(01) Laporan Dedicated Router

8/6/2019 (01) Laporan Dedicated Router

1/25


2/25

Hierarki Picture

1. Core Layer

Menurut sumber yang telah saya baca dan terjemahkan jadi lapisan ini dianggap sebagai

tulang punggung jaringan dan termasuk high-end switch dan kabel berkecepatan tinggi sepertifiber optic dan lapisan inti bertanggung jawab untuk cepat dan transportasi data dapat diandalkan

di seluruh jaringan. Pada core layer keefektivitasan adalah kuncinya. Sistem yang lebih sedikit

dan lebih cepat menciptakan backbone yang lebih efisien. Ada beberapa peralatan yang tersediandalam layer ini. Contoh peralatan core layer Cisco meliputi:

Cisco switches seperti 7000, 7200, 7500, and 12000 (dipakai dalam WAN)

Catalyst switches seperti 6000, 5000, dan 4000 (dipakain dalam LAN)

T-1 and E-1 lines, Frame relay connections, jaringan ATM, Switched Multimegabit DataService (SMDS)

Provides up to twice the performance compared to the Cisco 7301up to two million

packets per second (mpps) in Cisco Express Forwarding (CEF)

Offers four built-in Gigabit Ethernet (GE) ports

Provides one dedicated 10/100-Mbps copper Ethernet port for management

Provides one USB port for general storage and security token storage

Provides a single Cisco 7000 Series port adapter slot

Offers front-to-back airflow and single-sided management
http://1.bp.blogspot.com/_MHtLiBfiGLQ/TTRUxZRWa2I/AAAAAAAAAAM/-gWgTPHR5tM/s1600/hierarki.png


3/25

2. Distribution Layer

Lapisan ini mencakup LAN berbasis router dan layer 3 switch. Lapisan ini memastikan

bahwa paket yang benar diarahkan antara subnet dan VLAN di perusahaan anda. Lapisan inijuga disebut lapisan Workgroup .Lapisan ini bertanggung jawab atas routing. Juga menyediakan

konektivitas jaringan berbasis pada kebijakan, termasuk:

Packet filtering (firewalling)

QoS

Access Layer Aggregation Point

Control Broadcast and Multicast

Application Gateways

Lapisan ini juga melakukan antrian dan menyediakan manipulasi paket data dari lalu lintasjaringan.

Hal ini di lapisan di mana kita mulai melakukan kontrol atas transmisi jaringan, termasuk apayang masuk dan apa yang keluar dari jaringan. Kita juga akan membatasi dan menciptakan

broadcast domain, menciptakan virtual LAN, jika perlu, dan melakukan berbagai tugaspengelolaan, termasuk mendapatkan ringkasan rute. Dalam ringkasan rute, kita menggabungkan

lalu lintas dari subnet banyak ke dalam koneksi jaringan inti. Dalam router Cisco, perintah untuk

mendapatkan ringkasan routing adalah:

show ip route summary (menunjukkan ringkasan ip route)

Contoh peralatan pada layer ini Cisco-spesifik lapisan termasuk 2600,4000, 4500 router series,

Cisco Catalyst 6500 Series Switches

Supports all Cisco Catalyst 6500 Series modules, including:Supervisor enginesFast Ethernet

modules (with IEEE 802.3af Power over Ethernet [PoE])Gigabit Ethernet modules (with IEEE

802.3af PoE)10 Gigabit Ethernet modulesFlex WAN modulesShared Port Adaptors/SPAInterface ProcessorsMulti-Gigabit services modules (content services ,firewall, intrusion

detection, IP Security [IPSec], VPN, network analysis, and Secure Sockets Layer [SSL]

acceleration).


4/25

3. Access Layer

Lapisan ini meliputi hub dan switch. Lapisan ini juga disebut lapisan desktop karena

berfokus pada node klien yang terhubung, seperti workstation ke jaringan. Lapisan inimemastikan bahwa paket yang dikirim ke komputer pengguna akhir.

Access layer berisi perangkat yang memungkinkan kelompok kerja dan pengguna untuk

menggunakan layanan yang diberikan oleh distribution layer dan core latyer. Pada access layer,

kita memiliki kemampuan untuk memperluas atau collision domain kontrak menggunakanrepeater, hub, atau switch standar. Berkenaan dengan lapisan ini, switch bukan sebuah perangkat

bertenaga tinggi, seperti yang ditemukan di core layer.

