High Availability with VRRP+OSPF on GNS3

Posted on Thursday 22 September 2011

As we all know that VRRP is a one of gateway redundancy protocol similiar with HSRP which is cisco proprietary protocol. It would be powerfull if we combine it with dynamic routing protocol such as ospf, eigrp as we frequently found it in campus or enterprise network. Here are the basic configuration of topology that i’ve simulated on GNS3.

VRRP and OSPF Topology on GNS3:

R1 Configuration:

interface Loopback0
ip address 1.1.1.1 255.255.255.255
!
interface FastEthernet0/0
description TO_R2
ip address 10.10.10.1 255.255.255.252
speed 100
full-duplex
!
interface FastEthernet0/1
description TO_R3
ip address 20.20.20.1 255.255.255.252
speed 100
full-duplex
!
interface FastEthernet1/0
description TO_QEMU2
ip address 50.50.50.1 255.255.255.0
duplex auto
speed auto
!
router ospf 100
router-id 1.1.1.1
log-adjacency-changes
network 1.1.1.1 0.0.0.0 area 0
network 10.10.10.0 0.0.0.3 area 0
network 20.20.20.0 0.0.0.3 area 0
network 50.50.50.0 0.0.0.3 area 0
default-information originate
!
ip route 0.0.0.0 0.0.0.0 50.50.50.10

 

R2 Configuration:

interface Loopback0
ip address 2.2.2.2 255.255.255.255
!
interface FastEthernet0/0
description TO_SW1
no ip address
speed 100
full-duplex
!
interface FastEthernet0/0.2
description TO_VLAN2
encapsulation dot1Q 2
ip address 40.40.40.2 255.255.255.0
vrrp 2 ip 40.40.40.1
vrrp 2 priority 200
!
interface FastEthernet0/0.3
description TO_VLAN3
encapsulation dot1Q 3
ip address 60.60.60.2 255.255.255.0
vrrp 3 ip 60.60.60.1
vrrp 3 priority 200
!
interface FastEthernet0/1
description TO_R1
ip address 10.10.10.2 255.255.255.252
speed 100
full-duplex
!
interface FastEthernet1/0
description TO_R3
ip address 30.30.30.1 255.255.255.252
speed 100
full-duplex
!
router ospf 100
router-id 2.2.2.2
log-adjacency-changes
redistribute static
passive-interface FastEthernet0/0.2
passive-interface FastEthernet0/0.3
network 2.2.2.2 0.0.0.0 area 0
network 10.10.10.0 0.0.0.3 area 0
network 30.30.30.0 0.0.0.3 area 0
network 40.40.40.0 0.0.0.255 area 0
network 60.60.60.0 0.0.0.255 area 0

R3 Configuration:

interface Loopback0
ip address 3.3.3.3 255.255.255.255
!
interface FastEthernet0/0
description TO_SW1
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.2
description TO_VLAN2
encapsulation dot1Q 2
ip address 40.40.40.3 255.255.255.0
vrrp 2 ip 40.40.40.1
vrrp 2 priority 150
!
interface FastEthernet0/0.3
description TO_VLAN3
encapsulation dot1Q 3
ip address 60.60.60.3 255.255.255.0
vrrp 3 ip 60.60.60.1
vrrp 3 priority 150
!
interface FastEthernet0/1
description TO_R1
ip address 20.20.20.2 255.255.255.252
duplex auto
speed auto
!
interface FastEthernet1/0
description TO_R2
ip address 30.30.30.2 255.255.255.252
duplex auto
speed auto
!
router ospf 100
router-id 3.3.3.3
log-adjacency-changes
passive-interface FastEthernet0/0.2
passive-interface FastEthernet0/0.3
network 3.3.3.3 0.0.0.0 area 0
network 20.20.20.0 0.0.0.3 area 0
network 30.30.30.0 0.0.0.3 area 0
network 40.40.40.0 0.0.0.255 area 0
network 60.60.60.0 0.0.0.255 area 0

 

 

iNeb @ 6:45 pm
Filed under: Cisco andNetwork
Postfix installation on solaris 10

Posted on Monday 28 February 2011

Postfix Packages for Solaris 10 (sparc and x86) and OpenSolaris 2009.06 (only x86) (with SMF support):

This Postfix package depends only on packages which are shipped with Solaris and it’s to replace Solaris’ Sendmail with Postfix. Please uninstall SUNWsndmr and SUNWsndmu before you install Postfix.
The package was compiled with Sun Studio 12 and it supports OpenSSL and LDAP (native Solaris libraries).

This package will automaticaly add the required Postfix user and group to the system and register the SMF manifest. Please feel free to contact me for suggestions or bug reports: ihsan@dogan.ch.

