HSRP ( Hot Standby Router Protocol ) adalah protokol redudancy milik cisco yang hanya bisa di konfigurasikan di perangkat cisco dengan tujuan untuk menigkatkan ketersediaan ip default gateway selalu tersedia jika sala satu perangkat sebagai gateway terjadi kesalahan dengan cara membuat ip virtual default gateway active standby. Dalam tutorial ini saya tidak membahas secara detail tentang HSRP, namun saya akan memberi sedikit cara singkat cara mengimplementasikan HSRP.
Berikut topologi yang akan digunakan dalam tutorial ini.
Dalam tutorial ini saya menggunakan ios gns3 versi :
- Router : Cisco IOS Software, 3700 Software (C3745-ADVENTERPRISEK9-M), Version 12.4(25d), RELEASE SOFTWARE (fc1)
1. Konfigurasi ROUTER-GATEWAY-01
ROUTER-GATEWAY-01#conf t
Enter configuration commands, one per line. End with CNTL/Z.
ROUTER-GATEWAY-01(config)#int fa0/0
ROUTER-GATEWAY-01(config-if)#ip add 11.11.11.2 255.255.252
ROUTER-GATEWAY-01(config-if)#no shutdown
ROUTER-GATEWAY-01(config-if)#exit
ROUTER-GATEWAY-01(config)#int fa0/1
ROUTER-GATEWAY-01(config-if)#ip add 172.100.100.251 255.255.255.0
ROUTER-GATEWAY-01(config-if)#no shutdown
ROUTER-GATEWAY-01(config-if)#end
ROUTER-GATEWAY-01#
ROUTER-GATEWAY-01#conf t
Enter configuration commands, one per line. End with CNTL/Z.
ROUTER-GATEWAY-01(config)#router ospf 1
ROUTER-GATEWAY-01(config-router)#network 172.100.100.0 0.0.0.255 area 0
ROUTER-GATEWAY-01(config-router)#network 11.11.11.0 0.0.0.3 area 0
ROUTER-GATEWAY-01(config-router)#end
ROUTER-GATEWAY-01#2. Konfigurasi ROUTER-GATEWAY-02
ROUTER-GATEWAY-02#conf t
Enter configuration commands, one per line. End with CNTL/Z.
ROUTER-GATEWAY-02(config)#int fa0/0
ROUTER-GATEWAY-02(config-if)#ip add 12.12.12.2 255.255.255.252
ROUTER-GATEWAY-02(config-if)#no shutdown
ROUTER-GATEWAY-02(config-if)#exit
ROUTER-GATEWAY-02(config)#int fa0/1
ROUTER-GATEWAY-02(config-if)#ip add 172.100.100.252 255.255.255.0
ROUTER-GATEWAY-02(config-if)#no shutdown
ROUTER-GATEWAY-02(config-if)#end
ROUTER-GATEWAY-02#
ROUTER-GATEWAY-02#conf t
Enter configuration commands, one per line. End with CNTL/Z.
ROUTER-GATEWAY-02(config)#router ospf 1
ROUTER-GATEWAY-02(config-router)#network 172.100.100.0 0.0.0.255 area 0
ROUTER-GATEWAY-02(config-router)#network 12.12.12.0 0.0.0.3 area 0
ROUTER-GATEWAY-02(config-router)#end
ROUTER-GATEWAY-02#
3. Konfigurasi ROUTER-DC
ROUTER-DC#conf t
Enter configuration commands, one per line. End with CNTL/Z.
ROUTER-DC(config)#int fa0/0
ROUTER-DC(config-if)#ip add 11.11.11.1 255.255.255.252
ROUTER-DC(config-if)#ip add 12.12.12.1 255.255.255.252
ROUTER-DC(config-if)#no shutdown
ROUTER-DC(config-if)#exit
ROUTER-DC(config)#int fa1/0
ROUTER-DC(config-if)#ip add 10.10.10.254 255.255.255.0
ROUTER-DC(config-if)#no shutdown
ROUTER-DC(config-if)#end
ROUTER-DC#
ROUTER-DC#conf t
Enter configuration commands, one per line. End with CNTL/Z.
ROUTER-DC(config)#router ospf 1
ROUTER-DC(config-router)#network 11.11.11.0 0.0.0.3 area 0
ROUTER-DC(config-router)#network 11.11.11.0 0.0.0.3 area 0
ROUTER-DC(config-router)#network 10.10.10.0 0.0.0.255 area 0
ROUTER-DC(config-router)#end
ROUTER-DC#wr
Building configuration...
