Category Archives: MPLS dan BGP
BGP
Border Gateway Protocol disingkat BGP adalah inti dari protocol routing internet.
Protocol ini yang menjadi backbone dari jaringan Internet dunia. BGP adalah protokol routing inti dari Internet yg digunakan untuk melakukan pertukaran informasi routing antar jaringan.
BGP dijelaskan dalam RFC4271. BGP bekerja dengan cara memetakan sebuah tabel IP network yang menunjuk ke jaringan yg dapat dicapai antar AS (Autonomous System). Hal ini digambarkan sebagai sebuah protocol path vector. BGP tidak menggunakan metrik IGP(Interior Gateway Protocol) tradisional, tapi membuat routing decision berdasarkan path, network policies, dan atau ruleset.
BGP mendukung Class Inter-Domain Routing dan menggunakan route aggregation untuk mengurangi ukuran tabel routing. BGP diciptakan untuk menggantikan protokol routing EGP yang mengijinkan routing secara tersebar sehingga tidak harus mengacu pada satu jaringan backbone saja.
Attribute dari BGP ada beberapa yaitu :
- Weight (tertinggi )
- Local Preference (tertinggi)
- Locally Originated
- AS-Path (terendah)
- Origin (IGP > EGP > ?)
- MED (terendah)
Setelah penjelasan di atas berikut beberapa lab yang terkait dengan BGP, terutama BGP di dunia CCIE RS.
- iBGP Peering
Konfigurasi Dasar :
R1(config)#int fa0/0
R1(config-if)#ip add 12.12.12.1 255.255.255.0
R1(config-if)#no sh
R1(config-router)#int lo 0
R1(config-if)#ip add 1.1.1.1 255.255.255.255
R1(config-if)#router bgp 12
R1(config-router)#nei 12.12.12.2 remote-as 12
R1(config-router)#net 1.1.1.1 mask 255.255.255.255
Lakukan konfigurasi yang sama juga untuk router kedua, dengan menggunakan loopback 2.2.2.2/32.
Cek route table :
R1#sh ip bgp sum
BGP router identifier 12.12.12.1, local AS number 12
BGP table version is 3, main routing table version 3
2 network entries using 240 bytes of memory
2 path entries using 104 bytes of memory
3/2 BGP path/bestpath attribute entries using 372 bytes of memory
0 BGP route-map cache entries using 0 bytes of memory
0 BGP filter-list cache entries using 0 bytes of memory
Bitfield cache entries: current 1 (at peak 1) using 32 bytes of memory
BGP using 748 total bytes of memory
BGP activity 2/0 prefixes, 2/0 paths, scan interval 60 secs
Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
12.12.12.2 4 12 7 7 3 0 0 00:03:27 1
Cek route table :
R1#sh ip bgp
BGP table version is 3, local router ID is 12.12.12.1
Status codes: s suppressed, d damped, h history, * valid, > best, i – internal,
r RIB-failure, S Stale
Origin codes: i – IGP, e – EGP, ? – incomplete
Network Next Hop Metric LocPrf Weight Path
*> 1.1.1.1/32 0.0.0.0 0 32768 i
*>i2.2.2.2/32 12.12.12.2 0 100 0 i
R1#sh ip route bgp
2.0.0.0/32 is subnetted, 1 subnets
B 2.2.2.2 [200/0] via 12.12.12.2, 00:07:25
Cek ping :
R1#ping 2.2.2.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 28/47/64 ms
- IBGP Peering – Loopback
Topologi yang digunakan masih sama dengan lab di atas.
command network dan neighbor di router bgp dihapus kemudian tambahkan command berikut :
R2(config)#router rip
R2(config-router)#ver 2
R2(config-router)#net 2.0.0.0
R2(config-router)#net 12.0.0.0
R2(config-router)#exit
R2(config)#router bgp 12
R2(config-router)#nei 1.1.1.1 remote 12
R2(config-router)#nei 1.1.1.1 update-source lo0
Lalu tambahkan subnet baru kedalam router bgp :
R2(config-if)#int lo1
R2(config-if)#ip add 22.22.22.22 255.255.255.255
R2(config-if)#no sh
R2(config-if)#router bgp 12
R2(config-router)#net 22.22.22.22 mask 255.255.255.255
Cek ping :
R1#ping 22.22.22.22
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 22.22.22.22, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 28/59/104 ms
R1#sh ip bgp sum
BGP router identifier 12.12.12.1, local AS number 12
BGP table version is 7, main routing table version 7
2 network entries using 240 bytes of memory
2 path entries using 104 bytes of memory
3/2 BGP path/bestpath attribute entries using 372 bytes of memory
0 BGP route-map cache entries using 0 bytes of memory
0 BGP filter-list cache entries using 0 bytes of memory
Bitfield cache entries: current 1 (at peak 2) using 32 bytes of memory
BGP using 748 total bytes of memory
BGP activity 4/2 prefixes, 4/2 paths, scan interval 60 secs
Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
2.2.2.2 4 12 7 7 7 0 0 00:02:07 1
R1#sh ip bgp
BGP table version is 7, local router ID is 12.12.12.1
Status codes: s suppressed, d damped, h history, * valid, > best, i – internal,
r RIB-failure, S Stale
Origin codes: i – IGP, e – EGP, ? – incomplete
Network Next Hop Metric LocPrf Weight Path
*> 11.11.11.11/32 0.0.0.0 0 32768 i
*>i22.22.22.22/32 2.2.2.2 0 100 0 i
R1#sh ip route bgp
22.0.0.0/32 is subnetted, 1 subnets
B 22.22.22.22 [200/0] via 2.2.2.2, 00:00:33
- eBGP Peering
konfigurasi untuk eBGP peering :
R2(config)#int lo0
R2(config-if)#ip add 2.2.2.2 255.255.255.255
R2(config-if)#no sh
R2(config-if)#int s0/0
R2(config-if)#ip add 23.23.23.2 255.255.255.0
R2(config-if)#no sh
R2(config-if)#router bgp 12
R2(config-router)#nei 23.23.23.3 remote 3
R2(config-router)#net 2.2.2.2 mask 255.255.255.255
Lakukan hal yang sama pada router R3 dengan menggunakan loopback 3.3.3.3/32.
