Thursday, September 6, 2012


Sebelumnya mungkin ada yang belum tau apaan sih router??OK penjelasan sedikit, Router adalah hardware yang berguna untuk menghubungkan dan merutekan paket data dari sebuah jaringan network ke network yang lain. Dan bentuknya salah satunya router seperti gambar disamping.

Dan di sini saya akan menshare sedikit(Berhubung baru dapt dasar dari dosen coy..:) cara setting router yang umum atau dasarnya yang digunakan pada console.
Tahap-tahap dasar cara setting konfigurasi router seperti dibawah ini :

1. Setting host name
router#enable t
router(config)#hostname nama-router

2. Setting pasword console
router(config)# enable secret password-anda
router(config)# enable password password-anda

3. Membuat Paswword terencryption
router(config)# service password-encryption
router(config)# enable password password-anda

4. Setting vty dan aux
router(config)#line vty 0 4
router(config-line)#login
router(config-line)#password password-anda
router(config-line)#line con 0
router(config-line)#login
router(config-line)#password password-anda
router(config-line)# exit
router(config)# no service password-encryption
router(config)# ^Z
router(config)# wr mem

5. Setting terhadap FastEthernet fa 0/0
router#config t
router(config)#int fa0/0
router(config-if)# ip address 192.168.xx.x 255.255.xx.xx
router(config)#no shutdown
router(config)#exit

6. Setting terhadap Serial 0/0
router# config t
router(config)# int serial0/0
router(config-if)# ip address 192.168.xx.x 255.255.xx.xx
router(config)#no shutdown
router(config)#exit

Bandwidth Manajemen di Mikrotik menggunakan Mode Bridge


Dengan asumsi mikrotik mempunyai 2 interface dan akan difungsikan sebagai bandwidth manager yang berjalan pada interface bridge (TransparentTrafficShaper).

Pertama buat interface bridge dan masukan kedua interface fisik ke dalam bridge
/ interface bridge
add name=”bridge1″

/ interface bridge port
add interface=ether1 bridge=bridge1
add interface=ether2 bridge=bridge1

Untuk Mikrotik versi 3 dan yang lebih baru jalankan perintah berikut untuk melewatkan bridge paket ke dalam “ip firewall”
/ interface bridge settings
set use-ip-firewall=yes

Tambahkan alamat ip yang akan kita atur bandwidthnya ke dalam address list
/ ip firewall address-list add address=192.168.1.230 list=mine
/ ip firewall address-list add address=192.168.1.232 list=swc
/ ip firewall address-list add address=192.168.1.233 list=kary
/ ip firewall address-list add address=192.168.1.240 list=utama

Buat rules mangle untuk alamat ip yang akan kita atur bandwidthnya
/ ip firewall mangle add chain=forward src-address-list=mine action=markconnection new-connection-mark=mine-up passthrough=no
/ ip firewall mangle add chain=forward dst-address-list=mine action=markconnection new-connection-mark=mine-down passthrough=no

/ ip firewall mangle add chain=forward src-address-list=swc action=markconnection new-connection-mark=swc-up passthrough=no

/ ip firewall mangle add chain=forward dst-address-list=swc action=markconnection new-connection-mark=swc-down passthrough=no

/ ip firewall mangle add chain=forward src-address-list=kary action=markconnection new-connection-mark=kary-up passthrough=no

/ ip firewall mangle add chain=forward dst-address-list=kary action=markconnection new-connection-mark=kary-down passthrough=no

/ ip firewall mangle add chain=forward src-address-list=utama action=markconnection new-connection-mark=utama-up passthrough=no

/ ip firewall mangle add chain=forward dst-address-list=utama action=markconnection new-connection-mark=utama-down passthrough=no

Buat Queue untuk masing-masing host
/queue tree add name=mine-up parent=global-in packet-mark=mine-down limit-at=32 max-limit=64
/queue tree add name=mine-down parent=global-in packet-mark=mine-down limitat=32 max-limit=64

