Bring MPLS Network at Your Home Lab

March 23, 2009

VRRP dengan Olive

Filed under: Juniper

Tool : Olive 

Tujuan : Simulasi VRRP dengan Olive 

Topologi : 

 

 

Hmm kali ini posting dalam bahasa indonesia meskipun postingan-postingan yang lalu dengan bahasa inggris yang ancur 

topologi ini gw buat kerena ada temen gw nanya pernah bikin VRRP di olive dan ada yang posting di kaskus kalo VRRP bisa dijalankan di Olive akhirnya kabar ini membuat tangan ku semakin gatel pengen gw buka lagi Olive gw. Tentunya gw ga langsung config begitu saja, karena gw ga ngerti gimana hirarki command VRRP di juniper. Untung gw udah dondot semua manualnya JUNOS 9.3 gw cari ternyata ketemu di bab high-availability. gw baca2 sekilas hmmmm….. ternyata cuman gitu tok. Sampai akhirnya  gw contek Topology VRRP yang uda  gw buat make Dynamips yang udah gw posting sebelumnya . dengan hanya memakai 1 image Olive untuk membuat 2 VRRP group

Setelah config bertemu config dan "commit" deg deg an nunggu hasilnya dan berhasil tanpa ada pesan error gw cek pake #show vrrp bla..bla lantjar djaya cooy… trus jalan terakhir gw ping antar user…. eh Coy… ternyata ga nyambung…. gw binun  config dah bener master backup ruternya juga dah muncul tapi ga bisa ping….

Eh coy usut punya usut ternyata gw ga bisa di ping tuh virtual addressnya dari user padahal percobaan gw di cisco bisa  lancar. wuaahahaha tambah makin gatel nih tangan gw. Gw baca-baca lagi  akhirnya VIP nya gw samaain sama master IP nya trus config punya config dan commit dan akhirnya bisa coy… tapi bisa dengan beberapa syarat

1. Untuk master router prioritynya kudu 255 klo ga ga bakal bisa di commit 

2. Untuk master router juga ga bisa pasang tracking di interface/route klo dipasang ga bakal bisa di commit 

3. Untu master router hold time untuk preempt harus diset 0 klo ga ga bakal bisa di commit juga

Dan akhirnya jadilah topology di atas dengan hanya make 1 VRRP group dalam 1 image Olive 