Cek ping :
R2#ping 3.3.3.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 3.3.3.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 12/39/76 ms
Cek route table :
R2#sh ip bgp sum
BGP router identifier 2.2.2.2, local AS number 12
BGP table version is 3, main routing table version 3
2 network entries using 240 bytes of memory
2 path entries using 104 bytes of memory
3/2 BGP path/bestpath attribute entries using 372 bytes of memory
1 BGP AS-PATH entries using 24 bytes of memory
0 BGP route-map cache entries using 0 bytes of memory
0 BGP filter-list cache entries using 0 bytes of memory
Bitfield cache entries: current 1 (at peak 1) using 32 bytes of memory
BGP using 772 total bytes of memory
BGP activity 2/0 prefixes, 2/0 paths, scan interval 60 secs
Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
23.23.23.3 4 3 7 7 3 0 0 00:03:42 1
R2#sh ip bgp
BGP table version is 3, local router ID is 2.2.2.2
Status codes: s suppressed, d damped, h history, * valid, > best, i – internal,
r RIB-failure, S Stale
Origin codes: i – IGP, e – EGP, ? – incomplete
Network Next Hop Metric LocPrf Weight Path
*> 2.2.2.2/32 0.0.0.0 0 32768 i
*> 3.3.3.3/32 23.23.23.3 0 0 3 i
- eBGP – Loopback – eBGP Multihop
Topologi yang dipakai sama dengan lab sebelumnya.
konfigurasi berikut :
R2(config)#router eigrp 2
R2(config-router)#net 23.23.23.0 0.0.0.255
R2(config-router)#net 2.2.2.2 0.0.0.0
R2(config)#router bgp 12
R2(config-router)#nei 3.3.3.3 remote-as 3
R2(config-router)#nei 3.3.3.3 update-source lo0
R2(config-router)#nei 3.3.3.3 ebgp-multihop
Lakukan hal yang sama untuk R3 dan tambahkan int lo1 di R2 :
R2(config)#int lo1
R2(config-if)#ip add 22.22.22.22 255.255.255.255
R2(config-if)#no sh
R2(config-if)#router bgp 12
R2(config-router)#net 22.22.22.22 mask 255.255.255.255
Cek ping :
R3#ping 22.22.22.22
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 22.22.22.22, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/30/80 ms
Cek route table :
R3#sh ip bgp
BGP table version is 7, local router ID is 3.3.3.3
Status codes: s suppressed, d damped, h history, * valid, > best, i – internal,
r RIB-failure, S Stale
Origin codes: i – IGP, e – EGP, ? – incomplete
Network Next Hop Metric LocPrf Weight Path
*> 22.22.22.22/32 2.2.2.2 0 0 12 i
*> 33.33.33.33/32 0.0.0.0 0 32768 i
- BGP Next-Hop-Self
Masih sama dengan topologi sebelumnya.
Konfigurasikan iBGP peering antara router R1 dan R2.
cek route table :
R1(config-router)#do sh ip bgp
BGP table version is 4, local router ID is 11.11.11.11
Status codes: s suppressed, d damped, h history, * valid, > best, i – internal,
r RIB-failure, S Stale
Origin codes: i – IGP, e – EGP, ? – incomplete
Network Next Hop Metric LocPrf Weight Path
*>i22.22.22.22/32 2.2.2.2 0 100 0 i
*>i33.33.33.33/32 3.3.3.3 0 100 0 3 i
disini terlihat bahwa ip loopback 1 R3 diterima oleh R1 lewat ip address loopback 0 R3. Hal ini salah karena ip address lo0 R3 seharusnya tidak bisa direach oleh R1.
maka tambahkan command berikut :
R2(config)#router bgp 12
R2(config-router)#nei 1.1.1.1 next-hop-self
Cek route table :
R1(config-router)#do sh ip bgp
BGP table version is 5, local router ID is 11.11.11.11
Status codes: s suppressed, d damped, h history, * valid, > best, i – internal,
r RIB-failure, S Stale
Origin codes: i – IGP, e – EGP, ? – incomplete
Network Next Hop Metric LocPrf Weight Path
*>i22.22.22.22/32 2.2.2.2 0 100 0 i
*>i33.33.33.33/32 2.2.2.2 0 100 0 3 i
Cek ping :
R1(config-router)#do ping 33.33.33.33
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 33.33.33.33, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 28/52/116 ms
- BGP Authentication
Masih dengan topologi yang sama seperti sebelumnya.
BGP hanya support autentikasi dengan menggunakan MD5 saja.
Konfigurasinya :
R2(config-router)#router bgp 12
R2(config-router)#nei 1.1.1.1 password 0 RAHASIA
R1(config-router)#router bgp 12
R1(config-router)#nei 2.2.2.2 password 0 RAHASIA
- BGP Route Reflector
Hilangkan konfigurasi next-hop-self dari R3, karena akan dilakukan route reflector.
Konfigurasi di R1, R2 dan R3.
R1(config-router)#router bgp 12
R1(config-router)#nei 2.2.2.2 remote 12
R1(config-router)#nei 2.2.2.2 update lo0
R1(config-router)#nei 2.2.2.2 route-reflector-client
R1(config-router)#nei 3.3.3.3 remote 12
R1(config-router)#nei 3.3.3.3 update lo0
R1(config-router)#nei 3.3.3.3 route-reflector-client
R2(config-router)#router bgp 12
R2(config-router)#nei 1.1.1.1 remote 12
R2(config-router)#nei 1.1.1.1 update lo0
R3(config-router)#router bgp 12
R3(config-router)#nei 1.1.1.1 remote 12
R3(config-router)#nei 1.1.1.1 update lo0
Cek route table :
R1#sh ip bgp sum
BGP router identifier 11.11.11.11, local AS number 12
BGP table version is 4, main routing table version 4
3 network entries using 360 bytes of memory
3 path entries using 156 bytes of memory
3/2 BGP path/bestpath attribute entries using 372 bytes of memory
1 BGP AS-PATH entries using 24 bytes of memory
0 BGP route-map cache entries using 0 bytes of memory
0 BGP filter-list cache entries using 0 bytes of memory
Bitfield cache entries: current 1 (at peak 1) using 32 bytes of memory
BGP using 944 total bytes of memory
BGP activity 3/0 prefixes, 3/0 paths, scan interval 60 secs
Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
2.2.2.2 4 12 5 7 4 0 0 00:01:12 1
3.3.3.3 4 12 6 7 4 0 0 00:00:35 2
Cek ping :
R1#ping 44.44.44.44
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 44.44.44.44, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 60/138/224 ms
- BGP Confederation
R1, R2,R3,R4 dan R5 menggunakan AS 12, dan R6 menggunakan AS 3.
