Bring MPLS Network at Your Home Lab

Hufff…. I thought my blog being deleted from blogsome. Evidently it just server maintenance so I can’t view my blog for 3 days. Thanks to Blogsome administrator for retured my blog online again…. Despite the status is being reseted… I just happy is up again     

If you are a Moslem I recomended you to install zekr in your laptop or your desktop PC 

zekr is digital holy Qur’an. The Zekr project stands by the following principle: Never Profit Off The Prophet. All programs are and will always be Free and Open Source. That means that anyone can see and contribute to developing Zekr.

The backbone of Zekr is very generic, allowing customization in many ways. Customize the language, translation, recitation, commentary, and theme. Make Zekr perfect for you.

zekr availabel for windows and Linux (ubuntu me) 

visit zekr homepage at http://zekr.org/quran/quran-for-windows

Hmm after I read the interface bridge manual i found something interesting. with just  base system we  can make L2VPN. I just need gif interface and bridge interface and I can make HUB and Spoke Mode L2VPN. how to make it

1. Create gif tunnel and configure the destination tunnel

2. Create bridge interface and add gif and internal interface to member of bridge  ex:

#ifconfig bridge0 addm fxp1 addm gif0 

You can add ipsec to secure your tunnel  but I didnt test it i dont have time to test it

Udah seminggu rasanya menikmati FreeBSD baru gw, sejak itu gw rasanya makin lengket aja. Pindah ke windows hanya untuk ngetik2 ato maen game bentar sekarang untuk mainan dynamips ama Olive uda sepenuh nya gw pindah ke BSD disamping performansinya lebih bagus dari windows sekarang mainan interoperabilitas antar cisco dan juniper makin enak karena Olivenya uda jalan semestinya. Dulu gw macet di windows ato FreeBSD sebelum upgrade.

Program Aplikasi apa aja yang gw install ? 

karena gw butuh performansi buat lab gw dengan spek komputer jadul jadi gw terpaksa install aplikasi yang hemat CPU

1.GUI, pake fluxbox
2.konsole, pake aterm/multi-aterm bisa transparent
3.file manager, thunar nyomot punyaknya xfce4
4.muter lagu, xmms uda kayak winamp jadul
5.muter film, mplayer (sebaiknya install dari ports)
6.pengen browsing, opera
7.baca pdf, epdfview
8.baca chm, xchm
9.baca manga, comical
10.Cisco emulator, GNS3 (barusan aja di porting musti install Qt4 )
11.Juniper emulator, QEMU (musti ngerubah dikit source codenya )
 

Ini dia gan tampilanya  

Finally….. after Upgrading to FreeBSD 7.1 Release Olive working properly. Multicast can working now

Why  choose FreeBSD ?

1. It’s suit for my old PC, I hope i can get better PC  

2. FreeBSD is my 2nd Operating System

3. I can connecting Olive with GNS3 which i couldn’t do it in  windows

Basically I am reffering this installation from http://juniper.cluepon.net/index.php/Olive and http://wiki.freebsd.org/qemu. Lets we start I didnt explain how to install FreeBSD. After you install freeBSD you must install QEMU from ports if you install it from binary packge or your Olive will not work properly. You can get ports tree from CVS or portsnap and I use portsnap because I am behind firewall

#portsnap fetch && extract

after finishing get the newest port tree lets install QEMU

#cd /usr/ports/emulator/qemu && fetch

You need to modified  QEMU source code, extract the source code in /usr/ports/distfiles/qemu you need to modified eepro100.c 

#ee qemu-0.10.1/hw/eepro100.c  go to line 1508 you will find this statement

         /* Multicast frame. */
        logout("%p received multicast, len=%d\n", s, size);
        /* TODO: check multicast all bit. */
        assert(!(s->configuration[21] & BIT(3)));
        int mcast_idx = compute_mcast_idx(buf);
        if (!(s->mult[mcast_idx >> 3] & (1 << (mcast_idx & 7)))) {
            return;
        }
        rfd_status |= 0x0002;

there is ‘return’ you must comment out and the statement become 

 /* Multicast frame. */
        logout("%p received multicast, len=%d\n", s, size);
        /* TODO: check multicast all bit. */
        assert(!(s->configuration[21] & BIT(3)));
        int mcast_idx = compute_mcast_idx(buf);
        if (!(s->mult[mcast_idx >> 3] & (1 << (mcast_idx & 7)))) {
            //return;
        }
        rfd_status |= 0x0002;

now tar the entire source and we ready to install it

#cd /usr/ports/emulator/qemu && make NO_CHECKSUM=yes install clean <– dont forget to include kqemu options 

you can change install with package if you want to create binary package 

Now your Olive will work properly even you can interoperability with GNS3

I created this bridge in FreeBSD box to connect Olive and GNS3 and use stp that can prevent loops inside the bridge

  ifconfig tap1 create up <– Junos fxp0
  ifconfig tap2 create up <– Junos fxp1
  ifconfig tap3 create up <– to GNS3 R0
  ifconfig tap4 create up <– to GNS3 R1
  ifconfig bridge0 create
  ifconfig bridge0 addm tap1 addm tap2 stp tap2 addm tap3 addm tap4 up

and you can create many more tap device  for me two tap interface for Olive is enough to connect more than 4 cisco router

qemu-system-x86_64 -L . -m 512 -hda olive.img -serial telnet::4001,server  -localtime \
-net nic,vlan=1,macaddr=00:aa:00:77:77:07,model=i82559er -net tap,vlan=1,ifname=tap1 \
-net nic,vlan=1,macaddr=00:aa:00:77:77:70,model=i82559er -net tap,vlan=1,ifname=tap2

 GOOD LUCK……

Tool : GNS3

Purpose : Undestand PIM accept-register filtering options

Topology :

Comments :
All router running OSPFv3
All outer running PIM-SM
R0 is the Candidate RP with priority 100
R1 is the Candidate BSR
R2 is the Candidate RP and BSR with priority 100
HOST1 join groups FF17:7:77::777, FF18:8::88, FF19:9::99
R2 as BSR accept-register for multicast group FF17:7:77::777, FF19:9::99
HOST2 and HOST3 is only able to send multicast traffic to FF17:7:77::777, FF19:9::99

Example Configuration for PIM security

–Configure accept-register
!
ipv6 pim accept-register list allow-group
ipv6 pim register-source Loopback0
ipv6 pim bsr candidate bsr 2001::3 priority 100
ipv6 pim bsr candidate rp 2001::3
!
!
!
ipv6 access-list allow-group
 sequence 20 permit ipv6 any host FF17:7:77::777
 permit ipv6 any host FF19:9::99
!

For detail configuration download at this Link