Bersama kita perkemaskan forum ini sementara forum asal dalam pemulihan.
Hardware
Cisco Router 1721 ko mesti di install WAN Interface Card (WIC) supaya router ni boleh berkomunikasi dengan ADSL modem. Install kat slot 0, Requirement untuk ko install WIC ni ialah Microprocessor MPC 860 rev B5 + , IOS version 12.2(2)XJ +
Penyambungan
Dari Ethernet port pada WIC, connect ke ADSL modem dengan straight cable.
Dari port yg dilabel 10/100 ethernet cisco router, dari situ connect ke switch atau hub menggunakan straight cable.
Dari Port yg dilabel Console, connect ke COM port PC menggunakan blue console cable+DB-9 yg dilabel terminal.
Guna hyper terminal, set seperti berikut:
9600 baud
8 data bits
No parity
1 stop bit
No flow control
Kat contoh ni, network aku ialah 199.169.0.0 255.255.255.0 router tu aku bagi ip 199.169.0.1 dan aku namakan router tu ciscorouter password cisco12345 dan 12345cisco sebagai enable secret password. Menggunakan streamyx pakej rm88, hehehehe.
Mula2 ko akan tengok prompt ni (sbb router ko belum diberi nama, jadi nama default router)
Router>
Router>enable
Bila minta password terus tekan enter (sbb password belum set lagi)
Lepas ko taip enable, router> akan bertukar ke router# bermakna ko dah access privilege mode.
Router#configure terminal
Lepas ko taip configure terminal, router # akan bertukar ke router(config)# bermakna ko dah access global mode untuk ubah setting pada router.
Sekarang set password
Router(config)#enable cisco12345
Router(config)#enable secret 12345cisco
Bagi router tu nama
Router(config)#host ciscorouter
router(config)# akan bertukar ke ciscorouter(config)# , tukar nama dah..
Set IP address kat interface yg digunakan untuk LAN
ciscorouter(config)#interface fastethernet0
ciscorouter(config-if)#ip address 199.169.0.1 255.255.255.0
ciscorouter(config-if)#exit
ciscorouter(config)#exit
setakat ni kita save dulu, rehat jap…
ciscorouter#copy running-config startup-config
…………………………………………………………………………………………………..
Kita sambung lagi
Router#configure terminal ----- ko boleh singkatkan penggunaan command seperti conf term
Set interface yg connect ke ADSL modem (WIC)
ciscorouter(config)#vpdn enable
ciscorouter(config)#vpdn –group 1
ciscorouter(config-vpdn)#request-dialin
ciscorouter(config-vpdn)#protocol pppoe
ciscorouter(config-vpdn)#exit
!
ciscorouter(config)#interface ethernet0
ciscorouter(config-if)#description ADSL WAN interface
ciscorouter(config-if)#no ip address
ciscorouter(config-if)#no ip redirects
ciscorouter(config-if)#no ip unreacheables
ciscorouter(config-if)#no ip proxy-arp
ciscorouter(config-if)#no ip mroute-cache
ciscorouter(config-if)#no cdp enable
ciscorouter(config-if)#pppoe enable
ciscorouter(config-if)#exit
!
ciscorouter(config)#interface dialer1
ciscorouter(config-if)#description ADSL WAN Dialer
ciscorouter(config-if)#no ip unreachables
ciscorouter(config-if)#ip address negotiated
ciscorouter(config-if)#ip nat outside
ciscorouter(config-if)#encapsulation ppp
ciscorouter(config-if)#no ip mroute-cache
ciscorouter(config-if)#dialer pool 1
ciscorouter(config-if)#dialer-group 1
ciscorouter(config-if)#no cdp enable
ciscorouter(config-if)#ppp pap sent-username <username_streamyx aku> password 123456
ciscorouter(config-if)#exit
ciscorouter(config)#
!