R1 dan R4 menggunakan AS Confederation 12001, R2 dan R5 menggunakan AS confederation 12002, dan R3 menggunakan AS Confederation 12003.
Konfigurasi R1 :
interface Loopback0
ip address 1.1.1.1 255.255.255.255
!
interface FastEthernet0/0
ip address 12.12.12.1 255.255.255.0
!
interface FastEthernet0/1
ip address 14.14.14.1 255.255.255.0
!
router bgp 12001
bgp log-neighbor-changes
bgp confederation identifier 12
bgp confederation peers 12002
network 1.1.1.1 mask 255.255.255.255
neighbor 12.12.12.2 remote-as 12002
neighbor 14.14.14.4 remote-as 12001
neighbor 14.14.14.4 next-hop-self
Konfigurasi R4 :
interface Loopback0
ip address 4.4.4.4 255.255.255.255
!
interface FastEthernet0/0
ip address 14.14.14.4 255.255.255.0
!
router bgp 12001
no synchronization
bgp log-neighbor-changes
bgp confederation identifier 12
network 4.4.4.4 mask 255.255.255.255
neighbor 14.14.14.1 remote-as 12001
Konfigurasi R2 :
interface Loopback0
ip address 2.2.2.2 255.255.255.255
!
interface FastEthernet0/0
ip address 12.12.12.2 255.255.255.0
!
interface Serial0/0
ip address 25.25.25.2 255.255.255.0
!
interface FastEthernet0/1
ip address 23.23.23.2 255.255.255.0
!
router bgp 12002
bgp log-neighbor-changes
bgp confederation identifier 12
bgp confederation peers 12001 12003
network 2.2.2.2 mask 255.255.255.255
neighbor 12.12.12.1 remote-as 12001
neighbor 23.23.23.3 remote-as 12003
neighbor 25.25.25.5 remote-as 12002
neighbor 25.25.25.5 next-hop-self
Konfigurasi R5 :
interface Loopback0
ip address 5.5.5.5 255.255.255.255
!
interface Serial0/0
ip address 25.25.25.5 255.255.255.0
!
router bgp 12002
bgp log-neighbor-changes
bgp confederation identifier 12
network 5.5.5.5 mask 255.255.255.255
neighbor 25.25.25.2 remote-as 12002
Konfigurasi R3:
interface Loopback0
ip address 3.3.3.3 255.255.255.255
!
interface FastEthernet0/0
ip address 23.23.23.3 255.255.255.0
!
interface Serial0/0
ip address 36.36.36.3 255.255.255.0
!
router bgp 12003
bgp log-neighbor-changes
bgp confederation identifier 12
bgp confederation peers 12002
network 3.3.3.3 mask 255.255.255.255
neighbor 23.23.23.2 remote-as 12002
neighbor 36.36.36.6 remote-as 3
Konfigurasi R6 :
interface Loopback0
ip address 6.6.6.6 255.255.255.255
!
interface Serial0/0
ip address 36.36.36.6 255.255.255.0
!
router bgp 3
network 6.6.6.6 mask 255.255.255.255
neighbor 36.36.36.3 remote-as 12
Cek route table :
R2#sh ip bgp
BGP table version is 6, local router ID is 2.2.2.2
Status codes: s suppressed, d damped, h history, * valid, > best, i – internal,
r RIB-failure, S Stale
Origin codes: i – IGP, e – EGP, ? – incomplete
Network Next Hop Metric LocPrf Weight Path
*> 1.1.1.1/32 12.12.12.1 0 100 0 (12001) i
*> 2.2.2.2/32 0.0.0.0 0 32768 i
*> 3.3.3.3/32 23.23.23.3 0 100 0 (12003) i
* 4.4.4.4/32 14.14.14.4 0 100 0 (12001) i
*>i5.5.5.5/32 25.25.25.5 0 100 0 i
* 6.6.6.6/32 36.36.36.6 0 100 0 (12003) 3 i
Dari show ip bgp dapat dilihat bahwa 6.6.6.6 masih berstatus unreachable dari R2.
Mari tambahkan route ke 36.36.36.6 dari R2:
ip route 36.36.36.0 255.255.255.0 23.23.23.3
Cek route table :
R2#sh ip bgp
BGP table version is 6, local router ID is 2.2.2.2
Status codes: s suppressed, d damped, h history, * valid, > best, i – internal,
r RIB-failure, S Stale
Origin codes: i – IGP, e – EGP, ? – incomplete
Network Next Hop Metric LocPrf Weight Path
*> 1.1.1.1/32 12.12.12.1 0 100 0 (12001) i
*> 2.2.2.2/32 0.0.0.0 0 32768 i
*> 3.3.3.3/32 23.23.23.3 0 100 0 (12003) i
* 4.4.4.4/32 14.14.14.4 0 100 0 (12001) i
*>i5.5.5.5/32 25.25.25.5 0 100 0 i
*> 6.6.6.6/32 36.36.36.6 0 100 0 (12003) 3 i
- BGP Atribute (Origin)
Konfigurasinya :
R1 :
interface Loopback0
ip address 1.1.1.1 255.255.255.255
!
interface FastEthernet0/0
ip address 12.12.12.1 255.255.255.0
!
