pelatihan ipv6

45
IPV6 HAND'S ON TRAINING Mochammad Irzan, [email protected] 25 November 2009

Upload: imam-taufik

Post on 08-Apr-2015

73 views

Category:

Documents


2 download

TRANSCRIPT

Page 1: pelatihan IPv6

IPV6 HAND'S ON TRAINING Mochammad Irzan, [email protected] 25 November 2009

Page 2: pelatihan IPv6

2 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

SLIDE TITLE HERE, ALL CAPS, WITH ENOUGH ROOM FOR TWO LINES

  Click to edit Master text styles   Second level

  Third level –  Fourth level

-  Fifth level

Page 3: pelatihan IPv6

3 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

AGENDA

  Introduction

  Juniper Network Products

  JUNOS

  Command Line Interface

  IPv6 Configuration   Addressing   Routing Protocol (OSPF, ISIS, BGP)   Tunneling (?)   MPLS (?)

Page 4: pelatihan IPv6

4 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

INTRODUCTION

  JUNIPER Networks

  www.juniper.net

Page 5: pelatihan IPv6

5 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

LEARNING MATERIAL

http://www.juniper.net/en/us/training

http://www.juniper.net/us/en/training/certification/books.html

http://www.juniper.net/us/en/training/technical_education/

Page 6: pelatihan IPv6

6 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

PRODUCT

  Routing   T-Series, JCS1200, M-Series, MX-Series, E-Series, J-Series, BX-Series, CTP-Series

  Switching   EX-Series

  Security   IDP Series, ISG Series, Netscreen Series, SA Series, SRX Series, SSG Series, Unified Access

Control

  Identity and Policy Management   C-Series/SRC, SBR-Series (AAA Server), Odyssey, Access Client

  Application Acceleration   WX-series, WXC-Series, ISM200

  Network Management   NSM, STRM, Junoscope, J-Web, CTPView, WX Central Management system

Page 7: pelatihan IPv6

7 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

NETWORK OPERATING SYSTEM

  JUNOS

  JUNOSe

  ScreenOS

  WXOS

  CTOS

Page 8: pelatihan IPv6

8 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

JUNOS PLATFORM Platform High Medium Low Routing T-Series (T1600,

T640), MX960 T320, M320, M120, M40e, MX480, MX240

M10i, M7i, J6350, J4350, J2320, J2350, MX80

Switching EX8216, EX8208 EX4200 EX3200, EX2200 Security SRX5800,

SRX5600 SRX3600, SRX3400, SRX650

SRX240, SRX210, SRX100

WAN Accelerator ISM200 (integrated with J-Series)

Page 9: pelatihan IPv6

9 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

HARDWARE ARCHITECTURE

Control Plane

Carrier-class operating system

Forwarding Plane

High-performance custom silicon

Service Plane

Modular applications; dedicated engines

Page 10: pelatihan IPv6

10 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

HARDWARE ARCHITECTURE (...)

Routing Engine

PFE

IOC IOC SC

RE : Routing Engine PFE : Packet Forwarding Engine SC : Service Card IOC : Input/Output Card

Page 11: pelatihan IPv6

11 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

JUNOS CONFIGURATION

  CLI (Command Line Interface)   Console (Serial port)   Remote Access (Telnet/SSH)

  WEB Interface   JWeb

  NETCONF

  JUNOScript

Page 12: pelatihan IPv6

12 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

NETWORK TOPOLOGY

Topologi minimal

Topologi lain

Page 13: pelatihan IPv6

13 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

LOGICAL ROUTER, VIRTUAL ROUTER

  Logical router   up to 16 logical router per platform   logical partitioning of router

  Virtual Router (Routing instance)   up to 500-6500 per platform   logical partitionaing of routing table

Page 14: pelatihan IPv6

14 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

LOGICAL ROUTER

Router Fisik

Logical Router

Page 15: pelatihan IPv6

15 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

LOGICAL ROUTER/VR INTERCONNECTION

  Physical Interface   Ethernet/Gigabit Ethernet with VLAN   Serial/Sonet with subinterfaces

  Logical Interface   Logical Tunnel Interface   Requires Tunnel Service Card

Page 16: pelatihan IPv6

16 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

JUNOS CLI

  default configuration   user : root, password :   access to UNIX Shell of JUNOS

Page 17: pelatihan IPv6

17 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

JUNOS CLI

Page 18: pelatihan IPv6

18 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

JUNOS CLI (...)

  JUNOS CLI   Operational Mode   Configuration Mode

Page 19: pelatihan IPv6

19 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

JUNOS CLI (...)