/queue tree add name=swc-up parent=global-in packet-mark=swc-down limit-at=32 max-limit=64

/queue tree add name=swc-down parent=global-in packet-mark=swc-down limitat=32 max-limit=64

/queue tree add name=kary-up parent=global-in packet-mark=kary-down limit-at=32 max-limit=64

/queue tree add name=kary-down parent=global-in packet-mark=kary-down limitat=32 max-limit=64

/queue tree add name=utama-up parent=global-in packet-mark=utama-down limit-at=32 max-limit=64

/queue tree add name=utama-down parent=global-in packet-mark=utama-down limitat=32 max-limit=64

Selain itu, bisa juga digunakan Simple Queue semisal seperti berikut:

/queue simple name=”kary” target-addresses=192.168.1.233/32 dst-address=0.0.0.0/0
interface=all parent=none direction=both priority=8
queue=default-small/default-small limit-at=3M/3M max-limit=3M/3M
burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
total-queue=default-small

/queue simple name=”utama” target-addresses=192.168.1.240/32 dst-address=0.0.0.0/0

interface=all parent=none direction=both priority=8
queue=default-small/default-small limit-at=0/0 max-limit=0/0
burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
total-queue=default-small

/queue simple name=”swc” target-addresses=192.168.1.232/32 dst-address=0.0.0.0/0

interface=all parent=none direction=both priority=8
queue=default-small/default-small limit-at=2M/2M max-limit=2M/2M
burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
total-queue=default-small

Dan bisa juga ditambahkan simple queue yang lain semisal:

/queue simple name=”raja” target-addresses=192.168.1.241/32 dst-address=0.0.0.0/0
interface=all parent=none direction=both priority=8
queue=default-small/default-small limit-at=1M/1M max-limit=1M/1M
burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
total-queue=default-small

/queue simple name=”riset” target-addresses=192.168.1.236/32 dst-address=0.0.0.0/0

interface=all parent=none direction=both priority=8
queue=default-small/default-small limit-at=2M/2M max-limit=2M/2M
burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
total-queue=default-small

/queue simple name=”cisco” target-addresses=192.168.1.244/32 dst-address=0.0.0.0/0

interface=all parent=none direction=both priority=8
queue=default-small/default-small limit-at=512k/512k
max-limit=512k/512k burst-limit=0/0 burst-threshold=0/0
burst-time=0s/0s total-queue=default-small

/queue simple name=”lab” target-addresses=192.168.1.245/32 dst-address=0.0.0.0/0

interface=all parent=none direction=both priority=8
queue=default-small/default-small limit-at=256k/256k
max-limit=256k/256k burst-limit=0/0 burst-threshold=0/0
burst-time=0s/0s total-queue=default-small

Tuesday, April 24, 2012

Cara Configurasi Extreme.........

Setelah beberapa minggu yang lalu mengikut seminar tentang Extreme di tambah dengan beberapa tutorial mengenai produk dari Extreme Network;

Sepengetahuan saya tentang Switch dari pabrikan Extreme Network ;



Hardware
BlackDiamond : Chassis-based high-port density switches for 
               Carrier-Ethernet service providers and enterprise 
               core
Summit       : Standalone switches from L2 100Mbps to L3 10Gig 
               top-of-rack datacenter switches.
ReachNXT     : Port Extender - Manageable by an access switch via 
               XOS
SummitWM     : Wireless controllers
Altitude     : Wireless Access Points
Sentriant NG : Intrusion Protection System (IPS)
Sentriant AG : Network Access Controller (NAC)


Software
ExtremeWare(VxWorks based) = first generation of Extreme networks 
             operating system
ExtremeXOS = 2nd Generation OS based on Linux kernel and BusyBox
EPICenter  = Network Management Tool


Configuration
Switch CLI prompt is driven from SNMP host name value

Space bar to go to BootROM: for return to factory default configuration: config none