Beberapa perangkat yang termasuk Access Layer :

Cisco 3900 Series Integrated Services Routers



Cisco 800 Series Routers

Linksys by Cisco WRT54GL SoHo Router

3. Alat dan Bahan

Seperangkat PC (OS Windows XP/7)

Software Simulator Packet Tracer

Microsoft Office Visio

Modul tentang Dedicated Router

4. Soal Pembelajaran

a) Identifikasi Dedicated Router.

b) Kelompokan Dedicated Router tersebut apakah digunakan untuk Core Layer, Distributte

Layer, atau Access Layer.

c) Tentukan penempatan perangkat sesuai spesifikasi dan seri.d) Buat topologi yang terdapat router tersebut.

e) Lakukan konfigurasi pada router tersebut.


5/25


6/25

Integrated secure 802.11a/g/n access

point (optional) based on the draft

802.11n standard; dual-band radios for

mobility and support for autonomous

or Cisco Unified WLAN architectures

Enhanced security including:

- Firewall with advance application

and control for email, instant

messaging (IM), and HTTP traffic

- Site-to-site remote-access

and dynamic VPN services: IP

Security (IPsec) VPNs (Triple Data

Encryption Standard [3DES] or

Advanced Encryption Standard

[AES]), Dynamic Multipoint VPN

[DMVPN], Group Encrypted

Transport VPN [GET VPN] with

onboard acceleration, and Secure

Sockets Layer [SSL] VPN

- Intrusion prevention system (IPS):

An inline, deep-packet-inspection

feature that mitigates a wide range


7/25

of network attacks

- Content filtering: A subscriptionbased

integrated security

solution that offers categorybased

reputation rating, keyword

blocking, and protection against

adware, malware, spyware, and

URL blocking

An 8-port 10/100 Fast Ethernet

managed switch with VLAN support

and 4-port support for Power over

Ethernet (PoE) (optional) to power IP

phones or external access points

Metro Ethernet features include:

- One 1000 BASE-T Gigabit

Ethernet WAN port

- One 10/100 BASE-T Fast

Ethernet WAN port

- Intelligent hierarchical quality

of service (HQoS): Supports

hierarchical queuing and

shaping


8/25

- Connectivity Fault Management

(CFM), based on 802.1ag

- 802.3ah standard based Link

operational administration and

maintenance (OAM)

- Ethernet Local Management

Interface (E-LMI) for the

Customer Edge

Two USB 2.0 ports for security

eToken credentials, booting, and

loading configuration from USB

Cisco 1900 Series

Integrated Services

Routers

Embedded hardware-accelerated

VPN encryption

Secure collaborative communications

with Group Encrypted Transport VPN,

Dynamic Multipoint VPN, or Enhanced

Easy VPN

Integrated threat control using Cisco

IOS Firewall, Cisco IOS Zone-Based

Firewall, Cisco IOS IPS, and Cisco IOS

Content Filtering

Identity management that uses


9/25

authentication, authorization, and

accounting (AAA), and public key

infrastructure

2 Integrated 10/100/1000 Ethernet

ports

2 enhanced High-Speed WAN

Interface Card slots that can host

2 single wide or 1 double wide and

1 single wide (e)HWIC

Fully integrated power distribution

to modules supporting 802.3af

Power over Ethernet (PoE) and Cisco

Enhanced PoE

Cisco 1800 Series

(Fixed-configuration)

Secure, concurrent services for

broadband access with WAN high

availability

Manageability and reliability of

Cisco IOS Software Business-class

Security

Stateful firewall with URL filtering

VPN 3DES encryption and Advanced

Encryption Standard (AES)

encryption


10/25

Dynamic Multipoint VPN (DMVPN)

Intrusion Prevention System (IPS)

Fixed Configuration

Secure broadband access at

broadband performance

Integrated ISDN Basic Rate S/T

Interface (BRI), analog modem, or

Ethernet backup port for redundant

WAN links and load balancing

Secure wireless LAN option for

simultaneous 802.11a and 802.11b/g

with use of multiple antennas

8-port 10/100 managed switch with

802.1q VLAN support and optional

Power over Ethernet (PoE)

Cisco 7304 Series High-performance connectivity up to

OC-48 speeds

Built-in GbE for high-performance

LAN connectivity

Hardware-accelerated services with

Parallel Express Forwarding

Optional redundant processor and

power supplies for high availability in


11/25

a single box solution

Multiprotocol support

Business-class Security VPN

Hardware-accelerated Access

Control Lists

Stateful inspection firewall

Modularity

More than 20 network line cards

Chassis supports up to 4 line cards

or port adapters

Built in GbE ports on processor

Support for Cisco port adapters

Manageability and reliability of

Cisco IOS Software2 Distributed

Layer

Cisco 860 Series Concurrent broadband services for

small offices, and remote sites

Secure connectivity with Stateful

Inspection Firewall and IP Security

(IPsec) VPN support for small offices

Security features including:

