The Fiber Optic Installation Project in the Central Area of the Badung Regency Government is a path to switch the conventional government system to ICT-based (Information Communication Technology). Project implementation is carried out by conducting an environmental survey, preparing tools, materials, and labor, making fiber optic lines, planting optical fibers, connecting optical fibers to devices in each building, configuring the network and clean the area to be exactly as before. This report will discuss the network configuration part.
What needs to be understood in order to do this configuration is understanding device usage, understanding IP addresses, understanding VLAN (Virtual Local Area Network), understanding static routes and RIP (Routing Information Protocol), remote login, and NAT (Network Address Translation).
Configuration was carried out in Building 10, namely the Central Government of Badung Regency Transportation and Information Agency from September 4, 2012 to September 8, 2012. The tools needed to perform the configuration are a laptop, UTP cable, DB9M-USB converter cable, and Cisco console cable. The software needed for configuration is a serial terminal and a telnet client. The first configuration planning is the provision of VLAN (Virtual Local Area Network) allocations to each agency in each building. Second, the allocation of IP addresses on each VLAN. The third is the allocation of IP addresses for each device. The fourth is topology formation.
The first configuration is on the local network. The IP address for each switch is on VLAN 1. Each switch is assigned a VLAN ID based on the services contained in the building. The connection from the switch to the multilayer switch is given trunk mode so that all VLAN IDs can pass. In a multilayer switch port connected to the Internet network is given an IP address and a multilayer switch is given a routing configuration. Routing is also set up on other routers. Router 2900 is configured with NAT (Network Address Translation) to translate the local IP address from the inside into a Public IP address outward. All devices are debug enabled, logged, and Telnet login enabled.
In the IP address configuration there is a waste of IP addresses. It is recommended to reconfigure the subnet mask. It is recommended again to label more ports and VLAN IDs to make management easier.
ICT (Information Communication Technology) is a term that covers information, communication, telecommunications, and computers. With the existence of ICT, it replaces the place of information that is real objects. Libraries can be replaced with web pages on the Internet network, documents in the form of paper and books can be replaced with servers containing electronic documents, correspondence by post mails can be replaced with email (electronic mail). Information on the Internet is also available in the form of pictures and videos. The advantage of this method compared to the classical method is the efficiency of energy, place and time. With ICT, all forms of information contained can be accessed anytime and anywhere quickly (without having to waste energy and time to go somewhere and are limited by time to access information).
Many Government Centers have switched to ICT-based, meaning that they have begun to utilize ICT technology for the benefit of the Government. One example of sending documents via post or sending documents by directly visiting the delivery destination is starting to be replaced with email. The place where the author carried out practical work, namely in the Badung District Government Center has switched to ICT-based.
Practical Work at the Central Government of Badung Regency is to carry out the Fiber Optic Installation Project in all Services in the Central Government of Badung Regency. The Project Owner is Dishubkominfo (Department of Transportation, Communication and Informatics) Badung Regency Government, the executor is PT. Skill Surabaya, and the supervisor is CV. Bali Info Data. The author is on the supervisory side.
Of all the stages of Fiber Optic Network Infrastructure Development in the Central Area of the Badung Regency Government, this Job Training Report is specifically at the ICT configuration stage. To make it easier to absorb, this computer network configuration will be simulated in the Cisco Packet Tracer network simulator program. The simulation was carried out because the author was on the supervisor’s side where the configuration stages could not be shown directly, because the ICT configuration in the Badung Regency Government was fixed, not allowed for reconfiguration. This program is used because the tools used are almost all Cisco products.
Report the computer network configuration on the Fiber Optic Network Infrastructure Development Project in the Central Area of the Badung Regency Government, and simulate it in Cisco Packet Tracer.
This Practical Work is the Infrastructure Development for Fiber Optic Networks carried out from June-September 2012 in the Central Area of the Badung Regency Government. In general, this project stages are
To perform this configuration requires knowledge of when using a straight-through or crossover type RJ45 ethernet cable to connect between devices. In this ICT configuration, a switch is used as a link between many devices and a router as a link to the Internet. Addressing devices is used IPV4 (Internet Protocol Version 4). In-depth knowledge of IPV4 is required for a central level ICT configuration of Government. Knowledge of VLAN (Virtual Local Area Network) is required to facilitate local network management, and a little NAT (Network Address Translation) for connecting to the Internet. Telnet login is optional, for easy management. Then the theories that need to be known are described in this chapter.
