Ajriya Arkan

  LAB 27 Hapus Konfigurasi VRRP di R1 dan R2Hapus Konfigurasi VRRP di R1 dan R2 R1 dan R2 default int f0/1  Konfigurasi di R1 R1 R1(config)#interface FastEthernet0/1  R1(config-if)#ip address 192.168.12.1 255.255.255.0  R1(config-if)#glbp 1 ip 192.168.12.254   R2 R2(config)#interface FastEthernet0/1  R2(config-if)#ip address 192.168.12.2 255.255.255.0  R2(config-if)#glbp 1 ip 192.168.12.254   Konfigurasi pada PC PC1 dan PC2 PC1> ip 192.168.12.10/24 192.168.12.254  PC2> ip 192.168.12.11/24 192.168.12.254  Verifikasi R1 R1(config)#do show glbp brief  Interface Grp Fwd Pri State Address Active router Standby  router  Fa0/1 1 - 100 Active 192.168.12.254 local 192.168.12.2  Fa0/1 1 1 - Active 0007.b400.0101 local  Fa0/1 1 2 - Listen 0007.b400.0102 192.168.12.2 -------- R2 R2(config-if)#do show glbp brief  Interface Grp Fwd Pri State Address Active router Standby  router  Fa0/1 1 - 100 Standby 192.168.12.254 192.168.12.1  local Fa0/1 1 1 - Listen 0007.b400.0101 192.168.12.1 -----------

  LAB 26  Konfigurasi di PC PC1 dan PC2 PC1> ip 192.168.12.10/24 192.168.12.254  PC2> ip 192.168.12.11/24 192.168.12.253    Konfigurasikan VRRP di R1 dan R2 R1 R1(config)#interface FastEthernet0/1  R1(config-if)#vrrp 2 ip 192.168.12.253  R2 R2(config)#interface FastEthernet0/1  R2(config-if)#vrrp 2 ip 192.168.12.253  R2(config-if)#vrrp 2 priority 110   Verifikasi R1 Interface Grp Pri Time Own Pre State Master addr Group addr Fa0/1  1 110 3570 Y Master 192.168.12.1 192.168.12.254  Fa0/1 2 100 3609 Y Backup 192.168.12.2 192.168.12.253  R2 R2(config)#do show vrrp brief  Interface Grp Pri Time Own Pre State Master addr Group addr Fa0/1  1 100 3609 Y Backup 192.168.12.1 192.168.12.254  Fa0/1 2 110 3570 Y Master 192.168.12.2 192.168.12.253

  LAB 25 Hapus konfigurasi tracking bekas lab sebelumnya dan konfigurasikan IP SLA nya. R1 R1(config)#no track 1 ip route 8.8.8.8 255.255.255.255 reachability R1(config)#ip sla 1  R1(config-ip-sla)#icmp-echo 8.8.8.8 source-interface f0/1  R1(config-ip-sla-echo)#frequency 10  R1(config-ip-sla-echo)#timeout 5000  R1(config-ip-sla-echo)#track 1 ip sla 1 reachability  R1(config)#ip sla schedule 1 start-time now life forever  !  R1(config)#do show run int f0/1 | i decrement   vrrp 1 track 1 decrement 20   R1(config)#do show vrrp brief  Interface Grp Pri Time Own Pre State Master addr Group addr Fa0/1  1 110 3570 Y Master 192.168.12.1 192.168.12.254    Shutdown interface loopback0 R3 sehingga ip 8.8.8.8 tidak bisa di ping R3 R3(config)#int lo0  R3(config-if)#shutdown  R3(config-if)#exit  Perhatikan status tracking akan berubah dari up menjadi down yang kemudian menjadi Backup R1 *Des 10 12:37:17.739: %TRACKING-5-STATE: 1 ip sla 1 reachability Up->Down  R1(config)#  *Des 10 12:37:20.871: %

  LAB 24 Konfigurasi di R1 R1 R1(config)#int f0/1  R1(config-if)#no sh  !  R1(config)#interface fastEthernet0/1  R1(config-if)#vrrp 1 track 1 decrement 20  !  R1(config-if)#track 1 ip route 8.8.8.8/32 reachability   Verifikasi dan Pastikan R1 memiliki route 8.8.8.8/32 R1 R1(config)#do show ip route eigrp   23.0.0.0/24 is subnetted, 1 subnets  D 23.23.23.0 [90/30720] via 192.168.12.2, 00:01:02, FastEthernet0/1   8.0.0.0/32 is subnetted, 1 subnets  D 8.8.8.8 [90/156160] via 13.13.13.3, 00:00:04, FastEthernet0/0   Shutdown interface loopback R3, dan perhatikan proses yang terjadi berikutnya R3 R3(config)#int lo0  R3(config-if)#shutdown  R3(config-if)#exit   Perhatikan statusnya akan berubah dari Master menjadi Backup dengan nilai priority 90 R1 *Des 10 12:29:47.971: %TRACKING-5-STATE: 1 ip route 8.8.8.8/32  reachability Up->Down  R1(config)#  *Des 10 12:29:51.011: %VRRP-6-STATECHANGE: Fa0/1 Grp 1 state Master -> Backup  !  R1(config)#do show vrrp brief  Interface Grp Pri Time Own Pr