[OK]
ROUTER-DC#4. Konfigurasi HSRP ROUTER-GATEWAY-01
Enter configuration commands, one per line. End with CNTL/Z.
ROUTER-GATEWAY-01(config)#int fa0/1
ROUTER-GATEWAY-01(config-if)#standby 1 ip 172.100.100.254 "Menentukan group HSRP dan Ip Virtual Gateway"
ROUTER-GATEWAY-01(config-if)#standby 1 priority 105 "Menentukan priority HSRP"
ROUTER-GATEWAY-01(config-if)#standby 1 preempt "Perintah untuk mengaktifkan default priority HSRP"
ROUTER-GATEWAY-01(config-if)#end
ROUTER-GATEWAY-01#
5. Konfigurasi HSRP ROUTER-GATEWAY-02
ROUTER-GATEWAY-02#conf t
Enter configuration commands, one per line. End with CNTL/Z.
ROUTER-GATEWAY-02(config)#int fa0/1
ROUTER-GATEWAY-02(config-if)#standby 1 ip 172.100.100.254 "Mentukan group HSRP dan Ip Virtual Gateway"
ROUTER-GATEWAY-02(config-if)#standby 1 priority 100 "Menetukan priority HSRP"
ROUTER-GATEWAY-02(config-if)#standby 1 preempt "Perintah untuk mengaktifkan default priority HSRP"
ROUTER-GATEWAY-02(config-if)#end
ROUTER-GATEWAY-02#
Ket :
- Default priority HSRP adalah 100
- Priority tertinggi yang menjadi jalur Active
- Preemt adalah perintah untuk mengaktifkan priority default HSRP pada saat terjadi kegagalan pada jalur priority tertinggi atau nilai priority lawan group HSRP nya lebih kecil dari 100
6. Verifikasi Konfigurasi HSRP pada ROUTER-GATEWAY-0 dan ROUTER-GATEWAY-02
ROUTER-GATEWAY-01#sh standby brief
P indicates configured to preempt.
|
Interface Grp Prio P State Active Standby Virtual IP
Fa0/1 1 105 P Active local 172.100.100.252 172.100.100.254
ROUTER-GATEWAY-01#
ROUTER-GATEWAY-01#sh standby fa0/1
FastEthernet0/1 - Group 1
State is Active
4 state changes, last state change 00:02:32
Virtual IP address is 172.100.100.254
Active virtual MAC address is 0000.0c07.ac01
Local virtual MAC address is 0000.0c07.ac01 (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 0.184 secs
Preemption enabled
Active router is local
Standby router is 172.100.100.252, priority 100 (expires in 8.204 sec)
Priority 105 (configured 105)
IP redundancy name is "hsrp-Fa0/1-1" (default)
ROUTER-GATEWAY-01#
ROUTER-GATEWAY-02#sh standby br
ROUTER-GATEWAY-02#sh standby brief
P indicates configured to preempt.
|
Interface Grp Prio P State Active Standby Virtual IP
Fa0/1 1 100 P Standby 172.100.100.251 local 172.100.100.254
ROUTER-GATEWAY-02#
ROUTER-GATEWAY-02#sh standby fa0/1
FastEthernet0/1 - Group 1
State is Standby
7 state changes, last state change 00:03:27
Virtual IP address is 172.100.100.254
Active virtual MAC address is 0000.0c07.ac01
Local virtual MAC address is 0000.0c07.ac01 (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 2.364 secs
Preemption enabled
Active router is 172.100.100.251, priority 105 (expires in 8.332 sec)
Standby router is local
Priority 100 (default 100)
IP redundancy name is "hsrp-Fa0/1-1" (default)
ROUTER-GATEWAY-02#
ROUTER-GATEWAY-02#
Dari hasil verifikasi di atas status HSRP pada router ROUTER-GATEWAY-01 Active karena nilai prioritynya lebih tinggi dari nilai priority defaultnya, sedangkan router ROUTER-GATEWAY-02 status Standby karena nilai priority lebih kecil dari router pasanganya.