The RJ45 Ethernet cable that connects the computer to the switch, switch to the router using a straight-through cable. Meanwhile, to connect between computers, between switches, between routers, and computers with a router using a crossover cable. The RJ45 ethernet cable consists of 8 pins, of which 4 are used as minus voltage transmitters, plus voltage transmitters, minus receivers, and plus receivers. There are straight-thru and crossover types because there are differences in the location of the transmitter and receiver (The Internet Center, 2013).
Figure 2.1 RJ45 Ethernet cable arrangement (The Internet Center, 2013)
The Cisco console cable is used to configure Cisco devices. This cable is a female DB9 to RJ45 male.
Figure 2.2 Arrangement of DB9 female to RJ45 male cable (WTI, 2013)
A switch is a device that can connect between computers, between local networks, and between computers and local networks. In OSI (Open Systems Interconnection) the reference model works at layer 2, namely datalink. Switches have multiple ports and work by forwarding incoming frames from a port to a destination port. The switch stores the hardware address and port location of the connected devices on a port.
Router is a device that connects between networks (currently between switches). In OSI (Open Systems Interconnection) the reference model works at layer 3, namely the network. Router works based on network address. The router determines the path to go to other networks (Gebali, 2008).
IP address or translated as IP address defines a host or a router to the Internet network, is a binary series of numbers. Computer networks and Internet networks today use IP addresses to indicate the identity of a device. This address is used as the identity of the data sender and receiver. Therefore IP addresses must be unique and universal. Currently there are 2 versions of IP, namely IP version 4 and IP version 6.IPV4 consists of 32 bits and is written in binary or decimal form, while IPV6 consists of 128 bits and is written in binary or hexadecimal form, currently used is IPV4, IPV6 for the future.
IPV4 is written with a subnet mask or prefix. Writing in decimal divided by byte or 8 bits (xxxxxxxx.xxxxxxx.xxxxxxx.xxxxxxx).
Example 2.1
An IP address 192.168.0.1 (11000000.10101000.00000000.00000001) 255.255.255.0 (11111111.1111111.1111111.00000000). Writing in the prefix is 192.168.0.1/24 (x.x.x.x/n), the number 24 represents the number of bits 1 in the subnet mask. Therefore, the author of the subnet mask can only be divided into 2 poles, namely the left side of the number 1, and the right part of the number 0 (it cannot be random).
The subnet mask shows the number of hosts in a network, shows the network ID (identity), and the host ID. To find the network ID for an IP address, perform the AND operation on the given subnet mask.
Example 2.2
From example 2.1 192.168.0.1 (11000000.10101000.00000000.00000001) 255.255.255.0 (11111111.1111111.1111111.00000000), 11000000.10101000.00000000.00000001 AND 11111111.1111111.1111111.00000000 result are 11000000.10101000.00000000.00000000 where 192.168.0.0 is network ID, and host is 192.168.0.1.
IP addresses can be class or classless. If it is a class, it is divided into 5 classes, namely A, B, C, D, and E. What is used in general is A - C, while D is for multicast and E experimentally, and is used for future needs (Sutanta, 2005). Here are 2 tables showing the class and a table regarding the prefix.
