#ISP1 (konfigurasi Interfaces dan IP,DNS dan default gtw pada ISP1) system identity set name=ISP1 ip dhcp-client remove numbers=0 interface set name=ether1-INT ether1 interface set name=ether2-LAN ether2 interface set name=ether3-ToCore ether3 ip address add address=192.168.12.154/24 interface=ether1-INT ip address add address=192.168.11.254/24 interface=ether2-LAN ip address add address=192.168.100.254/24 interface=ether3-ToCore ip route add gateway=192.168.12.2 ip dns set servers=192.168.12.2 ip firewall nat add chain=srcnat out-interface=ether1-INT action=masquerade ip dhcp-server setup #ISP2 ((konfigurasi Interfaces dan IP,DNS dan default gtw pada ISP2) system identity set name=ISP2 ip dhcp-client remove numbers=0 interface set name=ether1-INT ether1 interface set name=ether2-LAN ether2 interface set name=ether3-ToCore ether3 ip address add address=192.168.10.47/24 interface=ether1-INT ip address add address=192.168.101.254/24 interface=ether3-ToCore ip address add address=192.168.20.254/24 interface=ether2-LAN ip dns set servers=8.8.8.8 ip route add gateway=192.168.10.1 ip firewall nat add chain=srcnat out-interface=ether1-INT action=masquerade ip dhcp-server setup #CORE (konfigurasi Interfaces dan IP,DNS dan default gtw pada Core) system identity set name=CORE interface set name=ether1-ToISP1 ether1 interface set name=ether2-ToISP2 ether2 interface set name=ether3-LAN1 ether3 interface set name=ether4-LAN2 ether4 ip address add address=192.168.100.1/24 interface=ether1-ToISP1 ip address add address=192.168.101.1/24 interface=ether2-ToISP2 ip address add address=192.168.13.254/24 interface=ether3-LAN1 ip address add address=192.168.21.254/24 interface=ether4-LAN2 ip dhcp-server setup #BGP (konfigurasi Routing BGP) #ISP1 (Konfigurasi, ASN, peer dan advertism) #ASN routing bgp instance set default as=100 router-id=1.1.1.1 #Peer routing bgp peer add name=peerToCore remote-as=102 remote-address=192.168.100.1 #advertsism routing bgp network add network=192.168.12.0/24 synchronize=no routing bgp network add network=192.168.11.0/24 synchronize=no routing bgp network add network=192.168.100.0/24 synchronize=no #ISP2(Konfigurasi, ASN, peer dan advertism) #ASN routing bgp instance set default as=101 router-id=2.2.2.2 #Peer routing bgp peer add name=peerToCore remote-as=102 remote-address=192.168.101.1 #advertsism routing bgp network add network=192.168.10.0/24 routing bgp network add network=192.168.101.0/24 routing bgp network add network=192.168.20.0/24 #CORE (Konfigurasi, ASN, peer dan advertism) #ASN routing bgp instance set default as=102 router-id=3.3.3.3 #Peer routing bgp peer add name=peerToISP1 remote-as=100 remote-address=192.168.100.254 routing bgp peer add name=peerToISP2 remote-as=101 remote-address=192.168.101.254 #advertsism routing bgp network add network=192.168.100.0/24 synchronize=no routing bgp network add network=192.168.101.0/24 synchronize=no routing bgp network add network=192.168.13.0/24 synchronize=no routing bgp network add network=192.168.21.0/24 synchronize=no SAMPAI dengan PC3 dan PC4 dhcp ---------------------------------------------------------------------------(sampai sini ISP1 beserta adveris dan ISP2 beserta adverts Bisa saling terhubung) #Routing filter #Catatan: #in-filter untuk incoming (received) prefixes #out-filter untuk advertised prefixes. #Didefinisikan nanti #ISP1 routing bgp peer set in-filter=CORE-IN out-filter=CORE-out routing bgp peer print detail value-list #ISP2 routing bgp peer set in-filter=CORE-IN out-filter=CORE-out routing bgp peer print detail value-list #Core routing bgp peer set peerToISP1 in-filter=ISP1-in out-filter=ISP1-out routing bgp peer set peerToISP2 in-filter=ISP2-in out-filter=ISP2-out routing bgp peer print detail value-list #Routing Filter (ISP1 utama - ISP2 Backup) #Outgoing ke ISP1 routing filter add chain=ISP1-out prefix=192.168.13.0/24 action=accept routing filter add chain=ISP1-out prefix=192.168.21.0/24 action=accept #selain yang diatas discard routing filter add chain=ISP1-out action=discard #Outgoing ke ISP2 routing filter add chain=ISP2-out prefix=192.168.13.0/24 action=accept set-bgp-prepend=3 routing filter add chain=ISP2-out prefix=192.168.21.0/24 action=accept set-bgp-prepend=3 #selain yang diatas discard routing filter add chain=ISP2-out action=discard ISP1-ISP2-in routing filter add chain=ISP1-in action=discard routing filter add chain=ISP2-in action=discard ip route add gateway=192.168.100.254 check-gateway=ping ip route add gateway=192.168.101.254 distance=30 check-gateway=ping