer, Distributte Layer, atau Access Layer.
C. Simpan hasil analisis kita didalam tabel seperti tampak dibawah ini.
No | Layer | Dedicated Router | Spesifikasi |
1 | Core Layer | Cisco rotuer 7201 | Provides up to twice the performance compared to the Cisco 7301—up to two million packets per second (mpps) in Cisco Express Forwarding (CEF) Offers four built-in Gigabit Ethernet (GE) ports Provides one dedicated 10/100-Mbps copper Ethernet port for management Provides one USB port for general storage and security token storage Provides a single Cisco 7000 Series port adapter slot Offers front-to-back airflow and single-sided management |
Cisco 890 Series | High performance for secure broadband and Metro Ethernet access with concurrent services for enterprise small branch offices • Integrated secure 802.11a/g/n access point (optional) based on the draft 802.11n standard; dual-band radios for mobility and support for autonomous or Cisco Unified WLAN architectures • Enhanced security including: - Firewall with advance application and control for email, instant messaging (IM), and HTTP traffic - Site-to-site remote-access and dynamic VPN services: IP Security (IPsec) VPNs (Triple Data Encryption Standard [3DES] or Advanced Encryption Standard [AES]), Dynamic Multipoint VPN [DMVPN], Group Encrypted Transport VPN [GET VPN] with onboard acceleration, and Secure Sockets Layer [SSL] VPN - Intrusion prevention system (IPS): An inline, deep-packet-inspection feature that mitigates a wide range of network attacks - Content filtering: A subscriptionbased integrated security solution that offers categorybased reputation rating, keyword blocking, and protection against adware, malware, spyware, and URL blocking • An 8-port 10/100 Fast Ethernet managed switch with VLAN support and 4-port support for Power over Ethernet (PoE) (optional) to power IP phones or external access points • Metro Ethernet features include: - One 1000 BASE-T Gigabit Ethernet WAN port - One 10/100 BASE-T Fast Ethernet WAN port - Intelligent hierarchical quality of service (HQoS): Supports hierarchical queuing and shaping - Connectivity Fault Management (CFM), based on 802.1ag - 802.3ah standard based Link operational administration and maintenance (OAM) - Ethernet Local Management Interface (E-LMI) for the Customer Edge • Two USB 2.0 ports for security eToken credentials, booting, and loading configuration from USB | ||
Cisco 1900 Series Integrated Services Routers | Embedded hardware-accelerated VPN encryption • Secure collaborative communications with Group Encrypted Transport VPN, Dynamic Multipoint VPN, or Enhanced Easy VPN • Integrated threat control using Cisco IOS Firewall, Cisco IOS Zone-Based Firewall, Cisco IOS IPS, and Cisco IOS Content Filtering • Identity management that uses authentication, authorization, and accounting (AAA), and public key infrastructure • 2 Integrated 10/100/1000 Ethernet ports • 2 enhanced High-Speed WAN Interface Card slots that can host 2 single wide or 1 double wide and 1 single wide (e)HWIC • Fully integrated power distribution to modules supporting 802.3af Power over Ethernet (PoE) and Cisco Enhanced PoE | ||
Cisco 1800 Series (Fixed-configuration) | • Secure, concurrent services for broadband access with WAN high availability • Manageability and reliability of Cisco IOS Software Business-class Security • Stateful firewall with URL filtering • VPN 3DES encryption and Advanced Encryption Standard (AES) encryption • Dynamic Multipoint VPN (DMVPN) • Intrusion Prevention System (IPS) Fixed Configuration • Secure broadband access at broadband performance • Integrated ISDN Basic Rate S/T Interface (BRI), analog modem, or Ethernet backup port for redundant WAN links and load balancing • Secure wireless LAN option for simultaneous 802.11a and 802.11b/g with use of multiple antennas • 8-port 10/100 managed switch with 802.1q VLAN support and optional Power over Ethernet (PoE) | ||
Cisco 7304 Series | • High-performance connectivity up to OC-48 speeds • Built-in GbE for high-performance LAN connectivity • Hardware-accelerated services with Parallel Express Forwarding • Optional redundant processor and power supplies for high availability in a single box solution • Multiprotocol support Business-class Security VPN • Hardware-accelerated Access Control Lists • Stateful inspection firewall Modularity • More than 20 network line cards • Chassis supports up to 4 line cards or port adapters • Built in GbE ports on processor • Support for Cisco port adapters • Manageability and reliability of Cisco IOS Software | ||
2 | Distributed Layer | Cisco 860 Series | • Concurrent broadband services for small offices, and remote sites • Secure connectivity with Stateful Inspection Firewall and IP Security (IPsec) VPN support for small offices • Security features including: - Stateful Inspection Firewall - IP Security (IPsec) VPNs (Triple Data Encryption Standard [3DES] or Advanced Encryption Standard [AES]) • 4-port 10/100 Fast Ethernet managed switch with VLAN support • CON/AUX Port for console or external modem • Secure 802.11g/n access point option based on IEEE802.11n draft 2.0 standard • Easy setup, deployment, and remote management capabilities through Web-based tools and Cisco IOS® Software |