Class | Subnet | Allocation |
---|---|---|
A | 255.0.0.0 | 0.0.0.0 – 127.255.255.255 |
B | 255.255.0.0 | 128.0.0.0 – 191.255.255.255 |
C | 255.255.255.0 | 192.0.0.0 – 223.255.255.255 |
D | - | 224.0.0.0 – 239.255.255.255 |
E | - | 240.0.0.0 – 255.255.255.255 |
/n | Subnet | /n | Subnet | /n | Subnet | /n | Subnet |
---|---|---|---|---|---|---|---|
/1 | 128.0.0.0 | /9 | 255.128.0.0 | /17 | 255.255.128.0 | /25 | 255.255.255.128 |
/2 | 192.0.0.0 | /10 | 255.192.0.0 | /18 | 255.255.192.0 | /26 | 255.255.255.192 |
/3 | 224.0.0.0 | /11 | 255.224.0.0 | /19 | 255.255.224.0 | /27 | 255.255.255.224 |
/4 | 240.0.0.0 | /12 | 255.240.0.0 | /20 | 255.255.240.0 | /28 | 255.255.255.240 |
/5 | 248.0.0.0 | /13 | 255.248.0.0 | /21 | 255.255.248.0 | /29 | 255.255.255.248 |
/6 | 252.0.0.0 | /14 | 255.252.0.0 | /22 | 255.255.252.0 | /30 | 255.255.255.252 |
/7 | 254.0.0.0 | /15 | 255.254.0.0 | /23 | 255.255.254.0 | /31 | 255.255.255.254 |
/8 | 255.0.0.0 | /16 | 255.255.0.0 | /24 | 255.255.255.0 | /32 | 255.255.255.255 |
If the subnet mask is deepened, the subnet mask can determine the number of IP addresses on a network. The number of IP addresses can be calculated from bit 1 on the right combined with all bits 0 in the subnet mask.
Example 2.3
255.255.255.0 (11111111.1111111.1111111.00000000), then the number of IP addresses = 10000000(2) is 256(10), 255.255.255.224 (11111111.1111111.11111111.11100000), then the number of IP addresses = 100000(2) is 32(10).
Of all IP addresses in a network, the first IP address is used as a network ID, the last IP address is used as a broadcast ID, and if it is a WAN (Wide Area Network) network, one more IP address is needed as a gateway (to another network), usually an address after the network ID.
Example 2.4
192.168.0.1 (11000000.10101000.00000000.00000001) 255.255.255.0 (11111111.1111111.1111111.00000000), then if 11000000.10101000.00000000.00000001 AND 11111111.1111111.1111111.00000000 result is 11000000.10101000.00000000.00000000 is 192.168.0.0 is a network ID, with the host identity 192.168.0.1, with the subnet mask 255.255.255.0 (11111111.1111111.1111111.00000000), then the total number of IP addresses is 10000000 (2) = 256 (10), the first address 192.168.0.0 as the network ID and the last address is 192.168.0.255 as the broadcast ID, and can be selected from 192.168.0.1 - 192.168.0.254 as the gateway, and the rest can be used for the host (Inixindo, 2005). For further exploration, please see the following table.
IP address | Subnet Mask | Network ID | Gateway | Available Host ID | Broadcast ID |
---|---|---|---|---|---|
10.17.22.45 | 255.0.0.0 | 10.0.0.0 | 10.0.0.1 | 10.0.0.2 - | 10.255.255.255 |
10.255.255.254 | |||||
172.16.35.5 | 255.255.0.0 | 172.16.0.0 | 172.16.0.1 | 172.16.0.2 - | 172.16.255.255 |
172.16.255.254 | |||||
172.16.35.5 | 255.255.248.0 | 172.16.32.0 | 172.16.32.1 | 172.16.32.2 - | 172.16.39.255 |
172.16.39.254 | |||||
192.168.10.22 | 255.255.255.0 | 192.168.10.0 | 192.168.10.1 | 192.168.10.2 - | 192.168.10.255 |
192.168.10.254 | |||||
192.168.10.22 | 255.255.255.224 | 192.168.10.0 | 192.168.10.1 | 192.168.10.2 - | 192.168.10.31 |
192.168.10.30 |
In conclusion, the fewer the number of bits 1 in the subnet mask, the greater the number of hosts and the less the number of network IDs, and vice versa.
A VLAN is a group of devices on 1 or more LANs that are configured to communicate as if they are connected to the same cable, where in fact they are on different LAN segments. VLANs are based on logic rather than physics, because they are flexible.