Extreme FDB = Forwarding Database for MAC addresses - 300 Sec 
              Aging timer per MAC
IP FDB (L3) for IP forwarding   
   show iparp 
    show fdb 
    create fdbentry 
    delete fdbentry 
    disable learning 
    enable learning

# configure ports 1 vlan accounting unlimited-learnings 
# configure ports 1 vlan accounting learning-limit 3 (use aging timer also) (only for dynamic entries)

Lock-learning (sticky mac)  
# configure ports 1 vlan VLAN1 lock-learning  
# configure ports 1 vlan VLAN1 unlock-learning 
    show vlan default security

ELSM (Extreme Link Status monitoring) 
gets link status from other-end 
     enable elsm ports 
    disable elsm ports 
    configure elsm ports 
    clear elsm ports 

VLANs
  1. Port-based
  2. 802.1Q Tagged VLAN
  3. Protocol-based VLAN 
        create vlan vlan_name 
        delete vlan vlan_name 
        configure vlan vlan_name add ports 
        configure vlan vlan_name delete ports 
        disable vlan vlan_name 
        enable vlan vlan_name 
        configure vlan vlan_name tag  
        configure vlan default delete port 7 
        configure vlan ENGINEERING add port 7 untagged 
        configure vlan ENGINEERING add ports 2,3 tagged 
        show vlan ENGINEERING  
     BPDU –> vlan0

Port Sharing (Aggregation) LAG 
     enable sharing 1 grouping 1-4 algorithm address-based lacp 
     show port sharing

Port Settings

   enable lldp port all 
   show ports configuration no-refresh 
   enable jumbo-frame ports all 
   show vlan VLAN1 security

spanning-tree is disabled by default
EMI-STP Encapsulation - Extreme Multi Instance Spanning Tree - VST+ additional header

EAPS - Ethernet Automatic Protection Switching (Ring)

  • Ring Topology
  • L2 Protocol - Multicast MAC
  • EAPS version 2 (advanced feature - EAPS shared port for preventing superloop)
  • 50 ms failover
  • Device Roles: Master node, Transit nodes
  • Primary/secondary port on each switch
  • Master blocks its secondary port
  • Control VLAN and Protected VLAN (one Control VLAN per EAPS domain)
  • EAPS flush FDB when there's a topology change

 create vlan control_vlan_name  
   configure vlan control_vlan_name tag vlan_tag  
   configure vlan control_vlan_name add port tagged 
        create eaps  
        configure eaps mode master|transit 
        configure eaps primary port  
        configure eaps secondary port  
        configure eaps add control vlan control_vlan_name 
        configure eaps add protect vlan  
        enable eaps 
        enable eaps  
        configure eaps fast-convergence [off|on] -> additional 250ms 
     configure eaps name failtime expiry-action open secondary-port > by default sends alert!

EAPS with a Shared Port
  • Configure partner
  • Configure controller port
  • link-id must be same on both switches

SummitStack
  • Should have same image: 
     download image slot
  • 40Gbps full duplex capacity per switch
  • MAX: 8 devices 
     enable stacking 
        show stacking 
        show stacking configuration 
        configure stacking easy-setup

IP Routing
  • By default is disabled 
    enable ipforwarding 
    configure iproute add x.x.x.x/x y.y.y.y 
    show ipconfig
  • In new vlan ip forwarding might be disabled make sure to check. 
    show iproute 
    show ipstats
  • icmp is enabled by default
OSPF
    enable ipforwarding 
    configure ospf routerid 1.1.1.1 
    enable loopback vlanname (if you want to have loopback) 
    configure ospf address VLAN1 area 0.0.0.0 
    configure ospf address VLAN2 area 0.0.0.0 
    enable ospf 
    show ospf 
    show ospf area 0.0.0.0 
    show ospf neighbors 
    show ospf lsdb

  • Redistribution is disabled and is configurable by policy files.
  • Core license required for OSPF DR/BDR function.
  • on edge / advanced edge license: we can not have DRs so priority:0
ESRP
Extreme Standby Routing Protocol - ESRP is extreme protocol for redundancy something like VRRP

