No Exp : 01. Nama : Ghulam Faqih. Dedicated Router. Inst : Bpk. Rudi H. Jurusan : TKJ. Ibu Netty. 1. Tujuan

Transkripsi

1 No Exp : 01 Mata Pel : Diagnosa WAN Jurusan : TKJ Dedicated Router Nama : Ghulam Faqih Kelas : 3 TKJ B Inst : Bpk. Rudi H Ibu Netty 1. Tujuan Agar siswa dapat mengerti pengertian, fungsi, dan penggunaan dari Dedicated router Agar siswa dapat mengelompokan sendiri mana router yang dapat di gunakan untuk Core Layer, Distributte Layer, dan Access Layer. Agar siswa dapat mengkonfigurasi router tersebut. 2. Pendahuluan Router adalah sebuah alat jaringan komputer yang mengirimkan paket data melalui sebuah jaringan atau Internet menuju tujuannya, melalui sebuah proses yang dikenal sebagai routing. Proses routing terjadi pada lapisan 3 (Lapisan jaringan seperti Internet Protocol) dari stack protokol tujuh-lapis OSI. Sementara itu fungsi sedeerhana dari sebuah router adalah sebagai penghubung antar dua atau lebih jaringan untuk meneruskan data dari satu jaringan ke jaringan lainnya. Router berbeda dengan switch. Switch merupakan penghubung beberapa alat untuk membentuk suatu Local Area Network (LAN). Setelah kita mengetahui tentang pengertian dan fungsi dari router itu sendiri, sekarang kita memasuki pada pokok pembahasan yaiteu tentang Dedicated Router. Dedicated router adalah perangkat router yang dibuat dengan desain dan fungsi router oleh vendor. Contoh: Cisco Router.

2 Hierarki Picture 1. Core Layer Menurut sumber yang telah saya baca dan terjemahkan jadi lapisan ini dianggap sebagai tulang punggung jaringan dan termasuk high-end switch dan kabel berkecepatan tinggi seperti fiber optic dan lapisan inti bertanggung jawab untuk cepat dan transportasi data dapat diandalkan di seluruh jaringan. Pada core layer keefektivitasan adalah kuncinya. Sistem yang lebih sedikit dan lebih cepat menciptakan backbone yang lebih efisien. Ada beberapa peralatan yang tersedian dalam layer ini. Contoh peralatan core layer Cisco meliputi: Cisco switches seperti 7000, 7200, 7500, and (dipakai dalam WAN) Catalyst switches seperti 6000, 5000, dan 4000 (dipakain dalam LAN) T-1 and E-1 lines, Frame relay connections, jaringan ATM, Switched Multimegabit Data Service (SMDS) Provides up to twice the performance compared to the Cisco 7301 up to two million packets per second (mpps) in Cisco Express Forwarding (CEF) Offers four built-in Gigabit Ethernet (GE) ports Provides one dedicated 10/100-Mbps copper Ethernet port for management Provides one USB port for general storage and security token storage Provides a single Cisco 7000 Series port adapter slot Offers front-to-back airflow and single-sided management