router bgp 100
network 1.1.1.1 mask 255.255.255.255
neighbor 12.12.12.2 remote-as 200
R2 :
interface Loopback0
ip address 2.2.2.2 255.255.255.255
!
interface FastEthernet0/0
ip address 12.12.12.2 255.255.255.0
!
interface Serial0/0
ip address 23.23.23.2 255.255.255.0
!
router bgp 200
network 2.2.2.2 mask 255.255.255.255
redistribute static
neighbor 12.12.12.1 remote-as 100
neighbor 23.23.23.3 remote-as 200
R3 :
interface Loopback0
ip address 3.3.3.3 255.255.255.255
!
interface Loopback1
ip address 33.33.33.33 255.255.255.255
!
interface Loopback2
ip address 30.30.30.30 255.255.255.255
!
interface Serial0/0
ip address 23.23.23.3 255.255.255.0
!
router eigrp 1
network 33.33.33.33 0.0.0.0
!
router bgp 200
network 3.3.3.3 mask 255.255.255.255
redistribute eigrp 1
neighbor 23.23.23.2 remote-as 200
Cek route table :
R1#sh ip bgp
BGP table version is 6, local router ID is 1.1.1.1
Status codes: s suppressed, d damped, h history, * valid, > best, i – internal,
r RIB-failure, S Stale
Origin codes: i – IGP, e – EGP, ? – incomplete
Network Next Hop Metric LocPrf Weight Path
*> 1.1.1.1/32 0.0.0.0 0 32768 i
*> 2.2.2.2/32 12.12.12.2 0 0 200 i
*> 3.3.3.3/32 12.12.12.2 0 200 i
*> 30.30.30.30/32 12.12.12.2 0 0 200 ?
*> 33.33.33.33/32 12.12.12.2 0 200 ?
- BGP Attribute (Community)
Konfigurasikan access list sehingga ip address 11.11.11.11 di R1 tidak diadvertise di R4.
Konfigurasi R1:
R1(config)#access-list 1 permit host 11.11.11.11
R1(config)#route-map NO-EXPORT
R1(config-route-map)#match ip address 1
R1(config-route-map)#set community no-export
R1(config-route-map)#router bgp 123
R1(config-router)#nei 2.2.2.2 route-map NO-EXPORT out
R1(config-router)#nei 2.2.2.2 send-community
Cek route table :
R4#sh ip bgp
BGP table version is 6, local router ID is 4.4.4.4
Status codes: s suppressed, d damped, h history, * valid, > best, i – internal,
r RIB-failure, S Stale
Origin codes: i – IGP, e – EGP, ? – incomplete
Network Next Hop Metric LocPrf Weight Path
*> 4.4.4.4/32 0.0.0.0 0 32768 i
*> 22.22.22.22/32 24.24.24.2 0 0 123 i
*> 33.33.33.33/32 24.24.24.2 0 123 i
Selanjutnya skenarionya adalah membuat ip 33.33.33.33 di R3 tidak diadvertise lagi di R1, dan R4.
Konfigurasi di R3 :
R3(config)#access-list 1 permit host 33.33.33.33
R3(config)#route-map NO-ADVERTISE
R3(config-route-map)#match ip address 1
R3(config-route-map)#set community no-advertise
R3(config-route-map)#router bgp 123
R3(config-router)#nei 2.2.2.2 route-map NO-ADVERTISE out
R3(config-router)#nei 2.2.2.2 send-community
Cek route table :
R4#sh ip bgp
BGP table version is 7, local router ID is 4.4.4.4
Status codes: s suppressed, d damped, h history, * valid, > best, i – internal,
r RIB-failure, S Stale
Origin codes: i – IGP, e – EGP, ? – incomplete
Network Next Hop Metric LocPrf Weight Path
*> 4.4.4.4/32 0.0.0.0 0 32768 i
*> 22.22.22.22/32 24.24.24.2 0 0 123 i
Cek route table :
R1#sh ip bgp
BGP table version is 6, local router ID is 11.11.11.11
Status codes: s suppressed, d damped, h history, * valid, > best, i – internal,
r RIB-failure, S Stale
Origin codes: i – IGP, e – EGP, ? – incomplete
Network Next Hop Metric LocPrf Weight Path
*>i4.4.4.4/32 2.2.2.2 0 100 0 4 i
*> 11.11.11.11/32 0.0.0.0 0 32768 i
*>i22.22.22.22/32 2.2.2.2 0 100 0 i
Selanjutnya untuk skenario local AS :
Konfigurasi di R1 :
R1#router bgp 12
bgp confederation identifier 123
network 11.11.11.11 mask 255.255.255.255
neighbor 2.2.2.2 remote-as 12
neighbor 2.2.2.2 update-source Loopback0
Konfigurasi di R2 :
R2#router bgp 12
bgp confederation identifier 123
bgp confederation peers 3
network 22.22.22.22 mask 255.255.255.255
neighbor 1.1.1.1 remote-as 12
neighbor 1.1.1.1 update-source Loopback0
neighbor 1.1.1.1 next-hop-self
neighbor 3.3.3.3 remote-as 3
neighbor 3.3.3.3 ebgp-multihop 255
neighbor 3.3.3.3 update-source Loopback0
neighbor 3.3.3.3 next-hop-self
neighbor 24.24.24.4 remote-as 4
Konfigurasi di R3 :
R3#router bgp 3
bgp confederation identifier 123
bgp confederation peers 12
network 33.33.33.33 mask 255.255.255.255
neighbor 2.2.2.2 remote-as 12
neighbor 2.2.2.2 ebgp-multihop 255
neighbor 2.2.2.2 update-source Loopback0
Selanjutnya filter ip address 11.11.11.11 di R1 agar tidak diterima di R3
R1(config)#access-list 1 permit host 11.11.11.11
R1(config)#route-map LOCAL-AS permit 10
R1(config-route-map)#match ip address 1
R1(config-route-map)#set community local-AS
R1(config-route-map)#router bgp 12
R1(config-router)#nei 2.2.2.2 route-map LOCAL-AS out
R1(config-router)#nei 2.2.2.2 send-community
Cek route table :
R3#sh ip bgp
BGP table version is 6, local router ID is 33.33.33.33
Status codes: s suppressed, d damped, h history, * valid, > best, i – internal,
r RIB-failure, S Stale
Origin codes: i – IGP, e – EGP, ? – incomplete
Network Next Hop Metric LocPrf Weight Path
*> 4.4.4.4/32 2.2.2.2 0 100 0 (12) 4 i
*> 22.22.22.22/32 2.2.2.2 0 100 0 (12) i
*> 33.33.33.33/32 0.0.0.0 0 32768 i
- BGP Peers Group
skenario selanjutnya adalah untuk menghemat jumlah command line yang harus dituliskan ke dalam CLI.