Cisco 2800 Series | • 2 integrated 10/100/1000 Ethernet ports • 2 enhanced High-Speed WAN Interface Card slots that can host 2 single wide or 1 double wide and 1 single wide (e)HWIC • 1 Internal Services Module slot • Fully integrated power distribution to modules supporting 802.3af Power over Ethernet (PoE) and Cisco Enhanced PoE Secure Networking • Hardware-based VPN acceleration on motherboard • Antivirus Defense • Intrusion Prevention System (IPS) IP Communications and IP Telephony Support • IP Communications Express (CCME/SRST/CUE) • Enhanced Modularity (EVM and PVDM2 support) Integrated Switching • Up to 64 powered 10/100 switch ports • 802.3af Power over Ethernet compliance | ||
| Cisco Catalyst 6500 Series Switches | Supports all Cisco Catalyst 6500 Series modules, including:Supervisor enginesFast Ethernet modules (with IEEE 802.3af Power over Ethernet [PoE])Gigabit Ethernet modules (with IEEE 802.3af PoE)10 Gigabit Ethernet modulesFlex WAN modulesShared Port Adaptors/SPA Interface ProcessorsMulti-Gigabit services modules (content services ,firewall, intrusion detection, IP Security [IPSec], VPN, network analysis, and Secure Sockets Layer [SSL] acceleration). | |
Industry-leading performance, service capabilities, reliability, and efficiencies in a compact form factor Ideal for enterprises for private WAN, Internet edge, WAN aggregation deployments, and also as a high-end managed customer premises equipment (CPE) Highly secure, high-performance "instant-on" services including multi-gigabit VPN, encryption, firewall, application intelligence, and broadband services Extends network as a platform for cloud computing to help conserve resources and optimize performance Enhances operating efficiencies by using its compact form factor to reduce power consumption, space, and sparing requirements Offers software redundancy on non-redundant hardware with ASR 1002 and ASR 1004 routers Offers highly scalable, hardware redundancy and 40 Gbps services and interface processors in the ASR 1006 and ASR 1013 routers | |||
Catalyst 6500 Series Switches | Cisco's flagship switching solution offering industry-leading services and performance along with comprehensive feature sets for core, distribution, wiring closet, data center, enterprise WAN routing, and Metro Ethernet deployments Delivers maximum network uptime and provides comprehensive, integrated network security Provides up to 400-mpps performance with distributed forwarding architecture | ||
3 | Access Layer | Cisco 800 Series Integrated Services Router | Provides secure WAN connectivity with desktop form factor Ideal for telecommuters and small offices Wire-speed performance with secure data services for xDSL, cable, and Ethernet WAN environments Factory-selectable 802.11n access point, 3G WAN, and Survivable Remote Site Telephony (SRST) options |
Cisco ME 3600X Series | Facilitates access deployments that require the flexibility of a "pay-as-you-grow" service model Simplifies field upgrades from 1 Gigabit Ethernet to 10 Gigabit Ethernet Efficiently extends MPLS to the access layer Delivers premium services with hierarchical quality of service, large buffers, and a large number of queues | ||
Cisco 3900 Series Integrated Services Router | Delivers scalable rich-media services including TelePresence, highest density of service virtualization, and lowest TCO with energy efficiency Ideal for high-end deployments requiring business continuity, WAN flexibility, superior collaboration capabilities, and investment protection Field-upgradeable motherboard, circuit-speed WAN performance up to 350 Mbps with services such as security, mobility, WAN optimization, unified communications, video, and customized applications | ||
Cisco 1900 Series Integrated Services Router | Entry-level secure WAN deployments, offers service virtualization, and low TCO Ideal for small offices requiring modular flexibility for highly secure mobility and customizable applications Circuit-speed performance up to 25 Mbps with concurrent services Factory-selectable 802.11n access point and double-wide HWIC support; desktop form factor | ||
Cisco 1800 Series (Modular) | • Wire-speed performance with secure data services enabled at up to T1/E1/xDSL rates • Increased services density for secure data services • Support for next-generation High-speed WAN Interface Cards • Increased flexibility through support of internal AIM slot for high-speed VPN and future applications • Built-in dual Fast Ethernet ports • Support for over 30 existing and new modules Secure Networking • Hardware-based VPN acceleration on motherboard |