3 2. Distribution Layer Lapisan ini mencakup LAN berbasis router dan layer 3 switch. Lapisan ini memastikan bahwa paket yang benar diarahkan antara subnet dan VLAN di perusahaan anda. Lapisan ini juga disebut lapisan Workgroup.Lapisan ini bertanggung jawab atas routing. Juga menyediakan konektivitas jaringan berbasis pada kebijakan, termasuk: Packet filtering (firewalling) QoS Access Layer Aggregation Point Control Broadcast and Multicast Application Gateways Lapisan ini juga melakukan antrian dan menyediakan manipulasi paket data dari lalu lintas jaringan. Hal ini di lapisan di mana kita mulai melakukan kontrol atas transmisi jaringan, termasuk apa yang masuk dan apa yang keluar dari jaringan. Kita juga akan membatasi dan menciptakan broadcast domain, menciptakan virtual LAN, jika perlu, dan melakukan berbagai tugas pengelolaan, termasuk mendapatkan ringkasan rute. Dalam ringkasan rute, kita menggabungkan lalu lintas dari subnet banyak ke dalam koneksi jaringan inti. Dalam router Cisco, perintah untuk mendapatkan ringkasan routing adalah: show ip route summary (menunjukkan ringkasan ip route) Contoh peralatan pada layer ini Cisco-spesifik lapisan termasuk 2600,4000, 4500 router series, Cisco Catalyst 6500 Series Switches Supports all Cisco Catalyst 6500 Series modules, including:supervisor enginesfast Ethernet modules (with IEEE 802.3af Power over Ethernet [PoE])Gigabit Ethernet modules (with IEEE 802.3af PoE)10 Gigabit Ethernet modulesflex WAN modulesshared Port Adaptors/SPA Interface ProcessorsMulti-Gigabit services modules (content services,firewall, intrusion detection, IP Security [IPSec], VPN, network analysis, and Secure Sockets Layer [SSL] acceleration).

4 3. Access Layer Lapisan ini meliputi hub dan switch. Lapisan ini juga disebut lapisan desktop karena berfokus pada node klien yang terhubung, seperti workstation ke jaringan. Lapisan ini memastikan bahwa paket yang dikirim ke komputer pengguna akhir. Access layer berisi perangkat yang memungkinkan kelompok kerja dan pengguna untuk menggunakan layanan yang diberikan oleh distribution layer dan core latyer. Pada access layer, kita memiliki kemampuan untuk memperluas atau collision domain kontrak menggunakan repeater, hub, atau switch standar. Berkenaan dengan lapisan ini, switch bukan sebuah perangkat bertenaga tinggi, seperti yang ditemukan di core layer. Beberapa perangkat yang termasuk Access Layer : Cisco 3900 Series Integrated Services Routers Cisco 2900 Series Integrated Services Routers Cisco 1900 Series Integrated Services Routers Cisco 800 Series Routers Linksys by Cisco WRT54GL SoHo Router 3. Alat dan Bahan Seperangkat PC (OS Windows XP/7) Software Simulator Packet Tracer Microsoft Office Visio Modul tentang Dedicated Router 4. Soal Pembelajaran a) Identifikasi Dedicated Router. b) Kelompokan Dedicated Router tersebut apakah digunakan untuk Core Layer, Distributte Layer, atau Access Layer. c) Tentukan penempatan perangkat sesuai spesifikasi dan seri. d) Buat topologi yang terdapat router tersebut. e) Lakukan konfigurasi pada router tersebut.

5 5. Langkah Kerja a) Cari sebanyak-banyaknya jenis dan tipe-tipe dari dedicated router. b) Kelompokan router yang telah kita dapatkan apakah digunakan untuk Core Layer, Distributte Layer, atau Access Layer. c) Simpan hasil analisis kita didalam tabel seperti tampak dibawah ini. No Layer Dedicated Router Spesifikasi 1 Core Layer Cisco rotuer 7201 Provides up to twice the performance compared to the Cisco 7301 up to two million packets per second (mpps) in Cisco Express Forwarding (CEF) Offers four built-in Gigabit Ethernet (GE) ports Provides one dedicated 10/100-Mbps copper Ethernet port for management Provides one USB port for general storage and security token storage Provides a single Cisco 7000 Series port adapter slot Offers front-to-back airflow and single-sided management Cisco 890 Series High performance for secure broadband and Metro Ethernet access with concurrent services for enterprise small branch offices

6 Integrated secure a/g/n access point (optional) based on the draft n standard; dual-band radios for mobility and support for autonomous or Cisco Unified WLAN architectures Enhanced security including: - Firewall with advance application and control for , instant messaging (IM), and HTTP traffic - Site-to-site remote-access and dynamic VPN services: IP Security (IPsec) VPNs (Triple Data Encryption Standard [3DES] or Advanced Encryption Standard [AES]), Dynamic Multipoint VPN [DMVPN], Group Encrypted Transport VPN [GET VPN] with onboard acceleration, and Secure Sockets Layer [SSL] VPN - Intrusion prevention system (IPS): An inline, deep-packet-inspection feature that mitigates a wide range