Konfigurasinya :
router bgp 123
nei INTERNAL peer group
nei INTERNAL remote-as 123
nei INTERNAL update-source lo0
nei 2.2.2.2 peer-group INTERNAL
nei 3.3.3.3 peer-group INTERNAL
- BGP Aggregator
Skenario selanjutnya adalah untuk melakukan summary address dari beberapa IP yang ada di show ip route .
Konfigurasinya sbb :
router bgp x
aggregate-address x.x.x.x
Bila dibutuhkan hanya beberapa ip address saja yang ingin dihilangkan maka konfigurasinya sbb :
access-list 1 permit host x.x.x.x
route-map BLOK
match ip address 1
router bgp 4
aggregate-address x.x.x.x suppress-map BLOK
- BGP Local-AS
Konfigurasinya sbb :
router bgp 3
neighbor x.x.x.x local-as yyy
Jika ingin melakukan no prepend local-as konfigurasinya sbb :
neighbor x.x.x.x local-as yyy no-prepend
Jika ingin no prepend dan replace as konfigurasinya sbb :
neighbor x.x.x.x local-as yyy no-prepend replace-as
MPLS
Multiprotocol Label Switching (disingkat menjadi MPLS) adalah teknologi penyampaian paket pada jaringan backbone berkecepatan tinggi. Asas kerjanya menggabungkan beberapa kelebihan dari sistem komunikasi circuit-switched dan packet-switched yang melahirkan teknologi yang lebih baik dari keduanya. Sebelumnya, paket-paket diteruskan dengan protokol routing seperti OSPF, IS-IS, BGP, atau EGP. Protokol routing berada pada lapisan ketiga network OSI, sedangkan MPLS berada di antara lapisan kedua dan ketiga.
Prinsip kerja MPLS ialah menggabungkan kecepatan switching pada layer 2 dengan kemampuan routing dan skalabilitas pada layer 3. Cara kerjanya adalah dengan menyelipkan label di antara header layer 2 dan layer 3 pada paket yang diteruskan. Label dihasilkan oleh Label-Switching Router dimana bertindak sebagai penghubung jaringan MPLS dengan jaringan luar. Label berisi informasi tujuan node selanjutnya kemana paket harus dikirim. Kemudian paket diteruskan ke node berikutnya, di node ini label paket akan dilepas dan diberi label yang baru yang berisi tujuan berikutnya. Paket-paket diteruskan dalam path yang disebut LSP (Label Switching Path).
Komponen MPLS :
- Label Switched Path (LSP): Merupakan jalur yang melalui satu atau serangkaian LSR dimana paket diteruskan oleh label swapping dari satu MPLS node ke MPLS node yang lain.
- Label Switching Router: MPLS node yang mampu meneruskan paket-paket layer-3
- MPLS Edge Node atau Label Edge Router (LER): MPLS node yang menghubungkan sebuah MPLS domain dengan node yang berada diluar MPLS domain
- MPLS Egress Node: MPLS node yang mengatur trafik saat meninggalkan MPLS domain
- MPLS ingress Node: MPLS node yang mengatur trafik saat akan memasuki MPLS domain
- MPLS label: merupakan label yang ditempatkan sebagai MPLS header
- MPLS node: node yang menjalankan MPLS. MPLS node ini sebagai control protokol yang akan meneruskan paket berdasarkan label.
Berikut konfigurasi lab yang sy praktekkan di gns mengacu kepada buku pegangan dari id-networkers.
- MPLS Dasar
Konfigurasi PE1 :
interface Loopback0
ip address 10.10.10.1 255.255.255.255
interface FastEthernet0/0
description ### Link to P Router ###
ip address 192.168.10.1 255.255.255.252
Konfigurasi P:
interface Loopback0
ip address 10.10.10.10 255.255.255.255
interface FastEthernet0/0
description ### Link to PE1 Reouter ###
ip address 192.168.10.2 255.255.255.252
interface FastEthernet0/1
description ### Link to PE2 Reouter ###
ip address 192.168.20.1 255.255.255.252
Konfigurasi PE2:
interface Loopback0
ip address 10.10.10.2 255.255.255.255
interface FastEthernet0/0
description ### Link to P Router ###
ip address 192.168.20.2 255.255.255.252
Agar semua router dalam MPLS bida terkoneksi perlu adanya routing dynamic (IGP) kali ini contoh menggunakan OSPF :
PE1#sh run | s ospf
router ospf 1
router-id 10.10.10.1
log-adjacency-changes
network 10.10.10.1 0.0.0.0 area 0
network 192.168.10.1 0.0.0.0 area 0
P#sh run | s ospf
router ospf 1
log-adjacency-changes
network 10.10.10.10 0.0.0.0 area 0
network 192.168.10.2 0.0.0.0 area 0
network 192.168.20.1 0.0.0.0 area 0
PE2#sh run | s ospf
router ospf 1
router-id 10.10.10.2
log-adjacency-changes
network 10.10.10.2 0.0.0.0 area 0
network 192.168.20.2 0.0.0.0 area 0
Untuk melewatkan informasi routing, vpn, vrf memerlukan MP-BGP di PE 1 dan PE 2 ,
konfigurasinya :
PE1#sh run | s bgp
router bgp 65000
no synchronization
bgp log-neighbor-changes
neighbor 10.10.10.2 remote-as 65000
neighbor 10.10.10.2 update-source Loopback0
