IT Network & Support

IT Support dengan fokus jaringan dan sistem, mencakup routing & switching Cisco, VLAN, basic BGP, serta simulasi arsitektur data center (spine–leaf, BGP EVPN VXLAN) menggunakan EVE-NG ,GNS3, PNETLAB.

Download CV

FEATURED TOPOLOGIES

Network Designs & Labs

Koleksi topologi enterprise-grade yang saya rancang, implementasikan, dan uji coba di LAB Simulation.

EVPN VXLAN MULTISITE

menghubungkan antar site atau antar pod melalui dci/data center interconnect menggunakan bgw untuk isolasi.

EVPN MULTIPOD MULTISITE

MPLS TRAFIC ENGINEERING

MENGKONFIGURASI MPLS L3VPN DENGAN MPLS TE

BGP SOO MPLS L3VPN MPLS L3VPN MULTIHOME MPLS TRAFIC ENGINEERING

BGP EVPN VXLAN

MEMBUAT TOPOLOGY BGP EVPN VXLAN

EVPN MP-BGP NXOS OSPF VXLAN

View All Topologies & Labs →

EVPN VXLAN MULTISITE

# Dokumentasi Konfigurasi EVPN Multi-Site ## Overview Topologi Arsitektur menggunakan **EVPN VXLAN Multi-Site** dengan komponen: - 1x DCI (Data Center Interconnect) - 2x BGW (Border Gateway per POD) - 2x Spine (Route Reflector EVPN) - 2x Leaf (Access) --- ## 1. DCI (Data Center Interconnect) ### Fungsi - Core penghubung antar POD (DCI) - EBGP underlay ke masing-masing BGW - EVPN overlay peering ke BGW ### Key Configuration - ASN: `65001` - Loopback: `100.100.100.100` - Underlay: - e1/1 → BGW1 (10.0.0.0/31) - e1/2 → BGW2 (10.0.0.2/31) - Overlay EVPN: - Neighbor BGW1: `192.168.1.1` - Neighbor BGW2: `192.168.2.1` ### Catatan - Menggunakan `ebgp-multihop` untuk EVPN - Route-map `UNCHANGE-NH` untuk mempertahankan next-hop --- ## 2. BGW POD1 ### Fungsi - Border Gateway POD1 - Penghubung Fabric ↔ DCI - EVPN Multi-Site Gateway ### Key Configuration - ASN: `65002` - Loopback: - Lo0: `192.168.1.1` (BGP EVPN) - Lo1: `10.10.10.1` (NVE source) - Lo100: `172.16.1.1` (Multisite BGW) - Multisite: - `evpn multisite border-gateway 65002` - VNI: - VLAN 10 → VNI 10010 ### Interface Penting - e1/1 → DCI (DCI tracking) - e1/2 → Spine (fabric tracking + OSPF + PIM) ### Routing - OSPF sebagai underlay - BGP EVPN sebagai overlay - Redistribute direct dengan tag filtering --- ## 3. BGW POD2 ### Fungsi - Border Gateway POD2 - Mirroring BGW POD1 ### Key Configuration - ASN: `65003` - Loopback: - Lo0: `192.168.2.1` - Lo1: `10.20.20.1` - Lo100: `172.16.2.1` - Multisite: - `evpn multisite border-gateway 65003` ### Interface Penting - e1/1 → DCI - e1/2 → Spine --- ## 4. Spine POD1 ### Fungsi - Route Reflector EVPN ### Key Configuration - ASN: `65002` - Loopback: `192.168.1.2` ### EVPN - RR untuk: - BGW1 (`192.168.1.1`) - Leaf1 (`192.168.1.3`) ### Catatan - Tidak menjalankan NVE - Hanya control-plane EVPN --- ## 5. Spine POD2 ### Fungsi - Route Reflector EVPN POD2 ### Key Configuration - ASN: `65003` - Loopback: `192.168.2.2` ### EVPN - RR untuk: - BGW2 (`192.168.2.1`) - Leaf POD2 (`192.168.2.3`) --- ## 6. Leaf POD1 ### Fungsi - Access Leaf - Endpoint attachment ### Key Configuration - ASN: `65002` - Loopback: `192.168.1.3` - NVE: - Source: Loopback0 - VNI: 10010 ### Interface - e1/1 → Spine (underlay OSPF) - e1/2 → Host VLAN 10 --- ## 7. Leaf POD2 ### Fungsi - Access Leaf POD2 ### Key Configuration - ASN: `65003` - Loopback: `192.168.2.3` ### NVE - VNI: 10010 ### Interface - e1/1 → Spine - e1/2 → Host VLAN 10 --- ## Underlay Network ### Protocol - OSPF Area 0 ### Karakteristik - Point-to-point link - MTU 9216 (jumbo frame) - PIM sparse-mode untuk multicast (optional) --- ## Overlay Network (EVPN) ### Control Plane - BGP EVPN ### Fitur - Route Reflector di Spine - EVPN Multisite di BGW - Ingress replication (BGP) --- ## Multi-Site Behavior ### Komponen - BGW sebagai border antar DC - DCI sebagai transport ### Tracking - `dci-tracking` - `fabric-tracking` ### Tujuan - Failover otomatis antar site - Split-horizon traffic handling --- ## Kesimpulan Arsitektur ini menyediakan: - Inter-DC connectivity via DCI