- Stateful Inspection Firewall

- IP Security (IPsec) VPNs (Triple

Data Encryption Standard [3DES]


12/25

or Advanced Encryption Standard

[AES])

4-port 10/100 Fast Ethernet managed

switch with VLAN support

CON/AUX Port for console or external

modem

Secure 802.11g/n access point

option based on IEEE802.11n draft 2.0

standard

Easy setup, deployment, and remote

management capabilities through

Web-based tools and Cisco IOS

Software

Cisco 2800 Series 2 integrated 10/100/1000 Ethernet

ports

2 enhanced High-Speed WAN

Interface Card slots that can host 2

single wide or 1 double wide and 1

single wide (e)HWIC

1 Internal Services Module slot

Fully integrated power distribution

to modules supporting 802.3af

Power over Ethernet (PoE) and Cisco


13/25

Enhanced PoE

Secure Networking

Hardware-based VPN acceleration

on motherboard

Antivirus Defense

Intrusion Prevention System (IPS)

IP Communications and IP

Telephony Support

IP Communications Express

(CCME/SRST/CUE)

Enhanced Modularity (EVM and

PVDM2 support) Integrated

Switching

Up to 64 powered 10/100 switch

ports

802.3af Power over Ethernet

compliance

Cisco Catalyst 6500Series Switches

Supports all Cisco Catalyst 6500 Series moduleincluding:Supervisor enginesFast Ethernet modules (with IEE

802.3af Power over Ethernet [PoE])Gigabit Ethernet modul

(with IEEE 802.3af PoE)10 Gigabit Ethernet modulesFlex WA

modulesShared Port Adaptors/SPA Interface ProcessorsMulGigabit services modules (content services ,firewall, intrusio

detection, IP Security [IPSec], VPN, network analysis, an

Secure Sockets Layer [SSL] acceleration).

ASR 1000 SeriesAggregation Services

Routers

Industry-leading performance, service capabilities, reliability, anefficiencies in a compact form factor

Ideal for enterprises for private WAN, Internet edge, WAN
http://www.cisco.com/en/US/products/ps9343/index.htmlhttp://www.cisco.com/en/US/products/ps9343/index.htmlhttp://www.cisco.com/en/US/products/ps9343/index.htmlhttp://www.cisco.com/en/US/products/ps9343/index.htmlhttp://www.cisco.com/en/US/products/ps9343/index.htmlhttp://www.cisco.com/en/US/products/ps9343/index.html


14/25

aggregation deployments, and also as a high-end managedcustomer premises equipment (CPE)

Highly secure, high-performance "instant-on" services including

multi-gigabit VPN, encryption, firewall, application intelligenceand broadband services

Extends network as a platform for cloud computing to helpconserve resources and optimize performance

Enhances operating efficiencies by using its compact form facto

to reduce power consumption, space, and sparing requirements

Offers software redundancy on non-redundant hardware withASR 1002 and ASR 1004 routers

Offers highly scalable, hardware redundancy and 40 Gbps

services and interface processors in the ASR 1006 and ASR 101

routers

Catalyst 6500 SeriesSwitches

Cisco's flagship switching solution offering industry-leadingservices and performance along with comprehensive feature sets

for core, distribution, wiring closet, data center, enterprise WAN

routing, and Metro Ethernet deployments

Delivers maximum network uptime and provides comprehensiveintegrated network security

Provides up to 400-mpps performance with distributed

forwarding architecture

3 Access Layer Cisco 800 SeriesIntegrated Services

Router

Provides secure WAN connectivity with desktop form factor

Ideal for telecommuters and small offices

Wire-speed performance with secure data services for xDSL,cable, and Ethernet WAN environments

Factory-selectable 802.11n access point, 3G WAN, and

Survivable Remote Site Telephony (SRST) options

Cisco ME 3600XSeries

Facilitates access deployments that require the flexibility of a"pay-as-you-grow" service model
http://www.cisco.com/en/US/products/ps10956/index.htmlhttp://www.cisco.com/en/US/products/ps10956/index.htmlhttp://www.cisco.com/en/US/products/ps10956/index.htmlhttp://www.cisco.com/en/US/products/ps10956/index.html


