Scribd Logo
Upload

Welcome to Scribd!

  • 59 views

    IDNIC RPKI Hands On Lab v2: Environment

    Uploaded by

    Agung Wahyu arianto
    This document provides instructions for setting up a hands-on lab environment to demonstrate RPKI (Resource Public Key Infrastructure) using GNS3 and Bird routers. It includes steps to install GNS3 and set up the lab topology with a Bird router VM, configure the router interfaces and Bird daemon, and apply RPKI filtering configurations to the BGP protocol.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    IDNIC RPKI Hands On Lab v2: Environment

    Uploaded by

    Agung Wahyu arianto
    59 views4 pages
    This document provides instructions for setting up a hands-on lab environment to demonstrate RPKI (Resource Public Key Infrastructure) using GNS3 and Bird routers. It includes steps to install GNS3 and set up the lab topology with a Bird router VM, configure the router interfaces and Bird daemon, and apply RPKI filtering configurations to the BGP protocol.

    Original Title

    hands-on-lab-rpki

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    This document provides instructions for setting up a hands-on lab environment to demonstrate RPKI (Resource Public Key Infrastructure) using GNS3 and Bird routers. It includes steps to install GNS3 and set up the lab topology with a Bird router VM, configure the router interfaces and Bird daemon, and apply RPKI filtering configurations to the BGP protocol.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    59 views4 pages

    IDNIC RPKI Hands On Lab v2: Environment

    Uploaded by

    Agung Wahyu arianto
    This document provides instructions for setting up a hands-on lab environment to demonstrate RPKI (Resource Public Key Infrastructure) using GNS3 and Bird routers. It includes steps to install GNS3 and set up the lab topology with a Bird router VM, configure the router interfaces and Bird daemon, and apply RPKI filtering configurations to the BGP protocol.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    You are on page 1of 4

    IDNIC RPKI Hands On Lab v2

    Environment
    Install & Buka Software GNS3 v2.2.3

    Setting Remote Server



    

    Host : 119.82.225.28

    Port : 3080 TCP

    VM Ini sudah berisi

    • VM Bird

    • Upstream Provider

    Memulai Lab

    

    Buka GNS 3.

    Buat Project Baru

    Klik “Projects Library”

    Klik “IDNIC”

    

    Klik “Duplicate”

    Beri nama sesuai nama PT / Instansi Anda.



    

    Klik OK

    Topologi Lab RPKI


    


    Konfigurasi Router Bird


    Router bird sudah mendukung RPKI. Untuk menggunakan protokol RPKI, kita harus menginstall
    libssh terlebih dahulu sebelum melakukan compile router Bird.

    Setup Network

    Klik kanan pada icon Server RPKI Validator -> Edit Configuration lalu masukkan konfigurasi
    berikut

    

    auto eth0
    iface eth0 inet static
    address 192.168.30.[3 - 50]
    netmask 255.255.255.0
    gateway 192.168.30.2
    up echo nameserver 8.8.8.8 > /etc/resolv.conf

    Berikut ini adalah cara instalasi bird. Di dalam VM ini sudah terinstall bird. Jadi tidak perlu dijalankan
    lagi.

    

    Step 1
    Install library-library pendukung

    apk add make gcc g++ linux-headers readline-dev libssh flex bison ncurses-dev libssh-
    dev musl ncurses-libs

    Step 2

    Install Bird Routing Daemon

    wget ftp://bird.network.cz/pub/bird/bird-2.0.6.tar.gz
    tar zxf bird-2.0.6.tar.gz
    cd bird-2.0.6/
    ./configure --prefix=/usr --sysconfdir=/etc
    make -j2
    make install
    echo “” > /etc/bird.conf
    Konfigurasi Bird

    roa4 table ROA4;


    roa6 table ROA6;

    protocol rpki VALIDATOR {


    roa4 { table ROA4; };
    roa6 { table ROA6; };
    remote <IP RPKI Validator>;
    port 3323;
    refresh keep 30;
    retry keep 30;
    expire keep 3600;
    transport tcp;
    }

    filter peer_in_v4 {
    if (roa_check(ROA4, net, bgp_path.last) = ROA_INVALID) then
    {
    print "Ignore invalid ROA ", net, " for ASN ", bgp_path.last;
    reject;
    }
    accept;
    }

    filter accept_all {
    accept;
    }

    protocol bgp {
    debug all;
    local as <3 - 55>;
    neighbor 192.168.3.55;
    ipv4 {
    import keep filtered;
    import filter peer_in_v4;
    export filter accept_all;
    };
    }

    You might also like