no auto-summary
PE2#sh run | s bgp
router bgp 65000
no synchronization
bgp log-neighbor-changes
neighbor 10.10.10.1 remote-as 65000
neighbor 10.10.10.1 update-source Loopback0
no auto-summary
Cek status BGP nya :
PE1#sh ip bgp summary | i 10.10.10.2
10.10.10.2 4 65000 37 37 1 0 0 00:34:49 0
BGP sudah establish selanjutnya aktifkan MPLS nya dengan cara :
PE1(config)#mpls ip
PE1(config)#int fa0/0
PE1(config-if)#mpls ip
PE2(config)#mpls ip
PE2(config)#int fa0/0
PE2(config-if)#mpls ip
P(config)#mpls ip
P(config)#int fa0/0
P(config-if)#mpls ip
P(config-if)#int fa0/1
P(config-if)#mpls ip
Untuk melihat status MPLS aktif bisa menggunakan command :
PE1#sh mpls forwarding-table
Local Outgoing Prefix Bytes tag Outgoing Next Hop
tag tag or VC or Tunnel Id switched interface
16 Pop tag 192.168.20.0/30 0 Fa0/0 192.168.10.2
17 Pop tag 10.10.10.10/32 0 Fa0/0 192.168.10.2
18 16 10.10.10.2/32 0 Fa0/0 192.168.10.2
PE1#sh mpls ldp discovery
Local LDP Identifier:
10.10.10.1:0
Discovery Sources:
Interfaces:
FastEthernet0/0 (ldp): xmit/recv
LDP Id: 10.10.10.10:0
- MPLS VPN
Jadi di lab ini kita akan meletakkan 2 router pelanggan masing-masing (BRI dan BCA) di PE1 dan PE2. Masing-masing router pelanggan ini merupakan customer edge sehingga kita namakan CE.
Konfigur VRF untuk masing-masing pelanggan di PE1 dan PE2 : (disini a adalah BRI dan b adalah BCA)
PE1#sh run | s ip vrf
ip vrf vpn_a
rd 65000:1
route-target export 65000:1
route-target import 65000:1
ip vrf vpn_b
rd 65000:2
route-target export 65000:2
route-target import 65000:2
PE2(config)# ip vrf vpn_a
PE2(config-vrf)# rd 65000:1
PE2(config-vrf)# route-target both 65000:1
PE2(config-vrf)# exit
PE2(config)# ip vrf vpn_b
PE2(config-vrf)# rd 65000:2
PE2(config-vrf)# route-target export 65000:2
PE2(config-vrf)# route-target import 65000:2
*) RD <xxxx:xxx> ini berfungsi untuk identitas dari sebuah vrf dan untuk tiap costumer memlilik RD yang berbeda
*) Route-terget digunakan untuk memanipulasi route yang akan di berikan ke routing tabel dalam vrf
Selanjutnya konfigurasikan IP untuk koneksi ke CEA1,CEA2 dan CEB1,CEB22
PE1#sh run int se0/0
interface Serial0/0
description ### to VPN-A ###
ip vrf forwarding vpn_a
ip address 192.168.0.1 255.255.255.252
clock rate 2000000
end
PE1#sh run int se0/1
interface Serial0/1
description ### to VPN-B ###
ip vrf forwarding vpn_b
ip address 192.168.0.1 255.255.255.252
clock rate 2000000
end
PE2#sh run int se0/0
interface Serial0/0
description ### to VPN-A ###
ip vrf forwarding vpn_a
ip address 192.168.0.5 255.255.255.252
clock rate 2000000
end
PE2#sh run int se0/1
interface Serial0/1
description ### to VPN-B ###
ip vrf forwarding vpn_b
ip address 192.168.0.5 255.255.255.252
clock rate 2000000
end
PE1#sh ip vrf
Name Default RD Interfaces
vpn_a 65000:1 Se0/0
vpn_b 65000:2 Se0/1
PE2#sh ip vrf
Name Default RD Interfaces
vpn_a 65000:1 Se0/0
vpn_b 65000:2 Se0/1
Cek route table :
PE1#sh run | s router bgp
router bgp 65000
!
address-family vpnv4
neighbor 10.10.10.2 activate
neighbor 10.10.10.2 send-community extended
exit-address-family
PE2#sh run | s router bgp
router bgp 65000
!
address-family vpnv4
neighbor 10.10.10.1 activate
neighbor 10.10.10.1 send-community extended
exit-address-family
neighbor 10.10.10.2 send-community extended à default active
- MPLS VPN – PE CE Static Routing
Masih dengan topologi di atas dimana yang dikonfigurasi adalah BRI (CEA1 dan CEA2).
Konfigurasi CEA1:
CEA1(config)#ip route 0.0.0.0 0.0.0.0 192.168.0.1
CEA1(config)#do sh run int se0/0
interface Serial0/0
ip address 192.168.0.2 255.255.255.252
clock rate 2000000
end
CEA2#conf t
CEA2(config)#ip route 0.0.0.0 0.0.0.0 192.168.0.5
CEA2#sh run int se0/0
interface Serial0/0
ip address 192.168.0.6 255.255.255.252
clock rate 2000000
end
PE nya :
PE1#conf t
PE1(config)#router bgp 65000
PE1(config-router)#address-family ipv4 vrf vpn_a
PE1(config-router-af)#redistribute static
PE1(config-router-af)#redistribute connected
PE2#conf t
PE2(config)# router bgp 65000
PE2(config-router)# address-family ipv4 vrf vpn_a
PE2(config-router-af)# redistribute static
PE2(config-router-af)# redistribute connected
Cek ping :
CEA1#ping 192.168.0.5
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.0.5, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 84/119/148 ms
- MPLS VPN – PE CE RIP
Kalau untuk lab ini kita akan konfigurasi sisi BCA nya (CEB1 dan CEB2).