VLAN defines a broadcast domain at layer 2. Broadcast domain is a set of devices that will receive broadcast frames from any device. Layer 2 Switches create broadcast domains based on switch configurations. Switches are multiport bridges that can create multiple broadcast domains. One VLAN can be a broadcast domain. VLANs cannot communicate with each other because they are in different broadcast domains. To connect between VLANs it is necessary to use a router or layer 3 switch (Cisco, 2004).
Figure 2.3 Example VLAN (Cisco, 2004)
Static Route is a permanent routing mechanism. The path to a network on a router device is determined directly by the administrator. In the static route setting of a router, it is the next hop when it goes to a network.
RIP is a dynamic route, which is a routing mechanism that varies with time and is flexible. RIP adopts a distance-vector protocol where each router will provide information to neighboring routers about the path connected to the router. From this the router will estimate the distance of all the paths to reach other networks. After that the router will determine its own path based on the shortest distance according to router estimates from the results of exchanging information between neighboring routers (Stallings, 1998).
IPV4 is running low, meaning that most of it is already in use around the world. Therefore IPV6 was developed. While waiting for IPV6 to be implemented there is a solution to save IP addresses in version 4, namely NAT. IPV4 addresses are classified into 2 types, namely private IP and global IP. Global IP is an IP address that is only owned by 1 device worldwide and is known in the Internet network. Meanwhile, private IP is an unknown IP address on the Internet network and is free to use by any device so that the owner can be more than 1. The private IP is 10.x.x.x 255.0.0.0, 172.16.x.x 255.255.0.0, and 192.168.x.x 255.255.255.0. Whereas 127.x.x.x 255.0.0.0 is used as the loopback. In addition, it is a global IP address (Inixindo, 2005).
NAT works by translating private IP to global IP and vice versa. For example a host array has private IP 192.168.10.2 - 192.168.10.254 255.255.255.0 and exits via router, gateway 192.168.10.1 255.255.255.0 which can NAT with global IP 202.130.0.5 255.255.255.0, for example to Google DNS 8.8.8.8 255.0.0.0. Then packets out of 192.168.10.2 - 192.168.10.254 will be translated to 202.130.0.5 before sending to 8.8.8.8. After that 8.8.8.8 will reply with the destination IP address 202.130.0.5, after which the router converts to the destination IP address to 192.168.10.x, depending on the sender (Peterson, 2003).
Telnet is an application that works at OSI layer 7, which is an application that can perform remote login, which is entering a device using another computer. Telnet is very useful for remote work, which should come to the location of the device to enter the system, with telnet entry to the system can be done remotely. Telnet transmits data without encryption and is opened on port number 23 (Burgess, 2004).
The ICT network configuration in this report is the ICT configuration in the Badung Regency Government. ICT network configuration includes IP address addressing, VLAN identity allocation, debugging, routing, remote login, and NAT. The port usage on the device is also determined. The physical form of the configured tools can be seen in section 3.3 Tools and Materials in Figure 3.1 and Figure 3.2. IP addressing, port used, and VLAN can be seen in section 3.4 Configuration Plan.
The configuration was carried out in Building 10, namely the Central Government of Badung Regency Transportation and Information Agency from 4 September 2012 to 8 September 2012.