7 of network attacks - Content filtering: A subscriptionbased integrated security solution that offers categorybased reputation rating, keyword blocking, and protection against adware, malware, spyware, and URL blocking An 8-port 10/100 Fast Ethernet managed switch with VLAN support and 4-port support for Power over Ethernet (PoE) (optional) to power IP phones or external access points Metro Ethernet features include: - One 1000 BASE-T Gigabit Ethernet WAN port - One 10/100 BASE-T Fast Ethernet WAN port - Intelligent hierarchical quality of service (HQoS): Supports hierarchical queuing and shaping

8 - Connectivity Fault Management (CFM), based on 802.1ag ah standard based Link operational administration and maintenance (OAM) - Ethernet Local Management Interface (E-LMI) for the Customer Edge Two USB 2.0 ports for security etoken credentials, booting, and loading configuration from USB Cisco 1900 Series Integrated Services Routers Embedded hardware-accelerated VPN encryption Secure collaborative communications with Group Encrypted Transport VPN, Dynamic Multipoint VPN, or Enhanced Easy VPN Integrated threat control using Cisco IOS Firewall, Cisco IOS Zone-Based Firewall, Cisco IOS IPS, and Cisco IOS Content Filtering Identity management that uses

9 authentication, authorization, and accounting (AAA), and public key infrastructure 2 Integrated 10/100/1000 Ethernet ports 2 enhanced High-Speed WAN Interface Card slots that can host 2 single wide or 1 double wide and 1 single wide (e)hwic Fully integrated power distribution to modules supporting 802.3af Power over Ethernet (PoE) and Cisco Cisco 1800 Series (Fixed-configuration) Enhanced PoE Secure, concurrent services for broadband access with WAN high availability Manageability and reliability of Cisco IOS Software Business-class Security Stateful firewall with URL filtering VPN 3DES encryption and Advanced Encryption Standard (AES) encryption

10 Dynamic Multipoint VPN (DMVPN) Intrusion Prevention System (IPS) Fixed Configuration Secure broadband access at broadband performance Integrated ISDN Basic Rate S/T Interface (BRI), analog modem, or Ethernet backup port for redundant WAN links and load balancing Secure wireless LAN option for simultaneous a and b/g with use of multiple antennas 8-port 10/100 managed switch with 802.1q VLAN support and optional Cisco 7304 Series Power over Ethernet (PoE) High-performance connectivity up to OC-48 speeds Built-in GbE for high-performance LAN connectivity Hardware-accelerated services with Parallel Express Forwarding Optional redundant processor and power supplies for high availability in

11 2 Distributed Layer Cisco 860 Series a single box solution Multiprotocol support Business-class Security VPN Hardware-accelerated Access Control Lists Stateful inspection firewall Modularity More than 20 network line cards Chassis supports up to 4 line cards or port adapters Built in GbE ports on processor Support for Cisco port adapters Manageability and reliability of Cisco IOS Software Concurrent broadband services for small offices, and remote sites Secure connectivity with Stateful Inspection Firewall and IP Security (IPsec) VPN support for small offices Security features including: - Stateful Inspection Firewall - IP Security (IPsec) VPNs (Triple Data Encryption Standard [3DES]

12 or Advanced Encryption Standard [AES]) 4-port 10/100 Fast Ethernet managed switch with VLAN support CON/AUX Port for console or external modem Secure g/n access point option based on IEEE802.11n draft 2.0 standard Easy setup, deployment, and remote management capabilities through Web-based tools and Cisco IOS Cisco 2800 Series Software 2 integrated 10/100/1000 Ethernet ports 2 enhanced High-Speed WAN Interface Card slots that can host 2 single wide or 1 double wide and 1 single wide (e)hwic 1 Internal Services Module slot Fully integrated power distribution to modules supporting 802.3af Power over Ethernet (PoE) and Cisco