QOS
  • No much QOS support
  • Traffic shaping is called metering
  • 8 queue per interface
  • Queue 1 and 8 are used by default (2q)



Thursday, April 19, 2012

Config port-channel LACP Laod balancing dan redudance di Cisco



Kali ini saya coba berbagi pengetahuan dan semoga ini bisa bermanfaat bagi kita semua, dalam kesempatan ini saya coba menjelaskan cara-cara pembuatan port-channel lacp load balancing dan redudance

Apa sih itu LACP ?
LACP adalah kepanjangan dari Link Aggregation Control Protocol yang inti dari artinya adalah penggabungan beberapa port menjadi satu

Lalu apa itu Port-channel ?
Port-channel adalah Ethernet Channel of interfaces kalau load balancing ?

load balancing adalah membuat seimbang, dimana dalam kasus ini kinerja dari port-nya balance
Lebih detail tentang teori baca aja deh di sini http://en.wikipedia.org/wiki/Link_aggregation

Lalu keuntungannya apa ?
Apa aja boleh… ^,^

Dari pada teori mulu mendingan kita praktek langsung aja ya..
Sekarang kita mulai configurasinya, tahap awal kita configurasi interface-nya, mari kita aktifin interface

Port-channel-nya :

     SW-Backbone-2#configure terminal
     SW-Backbone-2(config)#interface port-channel 1
     SW-Backbone-2(config-if)#description ke-SW-Backbone-1
     SW-Backbone-2(config-if)#switchport trunk encapsulation dot1q
     SW-Backbone-2(config-if)#switchport mode trunk
     SW-Backbone-2(config-if)#switchport trunk allowed vlan 90,104,225
     SW-Backbone-2(config-if)#CTRL+Z

lanjut aktifin load balance redudance-nya
               
     SW-Backbone-2(config)#port-channel load-balance src-dst-ip

Ok..ini hasil dari configurasi di atas

     SW-Backbone-2#show running-config interface po1

     Building configuration…
      Current configuration : 134 bytes
     !
     interface Port-channel1
     description ke-SW-Backbone-1
     switchport trunk encapsulation dot1q
     switchport trunk allowed vlan 90,104,225
     switchport mode trunk
     end

     SW-Backbone-2#sh ru
     Building configuration…
     Current configuration : 6063 bytes
     !
     ! Last configuration change at 20:14:18 JKT Fri Dec 23 2011 by evan
     ! NVRAM config last updated at 19:32:28 JKT Fri Dec 23 2011 by evan
     !
     version 12.2
     no service pad
     service tcp-keepalives-in
     service timestamps debug datetime msec localtime show-timezone
     service timestamps log datetime msec localtime show-timezone
     service password-encryption
     service unsupported-transceiver
     !
     hostname SW-Backbone-2
     !
     port-channel load-balance src-dst-ip
     !

lanjutttt… Sekarang kita alokasikan 4 port untuk kita gabungkan :

     SW-Backbone-2#configure terminal
     SW-Backbone-2(config)#in gi0/25
     SW-Backbone-2(config)#description EthCnl-Po1
     SW-Backbone-2(config-if)#switchport trunk encapsulation dot1q
     SW-Backbone-2(config-if)#switchport mode trunk
     SW-Backbone-2(config-if)#channel-group 1 mode active
     SW-Backbone-2(config-if)#CTRL+Z
     SW-Backbone-2#configure terminal
     SW-Backbone-2(config)#in gi0/26
     SW-Backbone-2(config)#description EthCnl-Po1
     SW-Backbone-2(config-if)#switchport trunk encapsulation dot1q
     SW-Backbone-2(config-if)#switchport mode trunk
     SW-Backbone-2(config-if)#channel-group 1 mode active
     SW-Backbone-2(config-if)#CTRL+Z
     SW-Backbone-2#configure terminal
     SW-Backbone-2(config)#in gi0/27
     SW-Backbone-2(config)#description EthCnl-Po1
     SW-Backbone-2(config-if)#switchport trunk encapsulation dot1q
     SW-Backbone-2(config-if)#switchport mode trunk
     SW-Backbone-2(config-if)#channel-group 1 mode active
     SW-Backbone-2(config-if)#CTRL+Z
     SW-Backbone-2#configure terminal
     SW-Backbone-2(config)#in gi0/27
     SW-Backbone-2(config)#description EthCnl-Po1
     SW-Backbone-2(config-if)#switchport trunk encapsulation dot1q
     SW-Backbone-2(config-if)#switchport mode trunk
     SW-Backbone-2(config-if)#channel-group 1 mode active
     SW-Backbone-2(config-if)#CTRL+Z

