OpenWRT IPv6: OSPF6D menggunakan Quagga
Contoh Routing Quagga IPv6 Pada Router OpenWRT
Berikut ini akan di berikan contoh konfigurasi routing Quagga IPv6 pada router dengan sistem operasi OpenWRT. OpenWRT yang normal biasanya tidak mempunyai fasilitas routing quagga, untuk mereka yang ingin mengoperasikan quagga di openwrt dapat menambahkan paket quagga, atau membuat sendiri firmawre openwrt dengan quagga di dalamnya. Catatan cara membuat openwrt dengan quagga dapat di baca di
http://opensource.telkomspeedy.com/wiki/index.php/Openwrt
Pada kesempatan ini akan dibuat sederhana saja karena seluruh jaringan di anggap satu area yaitu 0.0.0.0 dengan detail jaringan,
router1 ID 1.1.1.1 area 0.0.0.0 br-lan fd1f:baff:90d6::1/60 eth0.2 fe80::126f:3fff:fe3d:73d0/64
router2 ID 1.1.1.2 area 0.0.0.0 br-lan fd65:b344:4d7::1/60 eth0.2 fe80::b2c7:45ff:fef3:a7a3/64
Untuk belajar maka firewall di non-aktifkan agar tidak memblokir routing
iptables -F ip6tables -F iptables -P INPUT ACCEPT iptables -P OUTPUT ACCEPT iptables -P FORWARD ACCEPT ip6tables -P INPUT ACCEPT ip6tables -P OUTPUT ACCEPT ip6tables -P FORWARD ACCEPT
Konfigurasi Awal Zebra pada OpenWRT
Login ke OpenWRT yang sudah di instalasi Quagga
telnet ::1 zebra
Entering character mode Escape character is '^]'. Hello, this is Quagga (version 0.99.22.4). Copyright 1996-2005 Kunihiro Ishiguro, et al. User Access Verification Password: OpenWrt> enable OpenWrt# OpenWrt# configure terminal OpenWrt(config)# hostname router1 router1(config)# interface br-lan router1(config-if)# link-detect router1(config-if)# ipv6 address fd1f:baff:90d6::1/60 router1(config-if)# no shutdown router1(config-if)# exit router1(config)# interface eth0.2 router1(config-if)# link-detect router1(config-if)# ipv6 address fe80::126f:3fff:fe3d:73d0/64 router1(config-if)# no shutdown router1(config-if)# exit router1(config)# exit router1#
Cek konfigurasi
router1# show running-config ! hostname router1 password zebra ! interface br-lan link-detect ipv6 address fd1f:baff:90d6::1/60 ! interface eth0.2 link-detect ipv6 address fe80::126f:3fff:fe3d:73d0/64 ! access-list vty permit 127.0.0.0/8 access-list vty deny any ! ip forwarding ipv6 forwarding ! ! line vty access-class vty ! end
Save Konfigurasi
router1(config)# write
Konfigurasi Awal OSPF6D pada OpenWRT
Lakukan
telnet ::1 ospf6d
Entering character mode Escape character is '^]'. Hello, this is Quagga (version 0.99.22.4). Copyright 1996-2005 Kunihiro Ishiguro, et al. User Access Verification Password: OpenWrt> OpenWrt> enable OpenWrt# OpenWrt# config terminal OpenWrt(config)# interface br-lan OpenWrt(config-if)# ipv6 ospf6 cost 10 OpenWrt(config-if)# exit OpenWrt(config)# OpenWrt(config)# interface eth0.2 OpenWrt(config-if)# ipv6 ospf6 cost 10 OpenWrt(config-if)# exit OpenWrt(config)# OpenWrt(config)# router ospf6 OpenWrt(config-ospf6)# router-id 1.1.1.1 OpenWrt(config-ospf6)# interface br-lan area 0.0.0.0 OpenWrt(config-ospf6)# interface eth0.2 area 0.0.0.0 OpenWrt(config-ospf6)# redistribute static OpenWrt(config-ospf6)# redistribute kernel OpenWrt(config-ospf6)# redistribute connected OpenWrt(config-ospf6)# write Configuration saved to /etc/quagga/ospf6d.conf OpenWrt(config-ospf6)# exit OpenWrt(config)# exit OpenWrt# exit
Cek Konfigurasi
OpenWrt# show running-config
Current configuration: ! password zebra ! debug ospf6 lsa unknown ! interface br-lan ipv6 ospf6 cost 10 ! interface eth0.2 ipv6 ospf6 cost 10 ! router ospf6 router-id 1.1.1.1 redistribute kernel redistribute connected redistribute static interface br-lan area 0.0.0.0 interface eth0.2 area 0.0.0.0 ! access-list vty permit 127.0.0.0/8 access-list vty deny any ! line vty access-class vty ! end
Jika sudah yakin, restart Quagga dari shell OpenWRT
/etc/init.d/quagga restart
Cara yang sama lakukan untuk Router2
Untuk belajar maka non-aktifkan fireall agar tidak memblokir routing
iptables -F ip6tables -F iptables -P INPUT ACCEPT iptables -P OUTPUT ACCEPT iptables -P FORWARD ACCEPT ip6tables -P INPUT ACCEPT ip6tables -P OUTPUT ACCEPT ip6tables -P FORWARD ACCEPT
Zebra.conf pada router2 adalah
Current configuration: ! hostname router2 password zebra ! interface br-lan link-detect ipv6 address fd65:b344:4d7::1/60 ! interface eth0.2 link-detect ipv6 address fe80::b2c7:45ff:fef3:a7a3/64 ! access-list vty permit 127.0.0.0/8 access-list vty deny any ! ip forwarding ipv6 forwarding ! ! line vty access-class vty ! end
ospf6d.conf pada router2 adalah
Current configuration: ! password zebra ! debug ospf6 lsa unknown ! interface br-lan ipv6 ospf6 cost 10 ! interface eth0.2 ipv6 ospf6 cost 10 ! router ospf6 router-id 1.1.1.2 redistribute kernel redistribute connected redistribute static interface br-lan area 0.0.0.0 interface eth0.2 area 0.0.0.0 ! access-list vty permit 127.0.0.0/8 access-list vty deny any ! line vty access-class vty ! end
Cek sambungan, misalnya dari shell LAN router1 ping ke LAN router2
# ping6 fd65:b344:4d7::1
Setelah diberikan waktu beberapa saat, maka akan memperoleh responds dari ping6 tersebut.