Konfigurasi Access List (ACL) Pada Router
Access list adalah pengelompokan paket
berdasarkan kategori. Access list bisa sangat membantu ketika membutuhkan
pengontrolan dalam lalu lintas network. access list menjadi tool pilihan untuk pengambilan
keputusan pada situasi ini.
Penggunaan access list yang paling umum dan paling mudah untuk dimengerti adalah penyaringan paket yang tidak diinginkan ketika mengimplementasikan kebijakan keamanan.
Penggunaan access list yang paling umum dan paling mudah untuk dimengerti adalah penyaringan paket yang tidak diinginkan ketika mengimplementasikan kebijakan keamanan.
Mengkonfigurasikan router seperti gambar di bawah ini dengan ACL :
- network 172.16.10.0 tidak bisa di akses oleh 172.16.40.0 dan yang lainnya bisa mengakses netwrk 10
- host 172.16.10.5 tidak bisa mengakses host 172.16.50.7
1. Konfigurasi pada
Router 1
Router>ena
Router#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#int fa0/0
Router(config-if)#ip add 172.16.10.1 255.255.255.0
Router(config-if)#no shut
Router(config-if)#
%LINK-5-CHANGED: Interface FastEthernet0/0, changed state to up
Router(config-if)#int fa1/0
Router(config-if)#ip add 172.16.20.1 255.255.255.0
Router(config-if)#no shut
%LINK-5-CHANGED: Interface FastEthernet1/0, changed state to up
Router(config-if)#int ser2/0
Router(config-if)#ip add 172.16.30.1 255.255.255.0
Router(config-if)#clock rate 64000
Router(config-if)#no shut
%LINK-5-CHANGED: Interface Serial2/0, changed state to down
Router(config-if)#exit
Router(config)#
2. Konfigursi pada Router2
Router>ena
Router#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#int fa0/0
Router(config-if)#ip add 172.16.40.1 255.255.255.0
Router(config-if)#no shut
Router(config-if)#
%LINK-5-CHANGED: Interface FastEthernet0/0, changed state to up
Router(config-if)#int fa1/0
Router(config-if)#ip add 172.16.50.1 255.255.255.0
Router(config-if)#no shut
%LINK-5-CHANGED: Interface FastEthernet1/0, changed state to up
Router(config-if)#
Router(config-if)#int ser3/0
Router(config-if)#ip add 172.16.30.2 255.255.255.0
Router(config-if)#no shut
Router(config)#int ser2/0
Router(config-if)#ip add 172.16.60.1 255.255.255.0
Router(config-if)#no shut
Router(config-if)#clock rate 64000
Router(config-if)#
3. Konfigurasi Pada Router 3
Router>ena
Router#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#int fa0/0
Router(config-if)#ip add 172.16.70.1 255.255.255.0
Router(config-if)#no shut
%LINK-5-CHANGED: Interface FastEthernet0/0, changed state to up
Router(config-if)#int fa1/0
Router(config-if)#ip add 172.16.80.1 255.255.255.0
Router(config-if)#no shut
%LINK-5-CHANGED: Interface FastEthernet1/0, changed state to up
Router(config-if)#int ser3/0
Router(config-if)#ip add 172.16.60.2 255.255.255.0
Router(config-if)#no shut
%LINK-5-CHANGED: Interface Serial3/0, changed state to down
Router(config-if)#
4. Koneksikan Antar Router dengan EIGRP
Router>ena
Router#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#int fa0/0
Router(config-if)#ip add 172.16.10.1 255.255.255.0
Router(config-if)#no shut
Router(config-if)#
%LINK-5-CHANGED: Interface FastEthernet0/0, changed state to up
Router(config-if)#int fa1/0
Router(config-if)#ip add 172.16.20.1 255.255.255.0
Router(config-if)#no shut
%LINK-5-CHANGED: Interface FastEthernet1/0, changed state to up
Router(config-if)#int ser2/0
Router(config-if)#ip add 172.16.30.1 255.255.255.0