7. Verifikasi dari Komputer Clien-01 ke SERVER
Client-01> ping 10.10.10.8
84 bytes from 10.10.10.8 icmp_seq=1 ttl=62 time=25.002 ms
84 bytes from 10.10.10.8 icmp_seq=2 ttl=62 time=26.001 ms
84 bytes from 10.10.10.8 icmp_seq=3 ttl=62 time=31.001 ms
84 bytes from 10.10.10.8 icmp_seq=4 ttl=62 time=30.001 ms
84 bytes from 10.10.10.8 icmp_seq=5 ttl=62 time=29.001 ms
Client-01> tracer 10.10.10.8
trace to 10.10.10.8, 8 hops max, press Ctrl+C to stop
1 172.100.100.251 8.001 ms 9.000 ms 9.001 ms
2 *11.11.11.1 18.001 ms 19.001 ms
3 *10.10.10.8 11.001 ms
Client-01>
Dari hasil verifikasi di atas komputer Client-01 menuju SERVER melalui 11.111.1 jalur yang Active
Lakukan shutdown interface Fa0/1 pada ROUTER-GATEWAY-01 yang mengarah ke switch lokal, makan secara otomatis jalur Standby pada ROUTER-GATEWAY-02 akan menjadi Active dan status ROUTER-GATEWAY-01 akan menjadi State is Init (interface down).
ROUTER-GATEWAY-01(config)#int fa0/1
ROUTER-GATEWAY-01(config-if)#shutdown
*Mar 1 01:09:36.639: %HSRP-5-STATECHANGE: FastEthernet0/1 Grp 1 state Active -> Init
*Mar 1 01:09:36.659: %OSPF-5-ADJCHG: Process 1, Nbr 172.100.100.252 on FastEthernet0/1 from FULL to DOWN, Neighbor Down: Interface down or detached
ROUTER-GATEWAY-01(config-if)#
ROUTER-GATEWAY-01(config-if)#end
ROUTER-GATEWAY-01#sh standby brief
P indicates configured to preempt.
|
Interface Grp Prio P State Active Standby Virtual IP
Fa0/1 1 105 P Init unknown unknown 172.100.100.254
ROUTER-GATEWAY-01#
ROUTER-GATEWAY-01#sh standby fa0/1
FastEthernet0/1 - Group 1
State is Init (interface down)
5 state changes, last state change 00:00:51
Virtual IP address is 172.100.100.254
Active virtual MAC address is unknown
Local virtual MAC address is 0000.0c07.ac01 (v1 default)
Hello time 3 sec, hold time 10 sec
Preemption enabled
Active router is unknown
Standby router is unknown
Priority 105 (configured 105)
IP redundancy name is "hsrp-Fa0/1-1" (default)
ROUTER-GATEWAY-01#
Verifikasi pada ROUTER-GATEWAY-02
ROUTER-GATEWAY-02#sh standby brief
P indicates configured to preempt.
|
Interface Grp Prio P State Active Standby Virtual IP
Fa0/1 1 100 P Active local unknown 172.100.100.254
ROUTER-GATEWAY-02#
ROUTER-GATEWAY-02#sh standby fa0/1
FastEthernet0/1 - Group 1
State is Active
8 state changes, last state change 00:02:59
Virtual IP address is 172.100.100.254
Active virtual MAC address is 0000.0c07.ac01
Local virtual MAC address is 0000.0c07.ac01 (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 0.804 secs
Preemption enabled
Active router is local
Standby router is unknown
Priority 100 (default 100)
IP redundancy name is "hsrp-Fa0/1-1" (default)
ROUTER-GATEWAY-02#
Verifikasi dari Komputer Clien-01 ke SERVER
Client-01> ping 10.10.10.8
84 bytes from 10.10.10.8 icmp_seq=1 ttl=62 time=35.002 ms
84 bytes from 10.10.10.8 icmp_seq=2 ttl=62 time=31.002 ms
84 bytes from 10.10.10.8 icmp_seq=3 ttl=62 time=29.002 ms
84 bytes from 10.10.10.8 icmp_seq=4 ttl=62 time=24.002 ms
84 bytes from 10.10.10.8 icmp_seq=5 ttl=62 time=21.001 ms
Client-01> tracer 10.10.10.8
trace to 10.10.10.8, 8 hops max, press Ctrl+C to stop
1 172.100.100.252 15.001 ms 7.000 ms 9.001 ms
2 12.12.12.1 19.001 ms 19.001 ms 19.001 ms
3 *10.10.10.8 30.002 ms
Client-01>
Dari hasil verifikasi di atas komputer Client-01 menuju SERVER melalui 12.12.12.1 jalur yang Active .
Hidupkan kembali interface fa0/1 pada ROUTER-GATEWAY-01 secara oromatis jalur Active akan berpindah pada ROUTER-GATEWAY-01.
Terima kasih atas kunjunganya, semoga bermanfaat..
No comments:
Post a Comment