Konfigurasi CE nya :
CEB1#conf t
CEB1(config)#router rip
CEB1(config-router)#version 2
CEB1(config-router)#net 0.0.0.0
CEB1(config-router)#no auto-summary
interface Loopback0
ip address 1.1.1.1 255.255.255.255
CEB2#conf t
CEB2(config)# router rip
CEB2(config-router)# version 2
CEB2(config-router)# net 0.0.0.0
CEB2(config-router)# no auto-summary
interface Loopback0
ip address 1.1.1.2 255.255.255.255
Selanjutnya konfigur redistribute RIP di PE nya :
PE1(config)#router rip
PE1(config-router)#version 2
PE1(config-router)#address-family ipv4 vrf vpn_b
PE1(config-router-af)#network 192.168.0.0
PE1(config-router-af)#no auto-summary
PE1(config-router-af)#redistribute bgp 65000 metric transparent
PE1(config)#router bgp 65000
PE1(config-router)#addre
PE1(config-router)#address-family ipv4 vrf vpn_b
PE1(config-router-af)#redistribute rip
Cek ping :
CEB2#ping 1.1.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 104/133/172 ms
CEB2#sh ip rou
CEB2#sh ip route 1.1.1.1
Routing entry for 1.1.1.1/32
Known via “rip”, distance 120, metric 2
Redistributing via rip
Last update from 192.168.0.5 on Serial0/0, 00:00:00 ago
Routing Descriptor Blocks:
* 192.168.0.5, from 192.168.0.5, 00:00:00 ago, via Serial0/0
Route metric is 2, traffic share count is 1
- MPLS VPN – PE CE EIGRP Routing
Disini kita akan mengkonfigurasi EIGRP sisi BRI (CEA1 dan CEA2).
Konfigur CE nya :
CEA1#conf t
CEA1(config)#int lo0
CEA1(config-if)#ip address 1.1.1.1 255.255.255.255
CEA1(config)#router eigrp 100
CEA1(config-router)#net 0.0.0.0
CEA1(config-router)#no auto-summary
CEB2#conf t
CEB2(config)# router eigrp 100
CEB2(config-router)# net 0.0.0.0
CEB2(config-router)# no auto-summary
CEB2(config)#int lo0
CEB2(config-if)#ip address 2.2.2.2 255.255.255.255
Selanjutnyakonfigur redistribute RIP di PE nya :
PE1#conf t
PE1(config)#router eigrp 65000
PE1(config-router)#address-family ipv4 vrf vpn_a
PE1(config-router-af)#network 192.168.0.0
PE1(config-router-af)#redistribute bgp 65000 metric 1 1 1 1 1
PE1(config-router-af)#autonomous-system 100
PE1(config)#router bgp 65000
PE1(config-router)#address-family ipv4 vrf vpn_a
PE1(config-router-af)#redistribute eigrp 100
PE2#conf t
PE2(config)# router eigrp 65000
PE2(config-router)# address-family ipv4 vrf vpn_a
PE2(config-router-af)# network 192.168.0.0
PE2(config-router-af)# redistribute bgp 65000 metric 1 1 1 1 1
PE2(config-router-af)# autonomous-system 100
PE2(config-router)# router bgp
PE2(config)# router bgp 65000
PE2(config-router)# address-family ipv4 vrf vpn_a
PE2(config-router-af)# redistribute eigrp 100
cek route table :
CEA2#sh ip route eigrp
1.0.0.0/32 is subnetted, 1 subnets
D 1.1.1.1 [90/2809856] via 192.168.0.5, 00:00:10, Serial0/0
192.168.0.0/30 is subnetted, 2 subnets
D 192.168.0.0 [90/2681856] via 192.168.0.5, 00:00:10, Serial0/0
CEA2#ping 1.1.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 92/121/152 ms
- MPLS VPN – PE CE BGP Routing
Kalau lab ini kita akan mengkonfigurasi BGP routing di sisi BCA (CEB1 dan CEB2).
Konfigur CE nya :
CEB1(config)#int lo0
CEB1(config-if)#ip address 11.11.11.11 255.255.255.255
CEB1(config)#router bgp 111
CEB1(config-router)#neighbor 192.168.0.1 remote-as 65000
CEB1(config-router)#net 11.11.11.11 mask 255.255.255.255
CEB2(config)#int lo0
CEB2(config-if)#ip address 22.22.22.22 255.255.255.255
CEB2(config)#router bgp 111
CEB2(config-router)#neighbor 192.168.0.5 remote-as 65000
CEB2(config-router)#net 22.22.22.22 mask 255.255.255.255
Konfig PE nya :
PE1#conf t
PE1(config)#router bgp 65000
PE1(config-router)#address-family ipv4 vrf vpn_b
PE1(config-router-af)#neighbor 192.168.0.2 remote-as 111
PE1(config-router-af)#neighbor 192.168.0.2 activate
PE1(config-router-af)#neighbor 192.168.0.2 as-override
PE2(config)#router bgp 65000
PE2(config-router)#address-family ipv4 vrf vpn_b
PE2(config-router-af)#neighbor 192.168.0.6 remote-as 111
PE2(config-router-af)#neighbor 192.168.0.6 activate
PE2(config-router-af)#neighbor 192.168.0.6 as-override
Cek ping :
CEB1#ping 22.22.22.22
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 22.22.22.22, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 92/116/156 ms
CEB1#sh ip bg
CEB1#sh ip bgp
BGP table version is 11, local router ID is 11.11.11.11
Status codes: s suppressed, d damped, h history, * valid, > best, i – internal,
r RIB-failure, S Stale
Origin codes: i – IGP, e – EGP, ? – incomplete
Network Next Hop Metric LocPrf Weight Path
*> 11.11.11.11/32 0.0.0.0 0 32768 i
*> 22.22.22.22/32 192.168.0.1 0 65000 65000 i
r> 192.168.0.0/30 192.168.0.1 0 0 65000 ?
*> 192.168.0.4/30 192.168.0.1 0 65000 ?
- MPLS VPN – PE CE OSPF Routing
Disini kita akan konfigurasi OSPF routing di sisi BRI (CEA1 dan CEA2).