Router(config-if)#clock rate 64000
Router(config-if)#no shut
%LINK-5-CHANGED: Interface Serial2/0, changed state to down
Router(config-if)#exit
Router(config)#
2. Konfigursi pada Router2
Router>ena
Router#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#int fa0/0
Router(config-if)#ip add 172.16.40.1 255.255.255.0
Router(config-if)#no shut
Router(config-if)#
%LINK-5-CHANGED: Interface FastEthernet0/0, changed state to up
Router(config-if)#int fa1/0
Router(config-if)#ip add 172.16.50.1 255.255.255.0
Router(config-if)#no shut
%LINK-5-CHANGED: Interface FastEthernet1/0, changed state to up
Router(config-if)#
Router(config-if)#int ser3/0
Router(config-if)#ip add 172.16.30.2 255.255.255.0
Router(config-if)#no shut
Router(config)#int ser2/0
Router(config-if)#ip add 172.16.60.1 255.255.255.0
Router(config-if)#no shut
Router(config-if)#clock rate 64000
Router(config-if)#
3. Konfigurasi Pada Router 3
Router>ena
Router#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#int fa0/0
Router(config-if)#ip add 172.16.70.1 255.255.255.0
Router(config-if)#no shut
%LINK-5-CHANGED: Interface FastEthernet0/0, changed state to up
Router(config-if)#int fa1/0
Router(config-if)#ip add 172.16.80.1 255.255.255.0
Router(config-if)#no shut
%LINK-5-CHANGED: Interface FastEthernet1/0, changed state to up
Router(config-if)#int ser3/0
Router(config-if)#ip add 172.16.60.2 255.255.255.0
Router(config-if)#no shut
%LINK-5-CHANGED: Interface Serial3/0, changed state to down
Router(config-if)#
4. Koneksikan Antar Router dengan EIGRP
- Pada Router1
Router(config)#router eigrp 10
Router(config-router)#net 172.16.10.0 0.0.0.255
Router(config-router)#net 172.16.20.0 0.0.0.255
Router(config-router)#net 172.16.30.0 0.0.0.255
Router(config-router)#net 172.16.10.0 0.0.0.255
Router(config-router)#net 172.16.20.0 0.0.0.255
Router(config-router)#net 172.16.30.0 0.0.0.255
- Pada Router2
Router(config)#router eigrp 10
Router(config-router)#net 172.16.40.0 0.0.0.255
Router(config-router)#net 172.16.50.0 0.0.0.255
Router(config-router)#net 172.16.60.0 0.0.0.255
Router(config-router)#net 172.16.30.0 0.0.0.255
Router(config-router)#net 172.16.40.0 0.0.0.255
Router(config-router)#net 172.16.50.0 0.0.0.255
Router(config-router)#net 172.16.60.0 0.0.0.255
Router(config-router)#net 172.16.30.0 0.0.0.255
- Pada Router3
Router(config)#router eigrp 10
Router(config-router)#net 172.16.60.0 0.0.0.255
Router(config-router)#net 172.16.70.0 0.0.0.255
Router(config-router)#net 172.16.80.0 0.0.0.255
5. Konfigurasi ACLs
Router(config-router)#net 172.16.60.0 0.0.0.255
Router(config-router)#net 172.16.70.0 0.0.0.255
Router(config-router)#net 172.16.80.0 0.0.0.255
5. Konfigurasi ACLs
- network 172.16.10.0 tidak bisa di akses oleh 172.16.40.0 dan yang lainnya bisa mengakses netwrk 10 (di setting Pada Router 1)
Router(config)#access-list 3 deny 172.16.40.0 0.0.0.255
Router(config)#access-list 3 permit any
Router(config)#int fa0/0
Router(config)#ip access-group 3 out
Router(config)#access-list 3 permit any
Router(config)#int fa0/0
Router(config)#ip access-group 3 out
- host 172.16.10.5 tidak bisa mengakses host 172.16.50.7 (di setting Pada Router2)
Router(config)#access-list 9 deny host 172.16.10.5
Router(config)#access-list 9 permit any
Router(config)#ip access-group 3 out
Router(config)#access-list 9 permit any
Router(config)#ip access-group 3 out
Komentar
Posting Komentar