Tool | Description |
---|---|
Laptop | Complete hardware along with female RJ45 PCI ethernet and USB female. Software required USB - RS232 driver, Telnet Client, TFTP Server, Serial Terminal, and Cisco Packet Tracer. |
USB – RS232 converter | If the laptop or computer is not equipped with RS232 male. |
RS232 female – RJ45 male | As a Cisco console cable for configuring the device. |
Kabel UTP/ ethernet coaxial cable | To perform configuration testing |
Pin RJ45 | The end of the UTP cable |
Crimping Pliers | To connect RJ45 pin to UTP cable |
Fiber Optic Cables and their connectors | Connection of all buildings to building 10 |
Material | Amount |
---|---|
Cisco Multilayer Switch cat4500e | 1 |
Cisco Switch c3750e | 12 |
Cisco ASA c2900 | 1 |
Mikrotik | 1 |
Cisco Router 2900 series | 1 |
Modem | 1 |
Figure 3.1 Multilayer Switch cat4500e, ASA, Mikrotik, Router 2900 from bottom to top
Figure 3.2 Switch C3750e in each building
Figure 3.3 Network topology map
Building | IP Switch | VLAN |
---|---|---|
7 | 172.16.0.7/24 | |
DPRD Secretariat | 10 | |
8 | 172.16.0.8/24 | |
The Regional Secretariat | 11 | |
9 | 172.16.0.9/24 | |
Office of Highways and Irrigation | 12 | |
Copyright Office | 13 | |
10 | 172.16.0.10/24 | |
The Transportation Department of Communication and Informatics | 14 | |
Industry and Trade SME Cooperative Office | 15 | |
11 | 172.16.0.11/24 | |
Department of Agriculture, Plantation and Forestry | 16 | |
Department of Animal Husbandry, Fisheries and Marine | 17 | |
12 | 172.16.0.12/24 | |
Social and Workers Agency | 18 | |
Public Health Office | 19 | |
Family Planning and Family Welfare Office | 20 | |
14 | 172.16.0.14/24 | |
Regional Civil Service Agency and Education and Training | 21 | |
Regional Development Planning Agency and R&D | 22 | |
Inspectorate | 23 | |
15 | 172.16.0.15/24 | |
National Political and Community Protection Agency | 24 | |
Office of Women's Empowerment | 25 | |
Civil Service Police Unit | 26 | |
16 | 172.16.0.16/24 | |
Department of Sanitation and Gardening | 27 | |
Environmental Agency | 28 | |
Village Community Empowerment Agency and Pemdas | 29 | |
17 | 172.16.0.17/24 | |
Department of Youth Education and Sports | 30 | |
Government Tourism Office | 31 | |
Department of Culture | 32 | |
18 | 172.16.0.18/24 | |
Department of Population and Civil Registration | 33 | |
18a | 172.16.0.118/24 | |
Department of Revenue / Pesedahan Agung | 34 | |
19 | 172.16.0.19/24 | |
LPSE | 35 |
INTERFACE | IP ADDRESS | 3750 (Trunk) | 3750 (Access) | PHYSICAL INTERFACE Catalysyt 4507R |
---|---|---|---|---|
VLAN 10 | 172.16.10.1 / 24 | Gi1/1/1 | Gi 1/0/1 - Gi 1/0/4 | Gi 1/1 |
VLAN 11 | 172.16.11.1 / 24 | Gi1/1/1 | Gi 1/0/1 - Gi 1/0/4 | Gi 1/2 |
VLAN 12 | 172.16.12.1 / 24 | Gi1/1/1 | Gi 1/0/1 - Gi 1/0/2 | Gi 1/3 |
VLAN 13 | 172.16.13.1 / 24 | Gi1/1/1 | Gi 1/0/3 - Gi 1/0/4 | Gi 1/3 |
VLAN 14 | 172.16.14.1 / 24 | Gi 2/13, 2/14 | ||
VLAN 15 | 172.16.15.1 / 24 | Gi 2/15, 2/16, 2/17, 2/18, 2/19, 2/20 | ||
VLAN 16 | 172.16.16.1 / 24 | Gi1/1/1 | Gi 1/0/1 - Gi 1/0/2 | Gi 1/4 |
VLAN 17 | 172.16.17.1 / 24 | Gi1/1/1 | Gi 1/0/3 - Gi 1/0/4 | Gi 1/4 |
