Eset Endpoint Security Standard

Objective

• Frame Relay also has the ability multilink bundle multiple serial links into one
• We can also add authentication on the interface of the multilink frame relay

methods Lab

• Connect two serial link on each router
• Configure Multilink
• Configure Authentication

Verifikasi Lab Pastikan ketika pada RM-R1 link local S0/0 ke Frame Relay Switch down, link akan berpindah ke backupnya

We can also implement authentication on frame relay, that by configuring PPP over Frame Relay, in addition we can also bundle some link with multilink PPP.

Router Frame-Relay FRSW(config)#frame-relay switching FRSW(config)#int s0/0 FRSW(config-if)#no shut FRSW(config-if)#encapsulation frame-relay FRSW(config-if)#clock rate 128000 FRSW(config-if)#frame-relay lmi-type cisco FRSW(config-if)#frame-relay intf-type dce FRSW(config-if)#frame-relay route 103 interface se0/2 301 FRSW(config-if)#int s0/1 FRSW(config-if)#no shut FRSW(config-if)#encapsulation frame-relay FRSW(config-if)#clock rate 128000 FRSW(config-if)#frame-relay lmi-type cisco FRSW(config-if)#frame-relay intf-type dce FRSW(config-if)#frame-relay route 204 interface se0/3 402 FRSW(config-if)#int s0/2 FRSW(config-if)#no shut FRSW(config-if)#encapsulation frame-relay FRSW(config-if)#clock rate 128000 FRSW(config-if)#frame-relay lmi-type cisco FRSW(config-if)#frame-relay intf-type dce FRSW(config-if)#frame-relay route 301 interface se0/0 103 FRSW(config-if)#int s0/3 FRSW(config-if)#no shut FRSW(config-if)#encapsulation frame-relay FRSW(config-if)#clock rate 128000FRSW(config-if)#frame-relay lmi-type cisco FRSW(config-if)#frame-relay intf-type dce FRSW(config-if)#frame-relay route 402 interface se0/1 204

Router RM-R1 RM-R1(config)#int s0/0 RM-R1(config-if)#no shut RM-R1(config-if)#encapsulation frame-relay RM-R1(config-if)#frame-relay interface-dlci 103 ppp Virtual-Template1 RM-R1(config-fr-dlci)#int se0/1 RM-R1(config-if)#no shut RM-R1(config-if)#encapsulation frame-relay RM-R1(config-if)#frame-relay interface-dlci 204 ppp Virtual-Template1 RM-R1(config-fr-dlci)#interface Virtual-Template1 RM-R1(config-if)#ip addr 12.12.12.1 255.255.255.0   RM-R1(config-if)#ppp multilink RM-R1(config-if)#ppp authentication chap RM-R1(config-if)#exit        RM-R1(config)#username RM-R2 password cisco

Router RM-R2 RM-R2(config)#int s0/0 RM-R2(config-if)#no shut RM-R2(config-if)#encapsulation frame-relay RM-R2(config-if)#frame-relay interface-dlci 301 ppp Virtual-Template1 RM-R2(config-fr-dlci)#int se0/1 RM-R2(config-if)#no shut RM-R2(config-if)#encapsulation frame-relay RM-R2(config-if)#frame-relay interface-dlci 402 ppp Virtual-Template1 RM-R2(config-fr-dlci)#interface Virtual-Template1 RM-R2(config-if)#ip addr 12.12.12.2 255.255.255.0 RM-R2(config-if)#ppp multilink RM-R2(config-if)#ppp authentication chap RM-R2(config-if)#exit RM-R2(config)#username RM-R1 password cisco

Verifikasi RM-R1(config)#do sh ppp multilink Virtual-Access4, bundle name is RM-R2   Username is RM-R2   Endpoint discriminator is RM-R2   Bundle up for 00:01:27, total bandwidth 200000, load 1/255   Receive buffer limit 24384 bytes, frag timeout 1000 ms     0/0 fragments/bytes in reassembly list     0 lost fragments, 0 reordered     0/0 discarded fragments/bytes, 0 lost received     0x0 received sequence, 0x0 sent sequence   Member links: 2 (max not set, min not set)     Vi1, since 00:01:28     Vi3, since 00:01:25 No inactive multilink interfaces RM-R1(config)#RM-R2(config)#do sh ppp multilink

Virtual-Access4, bundle name is RM-R1   Username is RM-R1   Endpoint discriminator is RM-R1   Bundle up for 00:01:55, total bandwidth 200000, load 1/255   Receive buffer limit 24384 bytes, frag timeout 1000 ms     0/0 fragments/bytes in reassembly list     0 lost fragments, 0 reordered     0/0 discarded fragments/bytes, 0 lost received     0x0 received sequence, 0x0 sent sequence   Member links: 2 (max not set, min not set)     Vi1, since 00:01:56     Vi3, since 00:01:53 No inactive multilink interfaces RM-R2(config)#

RM-R2(config)#do ping 12.12.12.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 12.12.12.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 56/552/812 ms RM-R2(config)#

In PPP, the username should use a hostname lawanya. If we want to use another username, configure as follows. RM-R2 (config) #username NJEPAT password NJEPATTT RM-R2 (config) virtual-template1 #interface RM-R2 (config-if) #ppp chap hostname undershorts

RM-R1(config)#username KATOK password NJEPATTT RM-R1(config)#interface virtual-template1 RM-R1(config-if)#ppp chap hostname NJEPAT

RM-R1(config-if)#do sh ppp multilink Virtual-Access4, bundle name is KATOK   Username is KATOK   Endpoint discriminator is KATOK   Bundle up for 00:00:25, total bandwidth 200000, load 1/255   Receive buffer limit 24384 bytes, frag timeout 1000 ms     0/0 fragments/bytes in reassembly list     0 lost fragments, 0 reordered     0/0 discarded fragments/bytes, 0 lost received     0x2 received sequence, 0x1 sent sequence   Member links: 2 (max not set, min not set)     Vi3, since 00:00:25     Vi1, since 00:00:25 No inactive multilink interfaces RM-R1(config-if)#

RM-R2(config-if)#do sh ppp multilink Virtual-Access4, bundle name is NJEPAT   Username is NJEPAT   Endpoint discriminator is NJEPAT   Bundle up for 00:00:53, total bandwidth 200000, load 1/255   Receive buffer limit 24384 bytes, frag timeout 1000 ms     0/0 fragments/bytes in reassembly list     0 lost fragments, 0 reordered     0/0 discarded fragments/bytes, 0 lost received     0x1 received sequence, 0x2 sent sequence   Member links: 2 (max not set, min not set)     Vi3, since 00:00:53     Vi1, since 00:00:53 No inactive multilink interfaces RM-R2(config-if)#

RM-R2(config-if)#do ping 12.12.12.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 12.12.12.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 148/481/708 ms RM-R2(config-if)#