ok, sekarang configure untuk LAN interface ko lak, yg ip address kita setup 199.169.0.1 tadi
lebih kurang samala command nya,
ciscorouter(config)#interface fastethernet0
ciscorouter(config-if)#description LAN Interface
ciscorouter(config-if)#no ip redirects
ciscorouter(config-if)#no ip unreacheables
ciscorouter(config-if)#no ip proxy-arp
ciscorouter(config-if)#ip nat inside
ciscorouter(config-if)#no ip mroute-cache
ciscorouter(config-if)#no cdp enable
ciscorouter(config-if)#exit
ciscorouter(config)#
!
balik ke global mode
ciscorouter(config)#access-list 10 permit 199.169.0.0 255.255.255.255
ciscorouter(config)#no cdp run
ciscorouter(config)#ip nat inside source list 10 interface Dialer1 overload
ciscorouter(config)#ip classless
ciscorouter(config)#ip route 0.0.0.0 0.0.0.0 Dialer1
ciscorouter(config)#exit
ciscorouter#copy running-config startup-config
Router A kat Hq menggunakan static IP
Public Static IP: 218.111.114.130
Lan IP: 199.169.0.0
Router B kat branch menggunakan dynamic IP
Public IP: dynamic
Lan IP: 192.168.1.0
Tugas yang diberi, bina vpn menggunakan hash algorithm MD5 dan encryption 3DES, share key ialah 2fh7V1jl7yYas0q yg merupakan rahsia bagi syarikat ko. kalo orang lain tau habis ko kena pecat hehehe… dan transform-set ko bagi nama contoh hqset
Set Router A sebagai host dan Router B sebagai client.
Router A (refer penerangan yg sebelumnya) yg router 199.169.0.1 tu.. hanya some of the config perlu ditukar
Configure WIC
Routerhq(config)#interface ethernet0
Routerhq(config-if)#ip address 218.111.114.130 255.255.255.0
Routerhq(config-if)#exit
!
Configure interface dialer1
Routerhq(config)#interface dialer1
Routerhq(config-if)#ip address
Routerhq(config-if)#ip route 0.0.0.0 0.0.0.0
Routerhq(config-if)#exit
!
sekarang configure vpn
Routerhq(config)#crypto isakmp policy 10
Routerhq(config-ike)#hash md5
Routerhq(config-ike)#encryption 3des
Routerhq(config-ike)#authentication pre-share
Routerhq(config-ike)#exit
!
Routerhq(config)#crypto isakmp key 2fh7V1jl7yYas0q address 0.0.0.0 -- 0.0.0.0 means leh terima router yg dynamic ip
Routerhq(config)#crypto ipsec transform-set hqset esp-3des esp-md5-hmac
Routerhq(config)#crypto map vpn-tunnel 10 ipsec-isakmp
Routerhq(config-crypto)#set transform-set hqset
Routerhq(config-crypto)#set pfs group1
Routerhq(config-crypto)#exit
Routerhq(config)#exit
Routerhq#copy running-config startup-config
!
Router B kat branch
Ko tau camner nak mulakan hidup baru router B tu kan?bagi password, set ip, add dialer interface, configure lan. Kalo lupa leh rujuk guide yg mula2 aku tunjukkan tu.
Untuk vpn, policy mesti sama ngan router A
Routerbranch(config)# crypto isakmp policy 10
Routerbranch (config-crypto)#hash md5
Routerbranch(config-crypto)#encryption 3des
Routerbranch(config-crypto)#authentication pre-share
Routerbranch(config-crypto)#exit
!
Routerbranch(config)#crypto isakmp key 2fh7V1jl7yYas0q address 218.111.114.130
Routerbranch(config)#crypto ipsec transform-set hqset esp-3des esp-md5-hmac
Routerbranch(config)#crypto map vpn-tunnel 10 ipsec-isakmp
Routerbranch(config-crypto)#set transform-set hqset
Routerbranch(config-crypto)#set peer 218.111.114.130
Routerbranch(config-crypto)#set pfs group1
Routerbranch(config-crypto)#exit
Routerbranch(config)#
Routerbranch#copy running-config startup-config
Home