Ini coy… gw posting juga contoh konfigurasinya

root# show
## Last changed: 2009-03-21 18:41:13 UTC
version 9.3R1.7;
system {
    arp {
        passive-learning;
    }
    root-authentication {
        encrypted-password "$1$XuRqUJCF$toR9je7KkYjp0TnE3tGLd1"; ## SECRET-DATA
    }
    services;
    syslog {
        user * {
            any emergency;
        }
        file messages {
            any notice;
            authorization info;
        }
        file interactive-commands {
            interactive-commands any;
        }
    }
}
logical-systems {
    P1 {
        interfaces {
            fxp1 {
                unit 50 {
                    vlan-id 50;
                }
                unit 100 {
                    vlan-id 100;
                    family inet {
                        address 10.1.3.1/24;
                    }
                }
            }
        }
        protocols {
            ospf {
                area 0.0.0.0 {
                    interface all;
                }
            }
        }
    }
    P2 {
        interfaces {
            fxp0 {
                unit 60 {
                    vlan-id 60;
                    family inet {
                        address 10.1.2.10/24;
                    }
                }
                unit 100 {
                    vlan-id 100;
                    family inet {
                        address 10.1.3.2/24;
                    }
                }
            }
        }
        protocols {
            ospf {
                area 0.0.0.0 {
                    interface all;
                }
            }
        }
    }
    user1 {
        interfaces {
            fxp2 {
                unit 10 {
                    vlan-id 10;
                    family inet {
                        address 192.168.1.10/24;
                    }
                }
            }
        }
        routing-options {
            static {
                route 0.0.0.0/0 next-hop 192.168.1.1;
            }
        }
    }
    user2 {
        interfaces {
            fxp2 {
                unit 100 {
                    vlan-id 100;
                    family inet {
                        address 10.1.3.10/24;
                    }
                }
            }
        }
        protocols {
            ospf {
                area 0.0.0.0 {
                    interface all;
                }
            }
        }
    }
    vrrp1 {
        interfaces {
            fxp0 {
                unit 10 {
                    vlan-id 10;
                    family inet {
                        address 192.168.1.1/24 {
                            vrrp-group 1 {
                                virtual-address 192.168.1.1;
                                priority 255;
                                preempt {
                                    hold-time 0;
                                }
                            }
                        }
                    }
                }
                unit 50 {
                    vlan-id 50;
                    family inet {
                        address 10.1.1.1/24;
                    }
                }
            }
        }
        protocols {
            ospf {
                area 0.0.0.0 {
                    interface fxp0.10;
                    interface fxp0.50;
                }
            }
        }
    }
    vrrp2 {
        interfaces {
            fxp1 {
                unit 10 {
                    vlan-id 10;
                    family inet {
                        address 192.168.1.2/24 {
                            vrrp-group 1 {
                                virtual-address 192.168.1.1;
                                preempt;
                                track {
                                    route 10.1.3.0/24 routing-instance default priority-cost 5;
                                }
                            }
                        }
                    }
                }
                unit 60 {
                    vlan-id 60;
                    family inet {
                        address 10.1.2.1/24;
                    }
                }
            }
        }
        protocols {
            ospf {
                area 0.0.0.0 {
                    interface fxp1.10;
                    interface fxp1.60;
                }
            }
        }
    }
}
interfaces {
    fxp0 {
        vlan-tagging;
    }
    fxp1 {
        vlan-tagging;
    }
    fxp2 {
        vlan-tagging;
    }
}

[edit]

Ini juga coy hasil capture dari ping nya

root# run ping logical-system user1 10.1.3.10
PING 10.1.3.10 (10.1.3.10): 56 data bytes
36 bytes from 192.168.1.1: Redirect Host(New addr: 192.168.1.2)
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 0054 5466   0 0000  40  01 5786 192.168.1.10  10.1.3.10

64 bytes from 10.1.3.10: icmp_seq=0 ttl=62 time=25.655 ms
36 bytes from 192.168.1.1: Redirect Host(New addr: 192.168.1.2)
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 0054 546b   0 0000  40  01 5781 192.168.1.10  10.1.3.10

64 bytes from 10.1.3.10: icmp_seq=1 ttl=62 time=16.736 ms
36 bytes from 192.168.1.1: Redirect Host(New addr: 192.168.1.2)
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 0054 546f   0 0000  40  01 577d 192.168.1.10  10.1.3.10

64 bytes from 10.1.3.10: icmp_seq=2 ttl=62 time=16.688 ms
36 bytes from 192.168.1.1: Redirect Host(New addr: 192.168.1.2)
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 0054 5472   0 0000  40  01 577a 192.168.1.10  10.1.3.10

64 bytes from 10.1.3.10: icmp_seq=3 ttl=62 time=14.641 ms
^C
— 10.1.3.10 ping statistics —
4 packets transmitted, 4 packets received, 0% packet loss
round-trip min/avg/max/stddev = 14.641/18.430/25.655/4.256 ms

hehehe keliatan kan kalo failovernya uda jalan  

mak Nyuss Cooy… selamat mencoba :)

 

Comments »

The URI to TrackBack this entry is: http://sioduy.blogsome.com/2009/03/23/vrrp-dengan-olive/trackback/

No comments yet.

RSS feed for comments on this post.

Leave a comment

Line and paragraph breaks automatic, e-mail address never displayed, HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <code> <em> <i> <strike> <strong>



Anti-spam measure: please retype the above text into the box provided.






















Get free blog up and running in minutes with Blogsome
Theme designed by Hadley Wickham