D. Buat topologi seperti gambar di bawah ini.
Konfigurasi IP
PC0
IP Address : 1.1.1.2/24
Gateway : 1.1.1.1
PC5
IP Address : 7.7.7.2/24
Gateway : 7.7.7.1
Konfigurasi Access Router 1
Router>enable
Router#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#interface FastEthernet0/1
Router(config-if)#ip address 1.1.1.1 255.0.0.0
Router(config-if)#ip address 1.1.1.1 255.255.255.0
Router(config-if)#no shutdown
Router(config-if)#
Router(config-if)#exit
Router(config)#interface FastEthernet0/0
Router(config-if)#ip address 2.2.2.1 255.0.0.0
Router(config-if)#ip address 2.2.2.1 255.255.255.0
Router(config-if)#no shutdown
Router(config-if)#
Router(config-if)#exit
Router(config)#interface FastEthernet0/0
Router(config-if)#
Router(config-if)#exit
Router(config)#interface FastEthernet0/1
Router(config-if)#exit
Router(config)#ip route 3.3.3.0 255.255.255.0 2.2.2.2
Router(config)#ip route 4.4.4.0 255.255.255.0 2.2.2.2
Router(config)#ip route 5.5.5.0 255.255.255.0 2.2.2.2
Router(config)#ip route 6.6.6.0 255.255.255.0 2.2.2.2
Router(config)#ip route 7.7.7.0 255.255.255.0 2.2.2.2
Konfigurasi Distributed Router 1
Router>enable
Router#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#interface FastEthernet0/1
Router(config-if)#ip address 2.2.2.2 255.0.0.0
Router(config-if)#ip address 2.2.2.2 255.255.255.0
Router(config-if)#no shutdown
Router(config-if)#
Router(config-if)#exit
Router(config)#interface FastEthernet0/0
Router(config-if)#ip address 3.3.3.1 255.0.0.0
Router(config-if)#ip address 3.3.3.1 255.255.255.0
Router(config-if)#no shutdown
Router(config-if)#
Router(config-if)#exit
Router(config)#ip route 1.1.1.0 255.255.255.0 2.2.2.1
Router(config)#ip route 4.4.4.0 255.255.255.0 3.3.3.2
Router(config)#ip route 5.5.5.0 255.255.255.0 3.3.3.2
Router(config)#ip route 6.6.6.0 255.255.255.0 3.3.3.2
Router(config)#ip route 7.7.7.0 255.255.255.0 3.3.3.2
Konfigurasi Core Router 1
Router>enable
Router#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#interface FastEthernet0/0
Router(config-if)#ip address 3.3.3.2 255.0.0.0
Router(config-if)#ip address 3.3.3.2 255.255.255.0
Router(config-if)#no shutdown
Router(config-if)#
Router(config-if)#exit
Router(config)#interface FastEthernet0/1
Router(config-if)#ip address 4.4.4.1 255.0.0.0
Router(config-if)#ip address 4.4.4.1 255.255.255.0
Router(config-if)#no shutdown
Router(config-if)#
Router(config-if)#exit
Router(config)#ip route 1.1.1.0 255.255.255.0 3.3.3.1
Router(config)#ip route 2.2.2.0 255.255.255.0 3.3.3.1
Router(config)#ip route 5.5.5.0 255.255.255.0 4.4.4.2
Router(config)#ip route 6.6.6.0 255.255.255.0 4.4.4.2
Router(config)#ip route 7.7.7.0 255.255.255.0 4.4.4.2
Konfigurasi Core Router 2
Router>enable
Router#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#interface FastEthernet0/1
Router(config-if)#ip address 4.4.4.2 255.0.0.0
Router(config-if)#ip address 4.4.4.2 255.255.255.0
Router(config-if)#no shutdown