Konfigurasi di CE :
CEA1#sh run | s ospf
router ospf 1
log-adjacency-changes
network 0.0.0.0 255.255.255.255 area 0
CEA2#sh run | s ospf
router ospf 1
log-adjacency-changes
network 0.0.0.0 255.255.255.255 area 0
Konfigurasi di PE:
PE1#sh run | s router ospf
router ospf 100 vrf vpn_a
log-adjacency-changes
redistribute bgp 65000 subnets
network 192.168.0.1 0.0.0.0 area 0
PE2#sh run | s router ospf
router ospf 100 vrf vpn_a
log-adjacency-changes
redistribute bgp 65000 subnets
network 192.168.0.5 0.0.0.0 area 0
Cek route table :
CEA1#sh ip route ospf
192.168.0.0/30 is subnetted, 2 subnets
O IA 192.168.0.4 [110/11] via 192.168.0.1, 00:02:43, FastEthernet0/0
CEA1#ping 192.168.0.6
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.0.6, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 124/148/188 ms
- MPLS VPN – PE CE OSPF -Shamlink
Tambahkan IP B2B antara CEA1 – CEA2 :
CEA2#conf t
Enter configuration commands, one per line. End with CNTL/Z.
CEA2(config)#int se0/1
CEA2(config-if)#ip add
CEA2(config-if)#ip address 12.12.12.2 255.255.255.0
CEA2(config-if)#no shut
CEA1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
CEA1(config)#int se0/1
CEA1(config-if)#ip add
CEA1(config-if)#ip address 12.12.12.1 255.255.255.0
CEA1(config-if)#no shut
Setelah link baru hidup trafic lebih prefer melalui lionk tersebut :
CEA1#sh ip route 192.168.0.5
Routing entry for 192.168.0.4/30
Known via “ospf 1”, distance 110, metric 74, type intra area
Last update from 12.12.12.2 on Serial0/1, 00:02:25 ago
Routing Descriptor Blocks:
* 12.12.12.2, from 192.168.0.6, 00:02:25 ago, via Serial0/1
Route metric is 74, traffic share count is 1
Untuk memanipulasinya di sisi provider ditambahkan OSPF Shamlink dengan konfigurasi :
PE1#sh run int lo200
interface Loopback200
ip vrf forwarding vpn_a
ip address 100.100.100.1 255.255.255.255
end
tambahkan router-id dan area shamlink :
router ospf 100 vrf vpn_a
router-id 100.100.100.1
log-adjacency-changes
area 0 sham-link 100.100.100.1 100.100.100.2
redistribute bgp 65000 subnets
network 192.168.0.1 0.0.0.0 area 0
Redistribute network 100.100.100.x ke bgp :
address-family ipv4 vrf vpn_a
redistribute connected
redistribute ospf 100 vrf vpn_a match internal external 1 external 2
no synchronization
network 100.100.100.1 mask 255.255.255.255
Buat int Loopback :
PE2#sh run int lo200
interface Loopback200
ip vrf forwarding vpn_a
ip address 100.100.100.2 255.255.255.255
end
tambahkan router-id dan area shamlink :
router ospf 100 vrf vpn_a
router-id 100.100.100.22
log-adjacency-changes
area 0 sham-link 100.100.100.2 100.100.100.1
redistribute bgp 65000 subnets
network 192.168.0.5 0.0.0.0 area 0
Redistribute network 100.100.100.x ke bgp :
address-family ipv4 vrf vpn_a
redistribute connected
redistribute ospf 100 vrf vpn_a match internal external 1 external 2
no synchronization
network 100.100.100.12mask 255.255.255.255
Cek route table :
CEA1#sh ip route 192.168.0.6
Routing entry for 192.168.0.4/30
Known via “ospf 1”, distance 110, metric 21, type intra area
Last update from 192.168.0.1 on FastEthernet0/0, 00:05:41 ago
Routing Descriptor Blocks:
* 192.168.0.1, from 192.168.0.6, 00:05:41 ago, via FastEthernet0/0
Route metric is 21, traffic share count is 1
- MPLS VPN – AtoM – Frame Relay
konfigurasinya :
PE1(config)#mpls ldp router-id loopback 0 force
PE1(config)#mpls ldp router-id loopback 0 force
Aktifkan Interface dengan encapsulation Frame relay
PE1(config)#int se2/0
PE1(config-if)#encapsulation frame-relay
PE1(config-if)#frame-relay intf-type dce
PE2(config)#int se2/0
PE2(config-if)#encapsulation frame-relay
PE2(config-if)#frame-relay intf-type dce
Konfigur Frame Relay Swicthing dan buat virtual connection untuk Frame Relay melalui MPLS:
PE2(config)#frame-relay switching
PE2(config)#connect AToMFR serial2/0 201 l2transport
PE2(config-fr-pw-switching)#xconnect 10.10.10.2 1 enca
PE2(config-fr-pw-switching)#xconnect 10.10.10.2 1 encapsulation mpls
PE2(config-fr-pw-switching)#exit
PE1(config)#frame-relay switching
PE1(config)#connect AToMFR serial2/0 102 l2transport
PE1(config-fr-pw-switching)#xconnect 10.10.10.2 1 enca
PE1(config-fr-pw-switching)#xconnect 10.10.10.2 1 encapsulation mpls
PE1(config-fr-pw-switching)#exit
Konfigur Frame Relay Pada Router CE :
CE1:
interface Serial0/0
no ip address
encapsulation frame-relay
clock rate 2000000
!
interface Serial0/0.1 point-to-point
ip address 12.12.12.1 255.255.255.0
frame-relay interface-dlci 102
CE2:
interface Serial0/0
no ip address
encapsulation frame-relay
clock rate 2000000
!
interface Serial0/0.1 point-to-point
ip address 12.12.12.2 255.255.255.0
frame-relay interface-dlci 201
Cek route table :
PE1# sh mpls l2transport vc 1
Local intf Local circuit Dest address VC ID Status
————- ——————– ————— ———- ———-
Se2/0 FR DLCI 102 10.10.10.2 1 UP
Cek ping :
CE1#ping 12.12.12.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 12.12.12.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 72/100/124 ms