Di sini saya tidak memasukkan Allow Vlan ( filter vlan ) pada port yg kita gabung, melainkan cukup pada interface Port-channel-nya saja

Setelah di connectin semua maka hasilnya seperti ini :

     SW-Backbone-2#show int status
     Port      Name               Status       Vlan       Duplex  Speed Type
     ———- CUT —————-
     Gi0/25    EthCnl-Po1         connected    trunk      a-full a-1000 1000BaseSX SFP
     Gi0/26    EthCnl-Po1         connected    trunk      a-full a-1000 1000BaseSX SFP
     Gi0/27    EthCnl-Po1         connected    trunk      a-full a-1000 1000BaseSX SFP
     Gi0/28    EthCnl-Po1         connected    trunk      a-full a-1000 1000BaseSX SFP
     Po1       ke-SW-Backbone-1   connected    trunk      a-full a-1000
    
     SW-Backbone-2#sh ru in gi0/25
     Building configuration…
     Current configuration : 151 bytes
     !
     interface GigabitEthernet0/25
     description EthCnl-Po1
     switchport trunk encapsulation dot1q
     switchport trunk allowed vlan 90,104,225
     switchport mode trunk
     channel-group 1 mode active
     end

     SW-Backbone-2#sh ru in gi0/26
     Building configuration…
     Current configuration : 151 bytes
     !
     interface GigabitEthernet0/26
     description EthCnl-Po1
     switchport trunk encapsulation dot1q
     switchport trunk allowed vlan 90,104,225
     switchport mode trunk
     channel-group 1 mode active
     end

     SW-Backbone-2#sh ru in gi0/27
     Building configuration…
     Current configuration : 151 bytes
     !
     interface GigabitEthernet0/27
     description EthCnl-Po1
     switchport trunk encapsulation dot1q
     switchport trunk allowed vlan 90,104,225
     switchport mode trunk
     channel-group 1 mode active
     end
  
     SW-Backbone-2#sh ru in gi0/28
     Building configuration…
     Current configuration : 151 bytes
     !
     interface GigabitEthernet0/28
     description EthCnl-Po1
     switchport trunk encapsulation dot1q
     switchport trunk allowed vlan 90,104,225
     switchport mode trunk
     channel-group 1 mode active
     end

Sekarang kita liat Speed-nya pada Interface Port-channel-nya sudah sebesar 4Gb ( MTU 1500 bytes, BW 4000000 Kbit, DLY 10 usec, ), dan di sini juga terlihat port berapa aja yg kita gabung ( Members in this channel: Gi0/25 Gi0/26 Gi0/27 Gi0/28 )