13 Enhanced PoE Secure Networking Hardware-based VPN acceleration on motherboard Antivirus Defense Intrusion Prevention System (IPS) IP Communications and IP Telephony Support IP Communications Express (CCME/SRST/CUE) Enhanced Modularity (EVM and PVDM2 support) Integrated Switching Up to 64 powered 10/100 switch ports 802.3af Power over Ethernet Cisco Catalyst 6500 Series Switches ASR 1000 Series Aggregation Services Routers compliance Supports all Cisco Catalyst 6500 Series modules, including:supervisor enginesfast Ethernet modules (with IEEE 802.3af Power over Ethernet [PoE])Gigabit Ethernet modules (with IEEE 802.3af PoE)10 Gigabit Ethernet modulesflex WAN modulesshared Port Adaptors/SPA Interface ProcessorsMulti- Gigabit services modules (content services,firewall, intrusion detection, IP Security [IPSec], VPN, network analysis, and Secure Sockets Layer [SSL] acceleration). Industry-leading performance, service capabilities, reliability, and efficiencies in a compact form factor Ideal for enterprises for private WAN, Internet edge, WAN

14 aggregation deployments, and also as a high-end managed customer premises equipment (CPE) Highly secure, high-performance "instant-on" services including multi-gigabit VPN, encryption, firewall, application intelligence, and broadband services Extends network as a platform for cloud computing to help conserve resources and optimize performance Enhances operating efficiencies by using its compact form factor to reduce power consumption, space, and sparing requirements Offers software redundancy on non-redundant hardware with ASR 1002 and ASR 1004 routers Offers highly scalable, hardware redundancy and 40 Gbps services and interface processors in the ASR 1006 and ASR 1013 routers Catalyst 6500 Series Switches Cisco's flagship switching solution offering industry-leading services and performance along with comprehensive feature sets for core, distribution, wiring closet, data center, enterprise WAN routing, and Metro Ethernet deployments Delivers maximum network uptime and provides comprehensive, integrated network security Provides up to 400-mpps performance with distributed forwarding architecture 3 Access Layer Cisco 800 Series Integrated Services Router Provides secure WAN connectivity with desktop form factor Ideal for telecommuters and small offices Wire-speed performance with secure data services for xdsl, cable, and Ethernet WAN environments Cisco ME 3600X Series Factory-selectable n access point, 3G WAN, and Survivable Remote Site Telephony (SRST) options Facilitates access deployments that require the flexibility of a "pay-as-you-grow" service model

15 Simplifies field upgrades from 1 Gigabit Ethernet to 10 Gigabit Ethernet Efficiently extends MPLS to the access layer Cisco 3900 Series Integrated Services Router Delivers premium services with hierarchical quality of service, large buffers, and a large number of queues Delivers scalable rich-media services including TelePresence, highest density of service virtualization, and lowest TCO with energy efficiency Ideal for high-end deployments requiring business continuity, WAN flexibility, superior collaboration capabilities, and investment protection Field-upgradeable motherboard, circuit-speed WAN performance up to 350 Mbps with services such as security, mobility, WAN optimization, unified communications, video, and customized applications Cisco 1900 Series Integrated Services Router Entry-level secure WAN deployments, offers service virtualization, and low TCO Ideal for small offices requiring modular flexibility for highly secure mobility and customizable applications Circuit-speed performance up to 25 Mbps with concurrent services Cisco 1800 Series (Modular) Factory-selectable n access point and double-wide HWIC support; desktop form factor Wire-speed performance with secure data services enabled at up to T1/E1/xDSL rates Increased services density for secure data services

16 Support for next-generation High-speed WAN Interface Cards Increased flexibility through support of internal AIM slot for high-speed VPN and future applications Built-in dual Fast Ethernet ports Support for over 30 existing and new modules Secure Networking Hardware-based VPN acceleration on motherboard d) Buat topologi seperti gambar di bawah ini.