DCI

hostname DCI

nv overlay evpn
feature bgp

route-map UNCHANGE-NH permit 10
  set ip next-hop unchanged

interface Ethernet1/1
  no switchport
  mtu 9216
  ip address 10.0.0.0/31
  no shutdown

interface Ethernet1/2
  no switchport
  mtu 9216
  ip address 10.0.0.2/31
  no shutdown

interface loopback0
  ip address 100.100.100.100/32
icam monitor scale

cli alias name wr copy run star

router bgp 65001
  router-id 100.100.100.100
  address-family ipv4 unicast
    network 100.100.100.100/32
    maximum-paths 64
    maximum-paths ibgp 64
  address-family l2vpn evpn
    retain route-target all
  template peer OVERLAY-PEERING
    update-source loopback0
    ebgp-multihop 4
    address-family l2vpn evpn
      send-community
      send-community extended
      route-map UNCHANGE-NH out
      rewrite-evpn-rt-asn
  neighbor 10.0.0.1
    remote-as 65002
    description ## to BGW1 with ipv4 ##
    update-source Ethernet1/1
    address-family ipv4 unicast
      next-hop-self
  neighbor 10.0.0.3
    remote-as 65003
    description ## to BGW2 with ipv4 ##
    update-source Ethernet1/2
    address-family ipv4 unicast
      next-hop-self
  neighbor 192.168.1.1
    inherit peer OVERLAY-PEERING
    remote-as 65002
    description ## to BGW1 with l2vpn evpn ##
  neighbor 192.168.2.1
    inherit peer OVERLAY-PEERING
    remote-as 65003
    description ## to BGW2 with l2vpn evpn ##

BGW-POD1

hostname BGW-POD1

nv overlay evpn
feature ospf
feature bgp
feature vn-segment-vlan-based
feature nv overlay
evpn multisite border-gateway 65002
  delay-restore time 300

vlan 1,10
vlan 10
  vn-segment 10010

route-map rmap-redist-direct permit 10
  match tag 123 
vrf context management


interface nve1
  no shutdown
  host-reachability protocol bgp
  source-interface loopback1
  multisite border-gateway interface loopback100
  member vni 10010
    multisite ingress-replication
    ingress-replication protocol bgp

interface Ethernet1/1
  no switchport
  mtu 9216
  ip address 10.0.0.1/31 tag 123
  no shutdown
  evpn multisite dci-tracking

