Setting Access List Menggunakan Packet Tracer

Dalam tutuorial kali ini akan dijelaskan mengenai setting access list pada cisco router menggunakan packet tracer. Kita menggunakan satu router,switch,server dan tiga client untuk lebih jelasnya lihat gambar dibawah ini




Disini kita akan membuat rule bahwa untuk client dengan nama pc1 dan pc3 dapat melakukan koneksi dengan server tetapi untuk client dengan nama pc2 dilarang untuk melakukan koneksi degan server. dengan adanya masalah diatas dapat disolusiakan dengan menggunakan access-list.
Berikut detail dari konfigurasi komputer client dan cisco router

Konfigurasi PC1

Ethernet adapter Local Area Connection:
IP Address. . . . . . . . . . . . : 192.168.1.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1

Konfigurasi PC 2

Ethernet adapter Local Area Connection:
IP Address. . . . . . . . . . . . : 192.168.1.3
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1

Konfigurasi PC 3

Ethernet adapter Local Area Connection:
IP Address. . . . . . . . . . . . : 192.168.1.4
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
Konfigurasi server

Ethernet adapter Local Area Connection:
IP Address. . . . . . . . . . . . : 192.168.2.1
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.2.254

Konfigurasi cisco router
Router>
Router>enable
Router#configure terminal
Router(config)#interface ethernet0
Router(config-if)#ip address 192.168.1.1 255.255.255.0
Router(config-if)#no shut
Router(config-if)#exit
Router(config)#interface ethernet1
Router(config-if)#ip address 192.168.2.254 255.255.255.0
Router(config-if)#no shut
Router(config-if)#^Z (Ctrl+z)
Router#ping 192.168.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
Router#ping 192.168.2.254
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.2.254, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms

Konfigurasi ACL
Router#configure terminal
Router(config)#interface fastethernet 0/0
Router(config-if)#ip access-group 1 in
Router(config-if)#exit
Router(config)#access-list 1 deny 192.168.1.3 255.255.255.0
Router(config)#access-list 1 permit any
Router(config)#exit
Router#show access-list
Standard IP access list 1
deny 0.0.0.3 255.255.255.0 (2 match(es))
permit any (8 match(es))

untuk mengembalikan access seperti sebelumnya :
Router#no access-list 1


Hasil uji coba

Dari PC 1
Router#ping 192.168.2.1
Pinging 192.168.2.1 with 32 bytes of data:
Reply from 192.168.2.1: bytes=32 time=60ms TTL=241
Reply from 192.168.2.1: bytes=32 time=60ms TTL=241
Reply from 192.168.2.1: bytes=32 time=60ms TTL=241
Reply from 192.168.2.1: bytes=32 time=60ms TTL=241
Reply from 192.168.2.1: bytes=32 time=60ms TTL=241
Ping statistics for 192.168.2.1: Packets: Sent = 5, Received = 5, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 50ms, Maximum = 60ms, Average = 55ms
Dari PC 2
Router#ping 192.168.2.1
Pinging 192.168.2.1 with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Ping statistics for 192.168.2.1:
Packets: Sent = 5, Received = 0, Lost = 5 (100% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms 

Dari PC 3
Router#ping 192.168.2.1
Pinging 192.168.2.1 with 32 bytes of data:
Reply from 192.168.2.1: bytes=32 time=60ms TTL=241
Reply from 192.168.2.1: bytes=32 time=60ms TTL=241
Reply from 192.168.2.1: bytes=32 time=60ms TTL=241
Reply from 192.168.2.1: bytes=32 time=60ms TTL=241
Reply from 192.168.2.1: bytes=32 time=60ms TTL=241
Ping statistics for 192.168.2.1: Packets: Sent = 5, Received = 5, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 50ms, Maximum = 60ms, Average = 55ms

.: Semoga Mencoba :.

Continue reading →

Konfigurasi Static Routing pada Packet Tracer

Berikut adalah contoh konfigurasi static routing menggunakan Packet Tracert. Dibutuhkan 3 Router, 3 Switch, dan 6 PC. Berikut ini akan di jelaskan bagaimana konfigurasi hingga semua device terkoneksi.