VLAN 18 | 172.16.18.1 / 24 | Gi1/1/1 | Gi 1/0/1 - Gi 1/0/2 | Gi 1/5 |
VLAN 19 | 172.16.19.1 / 24 | Gi1/1/1 | Gi 1/0/3 - Gi 1/0/4 | Gi 1/5 |
VLAN 20 | 172.16.20.1 / 24 | Gi1/1/1 | Gi 1/0/5 - Gi 1/0/6 | Gi 1/5 |
VLAN 21 | 172.16.21.1 / 24 | Gi1/1/1 | Gi 1/0/1 - Gi 1/0/2 | Gi 1/6 |
VLAN 22 | 172.16.22.1 / 24 | Gi1/1/1 | Gi 1/0/3 - Gi 1/0/4 | Gi 1/6 |
VLAN 23 | 172.16.23.1 / 24 | Gi1/1/1 | Gi 1/0/5 - Gi 1/0/6 | Gi 1/6 |
VLAN 24 | 172.16.24.1 / 24 | Gi1/1/1 | Gi 1/0/1 - Gi 1/0/2 | Gi 1/7 |
VLAN 25 | 172.16.25.1 / 24 | Gi1/1/1 | Gi 1/0/3 - Gi 1/0/4 | Gi 1/7 |
VLAN 26 | 172.16.26.1 / 24 | Gi1/1/1 | Gi 1/0/5 - Gi 1/0/6 | Gi 1/7 |
VLAN 27 | 172.16.27.1 / 24 | Gi1/1/1 | Gi 1/0/1 - Gi 1/0/2 | Gi 1/8 |
VLAN 28 | 172.16.28.1 / 24 | Gi1/1/1 | Gi 1/0/3 - Gi 1/0/4 | Gi 1/8 |
VLAN 29 | 172.16.29.1 / 24 | Gi1/1/1 | Gi 1/0/5 - Gi 1/0/6 | Gi 1/8 |
VLAN 30 | 172.16.30.1 / 24 | Gi1/1/1 | Gi 1/0/1 - Gi 1/0/2 | Gi 1/9 |
VLAN 31 | 172.16.31.1 / 24 | Gi1/1/1 | Gi 1/0/3 - Gi 1/0/4 | Gi 1/9 |
VLAN 32 | 172.16.32.1 / 24 | Gi1/1/1 | Gi 1/0/5 - Gi 1/0/6 | Gi 1/9 |
VLAN 33 | 172.16.33.1 / 24 | Gi1/1/1 | Gi 1/0/1 - Gi 1/0/4 | Gi 1/10 |
VLAN 34 | 172.16.34.1 / 24 | Gi1/1/1 | Gi 1/0/1 - Gi 1/0/4 | Gi 1/11 |
VLAN 35 | 172.16.35.1 / 24 | Gi1/1/1 | Gi 1/0/1 - Gi 1/0/4 | Gi 1/12 |
Device | IP Address | IP Type | Interface |
---|---|---|---|
CiscoMultilayer Switch cat4500e OUT | 172.16.128.1/24 | Local | Gi 2/48 |
Connect To | |||
Cisco ASA 2900IN | 172.16.128.2/24 | Local | Gi 0/0 |
Cisco ASA 2900OUT | 192.168.101.1/24 | Local | Gi 0/1 |
Connect To | |||
Mikrotik IN | 192.168.101.2/24 | Local | e1 |
Mikrotik OUT | 192.168.253.1/24 | Local | e8 |
Connect To | |||
Cisco Router2900 IN | 192.168.253.2/24 | Local | Gi 0/1 |
Cisco Router2900 OUT | 202.46.10.130/24 | Public | Gi 0/2 |
Connect To | |||
Modem | 202.46.10.129/24 | Public | e1 |
Connect To | |||
Internet |
In the discussion, a simulation of ICT modeling and configuration was carried out at the Office of Communications and Information Technology, Badung Regency Government with the Cisco Packet Tracer program. A simulation was conducted because the ICT configuration in the Badung Regency Government was fixed and not allowed to be reconfigured or further configured. Therefore, the configuration stage is simulated in the Cisco Packet Tracer program, this program is used because the tool used is Cisco. The ICT configuration in the simulation is exactly the same as the ICT configuration in the field. There are only differences in the model of the tool as described in Chapter 1 section 1.5 Scope and Boundaries, and differences in interfaces.
In Section 4.2 Modem Setup is a public IP modeling where only certain IP addresses can be connected. In Section 4.3 Network Configuration Towards the Internet is the ICT configuration stage from Cisco Multilayer Switches to Modems. In section 4.4 NAT configuration is a configuration for converting local IP addresses to public IP addresses. In Section 4.5, Local Network Configuration is the configuration of Cisco Multilayer Switches to Cisco Switches in each Building. Section 4.6 Connection Test is a connection test using the ping application.