15/25

Simplifies field upgrades from 1 Gigabit Ethernet to 10 GigabitEthernet

Efficiently extends MPLS to the access layer

Delivers premium services with hierarchical quality of service,

large buffers, and a large number of queues

Cisco 3900 Series

Integrated ServicesRouter

Delivers scalable rich-media services including TelePresence,

highest density of service virtualization, and lowest TCO withenergy efficiency

Ideal for high-end deployments requiring business continuity,

WAN flexibility, superior collaboration capabilities, and

investment protection

Field-upgradeable motherboard, circuit-speed WAN performancup to 350 Mbps with services such as security, mobility, WAN

optimization, unified communications, video, and customized

applications

Cisco 1900 Series

Integrated Services

Router

Entry-level secure WAN deployments, offers service

virtualization, and low TCO

Ideal for small offices requiring modular flexibility for highlysecure mobility and customizable applications

Circuit-speed performance up to 25 Mbps with concurrent

services

Factory-selectable 802.11n access point and double-wide HWIC

support; desktop form factor

Cisco 1800 Series

(Modular)

Wire-speed performance with

secure data services enabled at up

to T1/E1/xDSL rates

Increased services density for

secure data services


16/25

Support for next-generation

High-speed WAN Interface Cards

Increased flexibility through

support of internal AIM slot for

high-speed VPN and future

applications

Built-in dual Fast Ethernet ports

Support for over 30 existing and

new modules Secure Networking

Hardware-based VPN acceleration

on motherboard

d) Buat topologi seperti gambar di bawah ini.
http://1.bp.blogspot.com/_MHtLiBfiGLQ/TTRWWaGqb8I/AAAAAAAAAAQ/KvvpT1Mc-HQ/s1600/New+Picture+%25284%2529.bmp


17/25

Konfigurasi IP

PC0

IP Address : 1.1.1.2/24

Gateway : 1.1.1.1

PC5

IP Address : 7.7.7.2/24

Gateway : 7.7.7.1

Konfigurasi Access Router 1

Router>enable

Router#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Router(config)#interface FastEthernet0/1

Router(config-if)#ip address 1.1.1.1 255.0.0.0


Router(config-if)#no shutdown

Router(config-if)#

Router(config-if)#exit






18/25

Router(config-if)#



Router(config-if)#




Router(config)#ip route 3.3.3.0 255.255.255.0 2.2.2.2





Konfigurasi Distributed Router 1

Router>enable







Router(config-if)#






19/25


Router(config-if)#







Konfigurasi Core Router 1

Router>enable







Router(config-if)#







20/25

Router(config-if)#







Konfigurasi Core Router 2

Router>enable







Router(config-if)#






Router(config-if)#





21/25




Konfigurasi Distributed Router 4

Router>enable







Router(config-if)#



Router(config-if)#




22/25

Router(config-if)#












Konfigurasi Access Router 6

Router>enable







Router(config-if)#



Router(config-if)#



23/25


Router(config-if)#












6. Hasil Percobaan

Uji Koneksi ke Gateway PC

Uji Koneksi ke Gateway Pusat 1
http://3.bp.blogspot.com/_MHtLiBfiGLQ/TTRXDtyb2yI/AAAAAAAAAAY/RYt5oFEDMU8/s1600/uji+ke+gateway+pusat+1.bmphttp://2.bp.blogspot.com/_MHtLiBfiGLQ/TTRWyACmTgI/AAAAAAAAAAU/3zhKSU7n4k4/s1600/uji+ke+gateway+pc.bmp


24/25

Uji Koneksi ke Gateway Pusat 2

Uji Koneksi ke PC 5

Trace Route Ke Gateway Pusat

Trace Route Ke PC 5
http://3.bp.blogspot.com/_MHtLiBfiGLQ/TTRYgEH49cI/AAAAAAAAAAg/gJXN9lAqvXc/s1600/New+Picture+%25282%2529.bmphttp://3.bp.blogspot.com/_MHtLiBfiGLQ/TTRZ9SBBnSI/AAAAAAAAAAk/yaP_dIcIPq8/s1600/uji+ke+pc.bmphttp://2.bp.blogspot.com/_MHtLiBfiGLQ/TTRX4vqHK6I/AAAAAAAAAAc/hR_B0RlygRA/s1600/uji+ke+gateway+pusat+2.bmp


25/25

7. Kesimpulan

Dedicated Router merupakan Router yang dirancang oleh vendor masing masing dan

memiliki fungsi pula yang telah ditentukan oleh vendor. Dengan dedicated ini juga kita dapatmenghubungkan beberapa network.
http://3.bp.blogspot.com/_MHtLiBfiGLQ/TTRarou84vI/AAAAAAAAAAo/0qcA-tvOq7s/s1600/New+Picture+%25283%2529.bmp

Documents

(01) Laporan Dedicated Router