interface Ethernet1/2
  no switchport
  mtu 9216
  ip address 10.0.0.4/31 tag 123
  ip ospf network point-to-point
  no ip ospf passive-interface
  ip router ospf UNDERLAY area 0.0.0.0
  no shutdown
  evpn multisite fabric-tracking

interface loopback0
  ip address 192.168.1.1/32 tag 123
  ip router ospf UNDERLAY area 0.0.0.0

interface loopback1
  ip address 10.10.10.1/32 tag 123
  ip router ospf UNDERLAY area 0.0.0.0

interface loopback100
  ip address 172.16.1.1/32 tag 123
  ip router ospf UNDERLAY area 0.0.0.0

cli alias name wr copy run star

router ospf UNDERLAY
  router-id 192.168.1.1
  passive-interface default
router bgp 65002
  router-id 192.168.1.1
  address-family ipv4 unicast
    redistribute direct route-map rmap-redist-direct
    maximum-paths 64
    maximum-paths ibgp 64
  address-family l2vpn evpn
  neighbor 10.0.0.0
    remote-as 65001
    update-source Ethernet1/1
    address-family ipv4 unicast
      next-hop-self
  neighbor 100.100.100.100
    remote-as 65001
    update-source loopback0
    ebgp-multihop 4
    peer-type fabric-external
    address-family l2vpn evpn
      send-community
      send-community extended
      rewrite-evpn-rt-asn
  neighbor 192.168.1.2
    remote-as 65002
    update-source loopback0
    address-family l2vpn evpn
      send-community
      send-community extended

BGW-POD2

hostname BGW-POD2

nv overlay evpn
feature ospf
feature bgp
feature vn-segment-vlan-based
feature nv overlay
evpn multisite border-gateway 65003
  delay-restore time 300

vlan 1,10
vlan 10
  vn-segment 10010

route-map rmap-redist-direct permit 10
  match tag 123 

interface nve1
  no shutdown
  host-reachability protocol bgp
  source-interface loopback1
  multisite border-gateway interface loopback100
  member vni 10010
    multisite ingress-replication
    ingress-replication protocol bgp

interface Ethernet1/1
  no switchport
  mtu 9216
  ip address 10.0.0.3/31 tag 123
  no shutdown
  evpn multisite dci-tracking

interface Ethernet1/2
  no switchport
  mtu 9216
  ip address 10.0.0.6/31 tag 123
  ip ospf network point-to-point
  no ip ospf passive-interface
  ip router ospf UNDERLAY area 0.0.0.0
  no shutdown
  evpn multisite fabric-tracking

interface loopback0
  ip address 192.168.2.1/32 tag 123
  ip router ospf UNDERLAY area 0.0.0.0

interface loopback1
  ip address 10.20.20.1/32 tag 123
  ip router ospf UNDERLAY area 0.0.0.0

interface loopback100
  ip address 172.16.2.1/32 tag 123
  ip router ospf UNDERLAY area 0.0.0.0

cli alias name wr copy run star

router ospf UNDERLAY
  router-id 192.168.2.1
  passive-interface default
router bgp 65003
  router-id 192.168.2.1
  address-family ipv4 unicast
    redistribute direct route-map rmap-redist-direct
    maximum-paths 64
    maximum-paths ibgp 64
  neighbor 10.0.0.2
    remote-as 65001
    update-source Ethernet1/1
    address-family ipv4 unicast
      next-hop-self
  neighbor 100.100.100.100
    remote-as 65001
    update-source loopback0
    ebgp-multihop 2
    peer-type fabric-external
    address-family l2vpn evpn
      send-community
      send-community extended
      rewrite-evpn-rt-asn
  neighbor 192.168.2.2
    remote-as 65003
    update-source loopback0
    address-family l2vpn evpn
      send-community
      send-community extended