Router(config-if)#
Router(config-if)#exit
Router(config)#interface FastEthernet0/0
Router(config-if)#ip address 5.5.5.1 255.0.0.0
Router(config-if)#ip address 5.5.5.1 255.255.255.0
Router(config-if)#no shutdown
Router(config-if)#
Router(config-if)#exit
Router(config)#ip route 1.1.1.0 255.255.255.0 4.4.4.1
Router(config)#ip route 2.2.2.0 255.255.255.0 4.4.4.1
Router(config)#ip route 3.3.3.0 255.255.255.0 4.4.4.1
Router(config)#ip route 6.6.6.0 255.255.255.0 5.5.5.2
Router(config)#ip route 7.7.7.0 255.255.255.0 5.5.5.2
Konfigurasi Distributed Router 4
Router>enable
Router#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#interface FastEthernet0/0
Router(config-if)#ip address 5.5.5.2 255.0.0.0
Router(config-if)#ip address 5.5.5.2 255.255.255.0
Router(config-if)#no shutdown
Router(config-if)#
Router(config-if)#exit
Router(config)#interface FastEthernet0/1
Router(config-if)#
Router(config-if)#exit
Router(config)#interface FastEthernet0/0
Router(config-if)#
Router(config-if)#exit
Router(config)#interface FastEthernet0/1
Router(config-if)#ip address 6.6.6.1 255.0.0.0
Router(config-if)#ip address 6.6.6.1 255.255.255.0
Router(config-if)#no shutdown
Router(config-if)#
Router(config-if)#exit
Router(config)#ip route 1.1.1.0 255.255.255.0 5.5.5.1
Router(config)#ip route 2.2.2.0 255.255.255.0 5.5.5.1
Router(config)#ip route 3.3.3.0 255.255.255.0 5.5.5.1
Router(config)#ip route 4.4.4.0 255.255.255.0 5.5.5.1
Router(config)#ip route 7.7.7.0 255.255.255.0 6.6.6.2
Konfigurasi Access Router 6
Router>enable
Router#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#interface FastEthernet0/0
Router(config-if)#ip address 6.6.6.2 255.0.0.0
Router(config-if)#ip address 6.6.6.2 255.255.255.0
Router(config-if)#no shutdown
Router(config-if)#
Router(config-if)#exit
Router(config)#interface FastEthernet0/1
Router(config-if)#
Router(config-if)#exit
Router(config)#interface FastEthernet0/0
Router(config-if)#
Router(config-if)#exit
Router(config)#interface FastEthernet0/1
Router(config-if)#ip address 7.7.7.1 255.0.0.0
Router(config-if)#ip address 7.7.7.1 255.255.255.0
Router(config-if)#no shutdown
LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to u
Router(config-if)#
Router(config-if)#exit
Router(config)#ip route 1.1.1.0 255.255.255.0 6.6.6.1
Router(config)#ip route 2.2.2.0 255.255.255.0 6.6.6.1
Router(config)#ip route 3.3.3.0 255.255.255.0 6.6.6.1
Router(config)#ip route 4.4.4.0 255.255.255.0 6.6.6.1
Router(config)#ip route 5.5.5.0 255.255.255.0 6.6.6.1
6. Hasil Percobaan
Uji Koneksi ke Gateway PC
Uji Koneksi ke Gateway Pusat 1
Uji Koneksi ke Gateway Pusat 2
Uji Koneksi ke PC 5
Trace Route Ke Gateway Pusat
Trace Route Ke PC 5
7. Kesimpulan
Dedicated Router merupakan Router yang dirancang oleh vendor masing – masing dan memiliki fungsi pula yang telah ditentukan oleh vendor. Dengan dedicated ini juga kita dapat menghubungkan beberapa network.
Tidak ada komentar:
Posting Komentar