 

Topologinya seperti ini :

 

Layout :

• Router ke router : Serial
• Router ke switch : FastEthernet (boleh pake Ethernet tapi lebih cepat FastEthernet)
• Switch ke PC : FastEthernet
• Konektor yang warna merah menggunakan Serial DCE, jadi saat konfigurasi harus disertakan clock rate 64000. Jika menggunakan Serial DTE tidak perlu clock rate.
• (recommended) Sebaiknya menggunakan Routers yang Generic (Router-PT) agar kita tidak perlu menambahkan modul pada komponen router.
• (recommended) Untuk Switches gunakan Generic (Switch-PT)
• Konfigurasi ini menggunakan CLI (command-line interface)

Setting router

1.       ROUTER 0 (setting 1 serial, 1 FastEthernet)

Router>en            // enable

Router#conf t        //configure terminal

Router(config)#int fa0/0 //setting interface dari router ke switch

Router(config-if)#ip add 192.168.1.1 255.255.255.0  //setting IP dan subnet mask

Router(config-if)#no shut    //mengaktifkan setting diatasnya

Router(config-if)#ex         //exit

Router(config)#

Router(config)#int s2/0      //setting interface serial di router 0

Router(config-if)#ip add 192.168.4.1 255.255.255.0

Router(config-if)#clock rate 64000      //kecepatan clock

Router(config-if)#no shut

Router(config-if)#ex

1.       ROUTER 1 (setting 2 serial, 1 FastEth)

Router>en

Router#conf t

Router(config)#int fa0/0

Router(config-if)#ip add 192.168.2.1 255.255.255.0

Router(config-if)#no shut

Router(config-if)#ex

Router(config)#

Router(config)#int s2/0

Router(config-if)#ip add 192.168.4.2 255.255.255.0

Router(config-if)#clock rate 64000

Router(config-if)#no shut

Router(config-if)#ex

Router(config)#

Router(config)#int s3/0

Router(config-if)#ip add 192.168.5.1 255.255.255.0

Router(config-if)#clock rate 64000

Router(config-if)#no shut

Router(config-if)#ex

ROUTER 2 (setting 1 serial, 1 FastEth)

Router>en

Router#conf t

Router(config)#int fa0/0

Router(config-if)#ip add 192.168.3.1 255.255.255.0

Router(config-if)#no shut

Router(config-if)#ex

Router(config)#

Router(config)#int s2/0

Router(config-if)#ip add 192.168.5.2 255.255.255.0

Router(config-if)#clock rate 64000

Router(config-if)#no shut

Router(config-if)#ex

Gimana mudah kan? Tunggu dulu kita belum selesai settingnya. Kita perlu setting routingnya, yang diatas itu hanya setting masing-masing router. INGAT! Routing berbeda dengan router. 

Cara setting routing :

Router0:
Router(config)#ip route 192.168.2.0 255.255.255.0 192.168.4.2 //
Router(config)#ip route 192.168.3.0 255.255.255.0 192.168.4.2

Router1 :
Router(config)#ip route 192.168.1.0 255.255.255.0 192.168.4.1
Router(config)#ip route 192.168.3.0 255.255.255.0 192.168.5.2

Router2 :
Router(config)#ip route 192.168.1.0 255.255.255.0 192.168.5.1
Router(config)#ip route 192.168.2.0 255.255.255.0 192.168.5.1

 

Memberi IP pada masing-masing PC

1. Klik image PC
2. Klik Tab Desktop
3. Pilih IP Configuration
4. Ulangi hingga PC5

       Daftar IP Address dan Default Gateway : 

 

PC	IP Address	Default Gateway
PC0	192.168.1.2	192.168.1.1
PC1	192.168.1.3	192.168.1.1
PC2	192.168.2.2	192.168.2.1
PC3	192.168.2.3	192.168.2.1
PC4	192.168.3.2	192.168.3.1
PC5	192.168.3.3	192.168.3.1

 

S    

      Semua telah terkonfigurasi. Setelah itu silahkan di ping pada masing-masing PC/router. Koneksi akan berhasil jika muncul Reply. 

      Selamat mencoba

Continue reading →