LAB 51. DMVPN Phase 1 with Static Mapping

This is it, saatnya ngelab.. Masih ingat kan DMVPN Phase 1 ? Kalo enggak, ane ingetin ciri2nya deh..
Berikut ciri2 DMVPN Phase 1 :
1. Hub menggunakan mGRE tunnel
2. Spoke menggunakan GRE tunnel
3. Antar spoke dapat saling berkomunikasi melalui hub
Kalo masih bingung, bisa review lagi di DMVPN Overview
Biar lebih paham, langsung kita praktekin aja ya, yok ke TKP...

1. Topologi LAB

2. Metode LAB

• Gunakan topologi di atas, konfigurasikan pengalamatan ip standard IDN

• Konfigurasi static route di R1, R2 dan R3

• Konfigurasi MGRE tunnel di HUB dan GRE tunnel di spoke

• Konfigurasikan static mapping (ip nhrp map public-ip private-ip)

Dalam LAB ini, kita akan mengkonfigurasi :
1. HUB menggunakan MGRE tunnel
2. SPOKE menggunakan GRE tunnel
3. Untuk ip private/tunnel, berikut konfigurasinya :
> R1-HUB    = 192.168.100.1/24
> R2-Spoke1 = 192.168.100.2/24
> R3-Spoke2 = 192.168.100.3/24
> Multicast dan unicast hanya di antara HUB dan SPOKE

3. Verifikasi LAB

Ø  Pastikan static routing  jalan, semua router dapat melakukan ping
Ø  Pastikan HUB mempunyai 2 peers, gunakan perintah show dmvpn
Ø  Pastikan ip tunnel sudah benar, gunakan perintah show ip nhrp

4. Konfigurasi

R1-HUB
#interface Tunnel1
#ip address 192.168.100.1 255.255.255.0
#ip nhrp map 192.168.100.2 24.24.24.2
#ip nhrp map 192.168.100.3 34.34.34.3
#ip nhrp network-id 111
#tunnel source 14.14.14.1
#tunnel mode gre multipoint
!
#interface FastEthernet0/0
#ip address 14.14.14.1 255.255.255.0
!
#ip route 24.24.24.0 255.255.255.0 14.14.14.4
#ip route 34.34.34.0 255.255.255.0 14.14.14.4

Keterangan : Saat mengkonfigurasikan mGRE tunnel, kita menggunakan perintah tunnel mode gre multipoint. Karena mapping kita akan konfigurasikan static, maka kita masukkan manual menggunakan perintah ip nhrp map public-ip private-ip.

R2-SPOKE1 

#interface Tunnel1

#ip address 192.168.100.2 255.255.255.0

#ip nhrp map 192.168.100.1 14.14.14.1

#ip nhrp network-id 111

#tunnel source 24.24.24.2

#tunnel destination 14.14.14.1

!

#interface FastEthernet0/0

#ip address 24.24.24.2 255.255.255.0

!

#ip route 14.14.14.0 255.255.255.0 24.24.24.4

#ip route 34.34.34.0 255.255.255.0 24.24.24.4 

Keterangan : Konfigurasi GRE tunnel, kita menggunakan perintah tunnel destination (ip public HUB). Di spoke, hanya perlu melakukan mapping ke Hub saja.

R3-SPOKE2 

#interface Tunnel1

#ip address 192.168.100.3 255.255.255.0

#ip nhrp map 192.168.100.1 14.14.14.1

#ip nhrp network-id 111

#tunnel source 34.34.34.3

#tunnel destination 14.14.14.1

!

#interface FastEthernet0/0

#ip address 34.34.34.3 255.255.255.0

!

#ip route 14.14.14.0 255.255.255.0 34.34.34.4

#ip route 24.24.24.0 255.255.255.0 34.34.34.4 

R4-INTERNET

#interface FastEthernet0/0

#ip address 14.14.14.4 255.255.255.0

!

#interface FastEthernet0/1

#ip address 24.24.24.4 255.255.255.0

!

#interface FastEthernet1/0

#ip address 34.34.34.4 255.255.255.0

___________________________________________________________________________
___________________________________________________________________________

Verifikasi : 

Lihat status DMVPN mapping
R1-HUB#sh ip nhrp 

192.168.100.2/32 via 192.168.100.2, Tunnel1 created 00:12:51, never expire 

  Type: static, Flags: used 

  NBMA address: 24.24.24.2

192.168.100.3/32 via 192.168.100.3, Tunnel1 created 00:12:44, never expire 

   Type: static, Flags: used 

  NBMA address: 34.34.34.3 

Lihat konfigurasi DMVPN di Hub
R1-HUB#show dmvpn

Legend: Attrb --> S - Static, D - Dynamic, I - Incompletea

        N - NATed, L - Local, X - No Socket

        # Ent --> Number of NHRP entries with same NBMA peer

Tunnel1, Type:Spoke, NHRP Peers:2,

 # Ent  Peer NBMA Addr Peer Tunnel Add State  UpDn Tm Attrb

 ----- --------------- --------------- ----- -------- -----

     1      24.24.24.2   192.168.100.2  NHRP    never S

     1      34.34.34.3   192.168.100.3  NHRP    never S 

Lihat konfigurasi DMVPN di Spoke
R2-SPOKE1#show dmvpn

Legend: Attrb --> S - Static, D - Dynamic, I - Incompletea

        N - NATed, L - Local, X - No Socket

        # Ent --> Number of NHRP entries with same NBMA peer

Tunnel1, Type:Spoke, NHRP Peers:1,

 # Ent  Peer NBMA Addr Peer Tunnel Add State  UpDn Tm Attrb

 ----- --------------- --------------- ----- -------- -----

     1      14.14.14.1   192.168.100.1  NHRP    never S 

Lakukan traceroute dari R2 ke R3,pastikan melewati Hub
R2-SPOKE1(config)#do trace 192.168.100.3

Type escape sequence to abort.
Tracing the route to 192.168.100.3

  1 192.168.100.1 112 msec 156 msec 116 msec  
  2 192.168.100.3 200 msec 228 msec 136 msec 

R2-SPOKE1(config)#

Kalau hasilnya udah sama berarti anda berhasil,, good luck :)