     SSW-Backbone-2#show interfaces Po1
     Port-channel1 is up, line protocol is up (connected)
     Hardware is EtherChannel, address is 0012.0161.1719 (bia 0012.0161.1719)
     Description: ke-SW-Backbone-1
     MTU 1500 bytes, BW 4000000 Kbit, DLY 10 usec,
     reliability 255/255, txload 101/255, rxload 26/255
     Encapsulation ARPA, loopback not set
     Keepalive set (10 sec)
     Full-duplex, 1000Mb/s, link type is auto, media type is unknown
     input flow-control is off, output flow-control is unsupported
     Members in this channel: Gi0/25 Gi0/26 Gi0/27 Gi0/28
     ARP type: ARPA, ARP Timeout 04:00:00
     Last input 00:00:00, output 00:00:00, output hang never
     Last clearing of “show interface” counters 1w3d
     Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
     Queueing strategy: fifo
     Output queue: 0/40 (size/max)
     5 minute input rate 422306000 bits/sec, 182790 packets/sec
     5 minute output rate 1598643000 bits/sec, 246533 packets/sec
     124709349643 packets input, 39994852902325 bytes, 0 no buffer
     Received 15963398 broadcasts (8718778 multicasts)
     0 runts, 0 giants, 0 throttles
     778973 input errors, 5589 CRC, 0 frame, 0 overrun, 0 ignored
     0 watchdog, 8718778 multicast, 0 pause input
     0 input packets with dribble condition detected
     165597102019 packets output, 132050835252807 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 babbles, 0 late collision, 0 deferred
     0 lost carrier, 0 no carrier, 0 PAUSE output
     0 output buffer failures, 0 output buffers swapped out

     SW-Backbone-2#show interfaces gi0/25
     GigabitEthernet0/25 is up, line protocol is up (connected)
     Hardware is Gigabit Ethernet, address is 0012.0161.1719 (bia 0012.0161.1719)
     Description: EthCnl-Po1
     MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec,
     reliability 255/255, txload 103/255, rxload 29/255
     Encapsulation ARPA, loopback not set
     Keepalive not set
     Full-duplex, 1000Mb/s, link type is auto, media type is 1000BaseSX SFP
     input flow-control is off, output flow-control is unsupported
     ARP type: ARPA, ARP Timeout 04:00:00
     Last input 00:00:00, output 00:00:22, output hang never
     Last clearing of “show interface” counters 1w3d
     Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
     Queueing strategy: fifo
     Output queue: 0/40 (size/max)
     5 minute input rate 116336000 bits/sec, 48788 packets/sec
     5 minute output rate 406893000 bits/sec, 63369 packets/sec
     33031920919 packets input, 11535121696360 bytes, 0 no buffer
     Received 8751836 broadcasts (8484111 multicasts)
     0 runts, 0 giants, 0 throttles
     779637 input errors, 5602 CRC, 0 frame, 0 overrun, 0 ignored
     0 watchdog, 8484111 multicast, 0 pause input
     0 input packets with dribble condition detected
     42145656820 packets output, 33357023523376 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 babbles, 0 late collision, 0 deferred
     0 lost carrier, 0 no carrier, 0 PAUSE output
     0 output buffer failures, 0 output buffers swapped out

Kelar deh… gimana ? ada pertanyaan ?

Wednesday, April 18, 2012

VLAN & LACP configuration on extreme switches


Using serial console connect the switch and assign ip address for the netmanagement port

Then do a telnet to switch ip
default user id is "Admin" and password is null (empty password)

Configuring Vlan (Vlan1)

1 >> create vlan vlan1                                          #vlan name is vlan1
2>> configure vlan1 tag 20                                  #vlan id is 20 here
3>>configure vlan1 add ports 20-25,27               #ports starting from 20 to 25 and 27 are added to
                                                                               vlan1

Adding vlan tag to the vlan ports

4>>configure vlan1 add ports 20-25,27 tagged    #ports starting from 20 to 25 and 27 are added to
                                                                               vlan1 and all these ports are having vlan id 20

5 >> show vlan
6>> show vlan1

Configuring Link aggregation on ports 22,23 ( which is already part of vlan1)

1>> enable sharing 22 grouping 22,23 lacp          #lacp/dynamic are different protocol options
2>> show sharing

Tuesday, March 20, 2012

Install and Configure Cacti monitoring tool

Cacti is a complete network graphing solution designed to harness the power of RRDTool’s data storage and graphing functionality. Cacti provides a fast poller, advanced graph templating, multiple data acquisition methods, and user management features out of the box. All of this is wrapped in an intuitive, easy to use interface that makes sense for LAN-sized installations up to complex networks with hundreds of devices.
Cacti Features
If you want to know more about cacti check here
Install cacti in Ubuntu 9.10 (Karmic) Server

Preparing Your system

First you need to make sure you have install Ubuntu 9.10 LAMP server and then you need to install the following packages

sudo apt-get install php5 php5-gd php5-mysql

Install accti using the following command

sudo apt-get install cacti-spine

This will start installing cacti and prompt for some questions.