Howto install:
This package is to replace Sendmail on Solaris, so you have to uninstall first Sendmail:
# svcadm disable sendmail
# pkgrm SUNWsndmu
# pkgrm SUNWsndmr

Uncompress the file with bunzip2 and then install the package with pkgadd:
# bunzip2 CNDpostfix-2.4.6,REV=080102-SunOS5.10-sparc.pkg.bz2
# pkgadd -d CNDpostfix-2.4.6,REV=080102-SunOS5.10-sparc.pkg CNDpostfix

Now you can change /etc/postfix/main.cf according to your needs and start Postfix with:
# svcadm enable svc:/network/postfix:default


queue_directory = /var/spool/postfix
command_directory = /usr/sbin
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
mail_owner = postfix
myhostname = medi.go.id
myorigin = $myhostname
inet_interfaces = all
unknown_local_recipient_reject_code = 550
mail_spool_directory = /var/mail
debugger_command =
PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
ddd $daemon_directory/$process_name $process_id & sleep 5
sendmail_path = /usr/lib/sendmail
newaliases_path = /usr/bin/newaliases
mailq_path = /usr/bin/mailq
readme_directory = no
inet_protocols = all

Please have a look a the Postfix documentation.

Downloads:
Postfix 2.8.0, revision 110125 for Solaris 10 sparc
Postfix 2.8.0, revision 110125 for Solaris 10 x86

Postfix 2.6.2, revision 090607 for OpenSolaris 2009.06 x86 NEW! (experimental)
Additional information:

Upgrading:
Uninstall the package and then follow the installation instructions above:
# pkgrm CNDpostfix

Keeping up to date:
Follow me on Twitter
Building your own package:

The package which is provided here, is very generic. If you need a specific functionallity, you may want to build your own package. Please use the Postfix documentation to find out the right options to create the makefiles.

First set the linker options:
$ LD_OPTIONS=”-L/opt/SUNWspro/lib -R/usr/sfw/lib -L/usr/sfw/lib” ; export LD_OPTIONS

Set the PATH variable:
$ PATH=”/usr/bin:/usr/sfw/bin:/usr/ccs/bin” ; export PATH

Generate the makefiles
$ make makefiles CCARGS=”-DUSE_TLS -DHAS_LDAP -lssl -lcrypto -lldap” \
-I/usr/sfw/include -I/usr/sfw/include/openssl AUXLIBS=”-R/usr/sfw -L/usr/sfw”

Build Postfix
$ make

To build the package, just execute makePostfixPkg.sh in the Postfix source directory.
$ makePostfixPkg.sh

Reference :

http://ihsan.dogan.ch/postfix/

iNeb @ 1:32 pm
Filed under: Unix
Junos Olive 10.4R1.9

Posted on Sunday 6 February 2011

Sekitar 2 tahun yang lalu pernah iseng install Olive yang masih menggunakan versi jinstall-7.x dan upgrade ke jinstall-8.x di virtual machine BSD, kemudian kemarin saya coba lagi sudah berhasil upgrade ke Olive 10.4R1.9. Entah versi 10.4R1.9 ini merupakan seri yang terbaru atau bukan saya kurang begitu tahu, hanya seri terbaru yang saya temukan di forum-forum saja :)

Penampakan:

CLI

— JUNOS 10.4R1.9 built 2010-12-04 09:20:43 UTC
root@ineb% cli
root@ineb> show version
Hostname: ineb
Model: olive
JUNOS Base OS boot [10.4R1.9]
JUNOS Base OS Software Suite [10.4R1.9]
JUNOS Kernel Software Suite [10.4R1.9]
JUNOS Crypto Software Suite [10.4R1.9]
JUNOS Packet Forwarding Engine Support (M/T Common) [10.4R1.9]
JUNOS Packet Forwarding Engine Support (M20/M40) [10.4R1.9]
JUNOS Online Documentation [10.4R1.9]
JUNOS Voice Services Container package [10.4R1.9]
JUNOS Border Gateway Function package [10.4R1.9]
JUNOS Services AACL Container package [10.4R1.9]
JUNOS Services LL-PDF Container package [10.4R1.9]
JUNOS Services PTSP Container package [10.4R1.9]
JUNOS Services Stateful Firewall [10.4R1.9]
JUNOS Services NAT [10.4R1.9]
JUNOS Services Application Level Gateways [10.4R1.9]
JUNOS Services Captive Portal and Content Delivery Container package [10.4R1.9]
JUNOS Services RPM [10.4R1.9]
JUNOS AppId Services [10.4R1.9]
JUNOS IDP Services [10.4R1.9]
JUNOS Runtime Software Suite [10.4R1.9]
JUNOS Routing Software Suite [10.4R1.9]
JUNOS Web Management [10.4R1.9]

GUI

Selanjutnya siap buat emulasi JUNOS di GNS3. Bagi yang lagi belajar juga seperti saya, bisa ngunduh filenya dari link berikut:

jinstall-10.4R1.9-domestic-signed.tgz.part1-part4.rar
http://www.4shared.com/file/uckzXqif/jinstall-104R19-domestic-signe.html
http://www.4shared.com/file/txbydON5/jinstall-104R19-domestic-signe.html
http://www.4shared.com/file/pKg5p0V8/jinstall-104R19-domestic-signe.html
http://www.4shared.com/file/tvS_RDHt/jinstall-104R19-domestic-signe.html

jweb-10.4R1.9-signed.tgz
http://www.4shared.com/file/eZfrzCg_/jweb-104R19-signed.html

Referensi:

http://blog.gns3.net/2009/10/olive-juniper/1/
http://juniper.cluepon.net/index.php/Olive
http://inetpro.org/wiki/Using_QEMU_with_Olive_to_emulate_Juniper_Routers
http://brokenpipes.blogspot.com/2008/01/olive-is-alive.html
iNeb @ 3:19 am
Filed under: Juniper