  LAB 23 Untuk topology masih sama, Hapus Konfigurasi HSRP di R1 dan R2. R1   dan R2 R1(config)#default int f0/1  R2(config)#default int f0/1   Konfigurasikan VRRP pada kedua Router R1 R1(config)#interface FastEthernet0/1  R1(config-if)#ip address 192.168.12.1 255.255.255.0  R1(config-if)#vrrp 1 ip 192.168.12.254 R1(config-if)#vrrp 1 priority 110  R1(config-if)#vrrp 1 authentication md5 key-string cisco   R2 R2(config)#interface FastEthernet0/1  R2(config-if)#ip address 192.168.12.2 255.255.255.0  R2(config-if)#vrrp 1 ip 192.168.12.254  R2(config-if)#vrrp 1 authentication md5 key-string cisco   Konfigurasi di PC  PC1 dan PC2 PC1> ip 192.168.12.10/24 192.168.12.254  PC2> ip 192.168.12.11/24 192.168.12.254 Verifikasi R1 R1(config)#do show vrrp brief  Interface Grp Pri Time Own Pre State Master addr Group addr Fa0/1  1 110 3570 Y Master 192.168.12.1 192.168.12.254 R2 R2(config)#do show vrrp brief  Interface Grp Pri Time Own Pre State Master addr Group addr Fa0/1  1 100 3609 Y Backup

  LAB 22 Konfigurasikan IP Address pada PC PC1 dan PC2 PC1> ip 192.168.12.10/24 192.168.12.254  PC2> ip 192.168.12.11/24 192.168.12.253   Konfigurasikan R1  R1 R1(config)#interface FastEthernet0/1  R1(config-if)#standby 2 ip 192.168.12.253  R1(config-if)#standby 2 preempt  R1(config-if)#standby 2 authentication md5 key-string cisco R1(config-if)#standby 2 priority 110   R2 R2(config)#interface FastEthernet0/1  R2(config-if)#standby 2 ip 192.168.12.253  R2(config-if)#standby 2 preempt  R2(config-if)#standby 2 authentication md5 key-string cisco   Verifikasi R1 dan R2 R1(config)#do show standby brief   P indicates configured to preempt.   |  Interface Grp Pri P State Active Standby Virtual IP Fa0/1 1 100 P  Standby 192.168.12.2 local 192.168.12.254 Fa0/1 2 110 P Active local 192.168.12.2 192.168.12.253  R2(config-if)#do show standby brief   P indicates configured to preempt.   |  Interface Grp Pri P State Active Standby Virtual IP  Fa0/1 1 110 P Active local 192.168.12.1 192.168.12

  LAB 21 Hapus konfigurasi tracking bekas sebelumnya. R2 R2(config)#no track 1 ip route 8.8.8.8 255.255.255.255 reachability   Lanjut ke konfigurasinya R2 R2(config)#ip sla 1  R2(config-ip-sla)#icmp-echo 8.8.8.8 source-interface f0/1 R2(config-ip-sla-echo)#frequency 10  R2(config-ip-sla-echo)#timeout 5000  R2(config-ip-sla-echo)#track 1 ip sla 1 reachability  R2(config-track)#exit  R2(config)#ip sla schedule 1 start-time now life forever   note = untuk fitur trackingnya sudah dipasang bekas konfigurasi sebelumnya Verifikasi R2 R2(config)#do show standby brief   P indicates configured to preempt.   |  Interface Grp Pri P State Active Standby Virtual IP Fa0/1 1  110 P Active local 192.168.12.1 192.168.12.254  Shutdown interface loopback0 R3 sehingga ip 8.8.8.8 tidak bisa di ping  R3 R3(config)#interface lo0  R3(config-if)#shutdown  R3(config-if)#exit   Perhatikan bahwa status tracking kemudian akan berubah dari up menjadi down yang kemudian standby R2 *Des 10 12:04:53.907: %TRACKING-5-ST

  LAB 20 Untuk topologi masih sama, Konfigurasikan di R2. R2 R2(config)#track 1 ip route 8.8.8.8/32 reachability  !  R2(config-track)#interface FastEthernet0/1  R2(config-if)#standby 1 track 1 decrement 20   Verifikasi  Pastikan R2 memiliki route 8.8.8.8/32 R2 R2#show ip route eigrp   8.0.0.0/32 is subnetted, 1 subnets  D 8.8.8.8 [90/158720] via 192.168.12.1, 00:06:05, FastEthernet0/1   13.0.0.0/24 is subnetted, 1 subnets  D 13.13.13.0 [90/30720] via 192.168.12.1, 00:00:44, FastEthernet0/1   R2(config)#do show standby brief   P indicates configured to preempt.   | Interface Grp Pri P State Active Standby Virtual IP Fa0/1  1 110 P Active local 192.168.12.1 192.168.12.254   R2 statusnya adalah active dan prioritasnya adalah 110, kemudian Shutdown interface loopback R3, dan perhatikan proses yang terjadi berikutnya. R3 R3(config)#interface lo0  R3(config-if)#shutdown  R3(config-if)#exit Perhatikan statusnya akan berubah menjadi standby dengan nilai priority 90. R2 R2(config)#  *Des 10 11:

  LAB 19 Ketik konfigurasi berikut ini :  R1 R1(config)#interface FastEthernet0/0  R1(config-if)#ip address 13.13.13.1 255.255.255.0  R1(config-if)#no shutdown   R1(config-if)#interface FastEthernet0/1  R1(config-if)#no shutdown  R1(config-if)#ip address 192.168.12.1 255.255.255.0 R1(config-if)#standby 1 ip 192.168.12.254  R1(config-if)#standby 1 preempt  R1(config-if)#standby 1 authentication md5 key-string cisco   R1(config-if)#router eigrp 1  R1(config-router)#net 0.0.0.0  R1(config-router)#no auto-summary  R2 R2(config)#interface FastEthernet0/0  R2(config-if)#ip address 23.23.23.2 255.255.255.0  R2(config-if)#no shutdown  R2(config-if)#interface FastEthernet0/1 R2(config-if)#ip address 192.168.12.2 255.255.255.0  R2(config-if)#standby 1 ip 192.168.12.254  R2(config-if)#standby 1 preempt  R2(config-if)#standby 1 authentication md5 key-string cisco  R2(config-if)#no shutdown  R2(config-if)#router eigrp 1  R2(config-router)#net 0.0.0.0  R2(config-router)#no auto-summary R3 R3(config)

  LAB 18 Hapus konfigurasi bekas sebelumnya. SW1 Switch(config)#no errdisable recovery interval 60  Switch(config)#no errdisable recovery cause psecure-violation Switch(config)#default int f1/0/1   R1 Router(config)#default int f0/0  Cek lagi Mac address di sisi router R1 Router(config)#do show int f0/0 | i add   Hardware is Gt96k FE, address is 0021.d831.1bda (bia0021.d831.1bda)  Konfigurasikan port-security pada SW-1 SW1 Switch(config)#interface FastEthernet 1/0/1  Switch(config-if)#switchport mode access  Switch(config-if)#switchport port-security  Switch(config-if)#switchport port-security mac-address 0021.d831.1bda  Switch(config-if)#switchport port-security violation restrict   Kita rubah nilai mac address f0/0 pada Router R1 Router(config)#int F0/0  Router(config-if)#mac-address aaaa.bbbb.cccc  Router(config-if)#exit Verifikasi SW1 Switch(config)#  *Mar 1 00:30:44.419: %PORT_SECURITY-2-PSECURE_VIOLATION: Security  violation occurred, caused by MAC address aaaa.bbbb.cccc on port 

  LAB 17 Kalau di CCNA Jika ingin menghidupkan port yang terdisable karena violation maka caranya adalah dengan shutdown interfacenya dan no shutdown, Kali ini kita akan membuat recovery otomatis tanpa harus shutdown dan no shutdown Kondisi Awal : SW1 Switch#show int f1/0/1  FastEthernet1/0/1 is down, line protocol is down (err-disabled) Konfigurasikan command dibawah ini SW1 Switch(config)#errdisable recovery cause psecure-violation  Switch(config)#errdisable recovery interval 60  Nantinya interface akan up dengan sendirinya  SW1 Switch(config)#  *Des 10 00:20:57.376: %PM-4-ERR_RECOVER: Attempting to recover from  psecure- violation err-disable state on Fa1/0/1  *Des 10 00:21:01.243: %LINK-3-UPDOWN: Interface FastEthernet1/0/1,  changed state to up  *Des 10 00:21:02.250: %LINEPROTO-5-UPDOWN: Line protocol on  Interface FastEthernet1/0/1, changed state to up  !  Switch(config)#do show int f1/0/1  FastEthernet1/0/1 is up, line protocol is up (connected)

  LAB 16 Cek nilai mac address e0/0 Router R1 R1 Router(config)#do show int e0/0 | i address  Hardware is Gt96k FE, address is 0021.d831.1bda (bia 0021.d831.1bda)   Konfigurasikan port-security SW1 Switch(config)#interface FastEthernet1/0/1  Switch(config-if)#switchport mode access  Switch(config-if)#switchport port-security  Switch(config-if)#switchport port-security mac-address 0021.d831.1bda   Verifikasi SW1 Switch#show port-security interface f1/0/1  Port Security : Enabled  Port Status : Secure-up  Violation Mode : Shutdown  Aging Time : 0 mins  Aging Type : Absolute Secure  Static Address Aging : Disabled Maximum  MAC Addresses : 1  Total MAC Addresses : 1  Configured MAC Addresses : 1  Sticky MAC Addresses : 0  Last Source Address:Vlan : 0021.d831.1bda:1  Security Violation Count : 0 Coba rubah mac address pada R1 R1 Router(config)#int F0/0  Router(config-if)#mac-address aaaa.bbbb.cccc  Router(config-if)#exit  Cek disisi Switch SW1 Switch#show port-security interface f1/0/1  Por