Configuring libphp-adodb option select ok Enter to Continue.

Select your webserver in this example we are using apache2 select ok Enter to Continue

Configure database for cacti select yes Enter to Continue

Enter the root password for your mysql server select ok Enter to Continue

Enter the password (cacti) for the cacti database,select ok Enter to Continue

Re-enter your password

This will complete the cacti installation.

Configuring Cacti

Now you need to point your browser http://serverip/cacti press enter.You should see similar to the following screen Click Next to Continue.

You need to select the type of installation as New Installation and click next to Continue.

Now it will check all the required paths are correct or not you can see this in the following screen here click
on Finish

Now you should see the Cacti Login screen as follows

Here you need to enter username and password as admin/admin and click login

First time it will prompt you to change cacti admin user password for security reasons and click save

You should see the following screen like below once you logged.

In the above screen Under Configuration Click settings on your right hand side click on paths.Make sure in the “Spine Poller File Path”, you have
“/usr/sbin/spine”

Now you need to click on Poller Select “spine” in the “Poller Type”,click on Save.

Now you need to wait for 15 min to see your server graphs starts appearing in cacti graphs.Now your Cacti Monitoring Server is Ready and if you want to know how use cacti graphs and templates check here

If you want complete list of cacti templates check here


Monday, March 12, 2012

Address list routing OIXP APJII dan MCSIX


Dengan berkembangan dunia internet di Indonesia maka qta juga harus pandai menyiasatinya agar tidak kehabisan koneksi kita. Sudah terjadi di beberapa tahun belakangan ini adanya OIXP+APJII dan ada jga MCSIX, dengan berkembangnya waktu kita harus mengubah network yang telah ada.

Serta bagi temen-temen yang butuh address-list guna pembagian Bandwidth IIX, OIXP dan MCSIX,
silakan download Address-list MCSIX , OIXP dan APJII
and langsung aja upload ke dua file tersebut ( mcsix.rsc dan nice.rsc ) ke mikrotik
=> new terminal

/import mcsix.rsc

/import nice.rsc

Oh iya.. di dalam address-list tersebut untuk penamaan MCSIX adalah mcsix dan untuk OIXP+APJII adalah nice. Kalo mau generate sendiri silakan pake script ini :

:local bhomert [/ip route pr count-only];
:local bho 0;
:local mer 0;
:local mert;
:for bho from=0 to=$bhomert step=1 do={
:set mert [/ip route get $bho dst-address]
:if ($mer = 0) do={
/ip firewall address-list add list=nice address=$mert;}
}

nah kalo mau ngejalanin tinggal lewat telnet.. jangan lewat winbox :) suka ga dapet full, oh iya.. sebelum-nya naikin dulu bgp / ospf buat dapetin prefix dari router mcsix dan router iix ( oixp+apjii )

[evan@mix-prefix] /routing bgp peer> print  detail status
Flags: X – disabled, E – established
0 E name=”ke-MIX” === CUT ====
uptime=11h5m14s prefix-count=19813 updates-sent=9699

1 E name=”ke-IIX” === CUT ====
uptime=14h19m43s prefix-count=8584 updates-sent=41719
[evan@mix-prefix] /routing bgp peer>



Untuk Contohnya bisa di liat seperti ini :

Mangle :

[evan@sample-router] /ip firewall mangle> pr detail
Flags: X – disabled, I – invalid, D – dynamic
0   ;;; Mark-Internasional
chain=prerouting action=mark-connection new-connection-mark=Conn-INTL passthrough=yes dst-address-list=!nice in-interface=ether10