Page 20: pelatihan IPv6

20 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

CHANGING JUNOS CONFIGURATION

  Configuration mode   displaying configuration   use set command

  JUNOS configuration   Candidate configuration   running configuration

  Commit and Rollback

Page 21: pelatihan IPv6

21 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

JUNOS CONFIGURATION

Page 22: pelatihan IPv6

22 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

JUNOS CONFIGURATION

Page 23: pelatihan IPv6

23 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

JUNOS CONFIGURATION

Page 24: pelatihan IPv6

24 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

JUNOS CONFIGURATION

  By default up to 50 configuration is stored on the system

  use rollback command to reverse the configuration to previous version

Page 25: pelatihan IPv6

25 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

CONFIGURING JUNOS FOR IP/IPV6 ROUTING

  Interface configuration   physical configuration   logical configuration

  IPv4/IPv6 address configuration

  Routing configuration   routing protocol configuration

  Static Route   Dynamic route

–  ISIS –  OSPF/OSPFv3 –  BGP

Page 26: pelatihan IPv6

26 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

ROUTING TABLE ON JUNOS

  inet.0   Default IP version 4 (IPv4) unicast routing table

  inet6.0   Default IP version 6 (IPv6) unicast routing table

  instance-name.inet.0   Unicast routing table for a particular routing instance

  inet.1   Multicast forwarding cache

Page 27: pelatihan IPv6

27 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

ROUTING TABLE ON JUNOS

  inet.2   Unicast routes used for multicast reverse path forwarding (RPF) lookup

  inet.3   MPLS routing table for path information

  mpls.0   MPLS routing table for label-switched path (LSP) next hops

Page 28: pelatihan IPv6

28 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

INTERFACE CONFIGURATION

Page 29: pelatihan IPv6

29 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

STATIC ROUTING

Page 30: pelatihan IPv6

30 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

NETWORK TOPOLOGY

2001:aaaa:0:1::/64

R1 R2 Loopback : 2001:aaaa:0:FFFF::1/128 LAN : 2001:aaaa:0:101::1/64

Loopback : 2001:aaaa:0:FFFF::2/128 LAN : 2001:aaaa:0:102::1/64

Page 31: pelatihan IPv6

31 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

OSPF CONFIGURATION

  IPv6 requires OSPFv3

  OSPFv3   by default enabled for IPv6   support multi area OSPF   support authentication

Page 32: pelatihan IPv6

32 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

OSPF CONFIGURATION

Page 33: pelatihan IPv6

33 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

VERIFYING OSPF CONFIGURATION

  show ospf3 overview

  show ospf3 neigbour

  show ospf3 database

  show ospf3 route

  show ospf3 interface

  show route table inet6.0

  show route table inet6.0 protocol ospf3

Page 34: pelatihan IPv6

34 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

ISIS CONFIGURATION

  Requires ISO protocol enabled on the interface

  Requires ISO NET address   one address per Intermediate System (IS)

  Support IPv4 and IPv6

  Support multi area

Page 35: pelatihan IPv6

35 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

ISO NET ADDRESS

  up to 20 bytes

  consist of   Area number

  1 byte : AFI (Authority and Format identifier)   0 – 12 bytes : domain (area) ID

  System identifier   6 bytes

  n-selecter   1 bytes

49.0001.0001.dead.beef.00

Page 36: pelatihan IPv6

36 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

INTERFACE CONFIGURATION

Page 37: pelatihan IPv6

37 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

ISIS PROTOCOL CONFIGURATION

Page 38: pelatihan IPv6

38 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

AS2000

NETWORK TOPOLOGY

2001:aaaa:0:1::/64

R1

R2

Loopback : 2001:aaaa:0:FFFF::1/128 LAN : 2001:aaaa:0:101::1/64 PREFIX : 2001:aaaa::/32 2001:aaaa:1000:/48

Loopback : 2001:aaaa:0:FFFF::2/128

EXT

Loopback : 2001:BBBB:0:FFFF::1/128 LAN : 2001:BBBB:0:101::1/64 PREFIX : 2001:BBBB::/32 2001:BBBB:1000:/48

2001:aabb:0:1::/64

AS1000

Page 39: pelatihan IPv6

39 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

BGP CONFIGURATION

  BGP PEER   External BGP   Internal BGP

  Routing Policy   Advertising prefixes   Receiving prefixes   modifying BGP attribute

Page 40: pelatihan IPv6

40 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

BGP CONFIGURATION (...)

Page 41: pelatihan IPv6

41 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

BGP CONFIGURATION (...)

Page 42: pelatihan IPv6

42 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

BGP CONFIGURATION (...)

Page 43: pelatihan IPv6

43 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

BGP CONFIGURATION (...)

Page 44: pelatihan IPv6

44 Copyright © 2009 Juniper Networks, Inc. www.juniper.net

NETWORK TOPOLOGY

2001:aaaa:0:1::/64

R1

R2

Loopback : 2001:aaaa:0:FFFF::1/128 LAN : 2001:aaaa:0:101::1/64

Loopback : 2001:aaaa:0:FFFF::2/128

R3

Loopback : 2001:BBBB:0:FFFF::4/128 LAN : 2001:BBBB:0:101::1/64

192.168.1.0/24

R4

Loopback : 2001:BBBB:0:FFFF::3/128

C1

Page 45: pelatihan IPv6