17 Konfigurasi IP PC0 IP Address : /24 Gateway : PC5 IP Address : /24 Gateway : Konfigurasi Access Router 1 Router>enable Router#configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)#interface FastEthernet0/1 Router(config-if)#ip address Router(config-if)#ip address Router(config-if)#no shutdown Router(config-if)# Router(config)#interface FastEthernet0/0 Router(config-if)#ip address Router(config-if)#ip address Router(config-if)#no shutdown

18 Router(config-if)# Router(config)#interface FastEthernet0/0 Router(config-if)# Router(config)#interface FastEthernet0/1 Router(config)#ip route Router(config)#ip route Router(config)#ip route Router(config)#ip route Router(config)#ip route Konfigurasi Distributed Router 1 Router>enable Router#configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)#interface FastEthernet0/1 Router(config-if)#ip address Router(config-if)#ip address Router(config-if)#no shutdown Router(config-if)# Router(config)#interface FastEthernet0/0 Router(config-if)#ip address Router(config-if)#ip address

19 Router(config-if)#no shutdown Router(config-if)# Router(config)#ip route Router(config)#ip route Router(config)#ip route Router(config)#ip route Router(config)#ip route Konfigurasi Core Router 1 Router>enable Router#configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)#interface FastEthernet0/0 Router(config-if)#ip address Router(config-if)#ip address Router(config-if)#no shutdown Router(config-if)# Router(config)#interface FastEthernet0/1 Router(config-if)#ip address Router(config-if)#ip address Router(config-if)#no shutdown

20 Router(config-if)# Router(config)#ip route Router(config)#ip route Router(config)#ip route Router(config)#ip route Router(config)#ip route Konfigurasi Core Router 2 Router>enable Router#configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)#interface FastEthernet0/1 Router(config-if)#ip address Router(config-if)#ip address Router(config-if)#no shutdown Router(config-if)# Router(config)#interface FastEthernet0/0 Router(config-if)#ip address Router(config-if)#ip address Router(config-if)#no shutdown Router(config-if)# Router(config)#ip route Router(config)#ip route

21 Router(config)#ip route Router(config)#ip route Router(config)#ip route Konfigurasi Distributed Router 4 Router>enable Router#configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)#interface FastEthernet0/0 Router(config-if)#ip address Router(config-if)#ip address Router(config-if)#no shutdown Router(config-if)# Router(config)#interface FastEthernet0/1 Router(config-if)# Router(config)#interface FastEthernet0/0

22 Router(config-if)# Router(config)#interface FastEthernet0/1 Router(config-if)#ip address Router(config-if)#ip address Router(config-if)#no shutdown Router(config)#ip route Router(config)#ip route Router(config)#ip route Router(config)#ip route Router(config)#ip route Konfigurasi Access Router 6 Router>enable Router#configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)#interface FastEthernet0/0 Router(config-if)#ip address Router(config-if)#ip address Router(config-if)#no shutdown Router(config-if)# Router(config)#interface FastEthernet0/1 Router(config-if)#

23 Router(config)#interface FastEthernet0/0 Router(config-if)# Router(config)#interface FastEthernet0/1 Router(config-if)#ip address Router(config-if)#ip address Router(config-if)#no shutdown Router(config)#ip route Router(config)#ip route Router(config)#ip route Router(config)#ip route Router(config)#ip route Hasil Percobaan Uji Koneksi ke Gateway PC Uji Koneksi ke Gateway Pusat 1

24 Uji Koneksi ke Gateway Pusat 2 Uji Koneksi ke PC 5 Trace Route Ke Gateway Pusat Trace Route Ke PC 5

25 7. Kesimpulan Dedicated Router merupakan Router yang dirancang oleh vendor masing masing dan memiliki fungsi pula yang telah ditentukan oleh vendor. Dengan dedicated ini juga kita dapat menghubungkan beberapa network.