1   chain=prerouting action=mark-connection new-connection-mark=Conn-INTL passthrough=yes dst-address-list=!mcsix in-interface=ether10

2   chain=forward action=mark-connection new-connection-mark=Conn-INTL passthrough=yes dst-address-list=!nice in-interface=ether10

3   chain=forward action=mark-connection new-connection-mark=Conn-INTL passthrough=yes dst-address-list=!mcsix in-interface=ether10

4   chain=prerouting action=mark-connection new-connection-mark=Conn-INTL passthrough=yes dst-address-list=!nice in-interface=ether5

5   chain=prerouting action=mark-connection new-connection-mark=Conn-INTL passthrough=yes dst-address-list=!mcsix in-interface=ether5

6   chain=forward action=mark-connection new-connection-mark=Conn-INTL passthrough=yes dst-address-list=!nice in-interface=ether5

7   chain=forward action=mark-connection new-connection-mark=Conn-INTL passthrough=yes dst-address-list=!mcsix in-interface=ether5

8   ;;; Mark-IIX
chain=prerouting action=mark-connection new-connection-mark=Conn-IIX passthrough=yes dst-address-list=nice in-interface=ether10

9   chain=forward action=mark-connection new-connection-mark=Conn-IIX passthrough=yes dst-address-list=nice in-interface=ether10

10   chain=prerouting action=mark-connection new-connection-mark=Conn-IIX passthrough=yes dst-address-list=nice in-interface=ether5

11   chain=forward action=mark-connection new-connection-mark=Conn-IIX passthrough=yes dst-address-list=nice in-interface=ether5

12   ;;; Mark-MCSIX
chain=prerouting action=mark-connection new-connection-mark=Conn-MCSIX passthrough=yes dst-address-list=mcsix in-interface=ether10

13   chain=forward action=mark-connection new-connection-mark=Conn-MCSIX passthrough=yes dst-address-list=mcsix in-interface=ether10

14   chain=prerouting action=mark-connection new-connection-mark=Conn-MCSIX passthrough=yes dst-address-list=mcsix in-interface=ether5

15   chain=forward action=mark-connection new-connection-mark=Conn-MCSIX passthrough=yes dst-address-list=mcsix in-interface=ether5

16   ;;; Paket-INTL
chain=prerouting action=mark-packet new-packet-mark=INTL passthrough=yes connection-mark=Conn-INTL

17   chain=output action=mark-packet new-packet-mark=INTL passthrough=yes connection-mark=Conn-INTL

18   ;;; Paket-MCSIX
chain=prerouting action=mark-packet new-packet-mark=MCSIX passthrough=yes connection-mark=Conn-MCSIX

19   chain=output action=mark-packet new-packet-mark=MCSIX passthrough=yes connection-mark=Conn-MCSIX

20   ;;; Paket-IIX
chain=prerouting action=mark-packet new-packet-mark=IIX passthrough=yes connection-mark=Conn-IIX

21   chain=output action=mark-packet new-packet-mark=IIX passthrough=yes connection-mark=Conn-IIX

[evan@sample-router] /ip firewall mangle>

Simple Queue :

1    ;;;         Radar TV MCSIX
name=”client-66-MCSIX” target-addresses=xxx.xxx.xxx/32 interface=all
packet-marks=MCSIX direction=both priority=8
queue=default-small/default-small limit-at=0/0 max-limit=22M/22M
burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
total-queue=default-small

2    ;;;         Radar TV IIX
name=”client-66-IIX” target-addresses=xxx.xxx.xxx/32 interface=all
packet-marks=IIX direction=both priority=8
queue=default-small/default-small limit-at=0/0 max-limit=40M/40M
burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
total-queue=default-small

2    ;;;         Radar TV INTL
name=”client-66-INTL” target-addresses=xxx.xxx.xxx/32 interface=all
packet-marks=INTL direction=both priority=8
queue=default-small/default-small limit-at=0/0 max-limit=3M/3M
burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
total-queue=default-small



Semoga bisa membantu..