The discussion of network configuration will be explained at the same time in the Cisco Packet Tracer simulation. First make a network topology. Starting from the modem configured IP address on the modem (although the modem is not a Cisco device, but its configuration is made close to its original function). According to table 3.5, the IP address at the entrance to the modem is 202.46.10.129/24. Routing used by all routers is RIP (Routing Information Protocol) version 2. The spanning-tree has been configured automatically, namely PVST.
Figure 4.1 Network Topology
Figure 4.2 Configuring the Modem
Next, configure the Internet router. According to table 3.5, the Internet interface to the modem with the IP address is 202.46.10.130/24 (in the fastethernet interface simulation 0/1), while the interface from the Internet to Mikrotik has an IP address of 192.168.253.2/24 (in the fastethernet interface simulation 0/0). The configuration method is the same as giving an IP address to the modem, but does not do an “access-list”.
Figure 4.3 Configuring an Internet Router
This report does not discuss the proxy configuration, therefore in this simulation how to configure a router called Mikrotik is the same as a router configuration called Internet. According to table 3.5 the interface to the Internet (fastEthernet 0/1) is assigned the IP address 192.168.253.1/24. In a connection, for example, between the Internet and Mikrotik interfaces must be on the same network ID. 192.168.253.1/24 (from Mikrotik) and 192.168.253.2/24 (from the Internet), according to Sutanta in theory, the IP address in Chapter 2 is on the same network ID, namely 192.168.253.0/24. The interface to ASA has the IP address 192.168.101.2/24. RIPv2 is “network 192.168.253.0” and “network 192.168.101.0”.
Cisco ASA is a device for firewalls. This report does not discuss data security, therefore in this simulation the Cisco ASA configuration method is the same as the Internet Router configuration. According to table 3.5 the interface to Mikrotik has an IP address of 192.168.101.1/24, according to Sutanta 192.168.101.2/24 and 192.168.101.1/24 are on the same network, namely 192.168.101.0/24. The interface to the NOC (Cisco multilayer switch cat4500e in the field) has an IP address of 172.16.128.2/24. RIPv2 is “network 192.168.101.0” and “network 172.16.0.0”. “Network 172.16.0.0” is used because according to table 3.4 NOC will have IP networks of 172.16.0.0/24, 172.16.16.10.0/24 - 172.16.35.0/24, and 172.16.128.0/24. Therefore RIPv2 “Network 172.16.0.0” will deal with IP addresses 172.16.0.0 - 172.16.255.255.
How to configure Internet routers in Multilayer Switch NOC (Cisco Multilayer Switch cat4500e in the field). There is a slight difference. By default, all NOC interfaces on the NOC function as switches.
Figure 4.4 Configuring NOC
Figure 4.5 Testing connection using PING from NOC
Based on all the above configurations it is not enough to connect from NOC to Modem. NOC to ASA, Mikrotik, and the Internet can be connected but not to the Modem. In fact, only the IP address 202.46.10.130 can be entered in the field.
Figure 4.6 Internet router can be connected to a modem
According to table 3.5 there are 2 public IPs, namely on the Internet and Modem. In order to connect to the modem, the incoming IP address must be converted to 202.46.10.130.
Figure 4.7 Configuring NAT on an Internet Router
Figure 4.8 Testing connection with PING from NOC to Modem
The last configuration is on the LAN (Local Area Network), which is the configuration connecting all Cisco c3700e switches in all buildings to the Multilayer Switch cat4500e in building 10 (NOC). Providing VLAN identity per building and per service based on table 3.3. In this configuration, the interface of each VLAN in the NOC is made with an IP address based on table 3.4 and the table provides information on VLAN installation on several interfaces on the switch of each building. For how to configure the switches for each building is the same. So at this writing the local NOC configuration will be displayed and only 2 switch configurations from 2 buildings.
Figure 4.9 Local Network Topology
Figure 4.10 Local configuration on NOC 1
Depending on the device, the “VLAN database” command can be configured before the configure terminal or at the configure terminal, this command will enter VLAN settings. After that, enter the command “vlan 10” to add VLAN 10. Adding VLANs is done according to table 3.3 and table 3.4, adding VLAN 10 - VLAN 35.
Figure 4.11 Local configuration on NOC 2
Figure 4.12 Local configuration on NOC 3
Assigning an IP address to the VLAN 1 interface is a way to assign an IP address to a device. According to table 3.3 the IP address on the NOC is 172.16.0.10/24. The command “interface range fastEthernet 0/1 - 12” is a way to enter fastethernet 0/1 - fastethernet 0/12 at once. It was planned on this interface (connected to the switch of each building) so that all VLAN IDs can pass. So the command is “switchport mode trunk”, there is a switch that must be given the command “switchport trunk encapsulation dot1Q”, which is an IEEE (Intitute Electrical Electronic Engineer) 802.1Q standard, for VLAN standards. According to table 3.4 VLAN interfaces 10-35 are assigned an IP address.
Figure 4.13 Local configuration of Building 7 switches
The initial line is a general configuration performed on all devices, namely, service timestamps, service password-encryption, line vty 0 4 (telnet login), secret installation (MD5 password), installation on the VLAN interface 1. Gigabitethernet 1/1 interface is the interface that connected to the NOC. So that all VLANs can enter, then with the command “switchport mode trunk”. Based on table 3.4, the fastethernet 0 / 1-4 interface is given the entry of only VLAN 10 with the commands “interface range fastethernet 0/1 - 4”, “switchport mode access”, and “switchport access vlan 10”. In this simulation, so that VLAN 1 in each building is connected, each switch is given a default-gateway with the command “ip default-gateway 172.16.0.10”, which is the default route to VLAN 1 NOC.
Figure 4.14 Providing default-gateway on Building 7 switches
Next is configuration on the Switch Building 12. The method is the same as Building 7, according to tables 3.3 and 3.4 VLAN 18-20 is installed. For other switch configurations, the method is the same. Then the configuration is complete, to see the configuration results you can type the command “show running-config”.
Figure 4.15 Local configuration on Building 12 switch 1
Figure 4.16 Local configuration of Building 12 switch 2
At this writing only a few tests were written. First, the computer is installed on the Building 7 switch on the fastethernet0/1 interface. After that configured and ping the interface VLAN 10 and Modem. After that, telnet to the NOC and switch Building 12.
Figure 4.17 IP PC0 Configuration
Figure 4.18 PING from PC0 to VLAN 10 and Modem
Figure 4.19 Telnet from PC0 to NOC and Building 12 switches
Figure 4.20 Laptop IP Configuration0
Figure 4.21 PING from Laptop0 to NOC and Modem
Figure 4.22 Telnet from Laptop0 to Building 7 switch and NOC
The topology on this network is a tree. The local network consists of 12 switches and 1 multilayer switch. All buildings are connected to building 10. Each office is on 1 VLAN ID. The total VLAN used is 25 of VLAN 10 - Vlan 35, with a network ID of 172.16.10.0/24-172.16.35.0/24. Installation of a VLAN ID is carried out in 1 multilayer switch in 10 buildings and 12 switches in all buildings. The port that is connected from 12 switches to a multilayer switch is a trunk mode where all VLAN IDs can enter. Each switch and multilayer switch is assigned an IP address on VLAN 1 as if it were assigned an IP address on the device.
From the multilayer switch to the Internet network must pass through ASA, Mikrotik, Router, and Modem. The multilayer switch port to the Internet network functions as a router so that the switchport mode is turned off and assigned an IP address. After that the routing mode is activated, static routing is used for the Internet network, while for the internal use RIPv2 dynamic routing. Likewise in ASA, Mikrotik, and Router. The router is given 1 public IP. Everything that goes to the router goes to the modem, then to the Internet network, the private IP address is converted into a public IP with NAT.
For the purpose of processing all devices enabled log and debug for notification of changes in the device. Secret and password are activated for telnet purposes. Telnet server is activated so that you can remote login.
The suggestion that can be given is to improve the quality of the network configuration.