SPINE-POD1

hostname SPINE-POD1

nv overlay evpn
feature ospf
feature bgp
feature nv overlay

vlan 1

interface Ethernet1/1
  no switchport
  mtu 9216
  ip address 10.0.0.5/31
  ip ospf network point-to-point
  no ip ospf passive-interface
  ip router ospf UNDERLAY area 0.0.0.0
  no shutdown

interface Ethernet1/2
  no switchport
  mtu 9216
  ip address 10.0.0.8/31
  ip ospf network point-to-point
  no ip ospf passive-interface
  ip router ospf UNDERLAY area 0.0.0.0
  no shutdown

interface loopback0
  ip address 192.168.1.2/32
  ip router ospf UNDERLAY area 0.0.0.0

cli alias name wr copy run star

router ospf UNDERLAY
  router-id 192.168.1.2
  passive-interface default
router bgp 65002
  router-id 192.168.1.2
  neighbor 192.168.1.1
    remote-as 65002
    update-source loopback0
    address-family l2vpn evpn
      send-community
      send-community extended
      route-reflector-client
  neighbor 192.168.1.3
    remote-as 65002
    update-source loopback0
    address-family l2vpn evpn
      send-community
      send-community extended
      route-reflector-client

SPINE-POD2

hostname SPINE-POD2

nv overlay evpn
feature ospf
feature bgp
feature nv overlay

vlan 1

interface Ethernet1/1
  no switchport
  mtu 9216
  ip address 10.0.0.7/31
  ip ospf network point-to-point
  no ip ospf passive-interface
  ip router ospf UNDERLAY area 0.0.0.0
  no shutdown

interface Ethernet1/2
  no switchport
  mtu 9216
  ip address 10.0.0.10/31
  ip ospf network point-to-point
  no ip ospf passive-interface
  ip router ospf UNDERLAY area 0.0.0.0
  no shutdown


interface loopback0
  ip address 192.168.2.2/32
  ip router ospf UNDERLAY area 0.0.0.0

cli alias name wr copy run star

router ospf UNDERLAY
  router-id 192.168.2.2
  passive-interface default
router bgp 65003
  router-id 192.168.2.2
  neighbor 192.168.2.1
    remote-as 65003
    update-source loopback0
    address-family l2vpn evpn
      send-community
      send-community extended
      route-reflector-client
  neighbor 192.168.2.3
    remote-as 65003
    update-source loopback0
    address-family l2vpn evpn
      send-community
      send-community extended
      route-reflector-client

LEAF-POD1

hostname LEAF1-POD1

nv overlay evpn
feature ospf
feature bgp
feature interface-vlan
feature vn-segment-vlan-based
feature nv overlay

vlan 1,10
vlan 10
  vn-segment 10010

interface nve1
  no shutdown
  host-reachability protocol bgp
  source-interface loopback0
  member vni 10010
    ingress-replication protocol bgp

interface Ethernet1/1
  no switchport
  mtu 9216
  ip address 10.0.0.9/31
  ip ospf network point-to-point
  no ip ospf passive-interface
  ip router ospf UNDERLAY area 0.0.0.0
  no shutdown

interface Ethernet1/2
  switchport access vlan 10

interface loopback0
  ip address 192.168.1.3/32
  ip router ospf UNDERLAY area 0.0.0.0


cli alias name wr copy run s

router ospf UNDERLAY
  router-id 192.168.1.3
  passive-interface default
router bgp 65002
  router-id 192.168.1.3
  neighbor 192.168.1.2
    remote-as 65002
    update-source loopback0
    address-family l2vpn evpn
      send-community
      send-community extended

LEAF-POD2

hostname LEAF-POD2

nv overlay evpn
feature ospf
feature bgp
feature interface-vlan
feature vn-segment-vlan-based
feature nv overlay

vlan 1,10
vlan 10
  vn-segment 10010

interface nve1
  no shutdown
  host-reachability protocol bgp
  source-interface loopback0
  member vni 10010
    ingress-replication protocol bgp

interface Ethernet1/1
  no switchport
  mtu 9216
  ip address 10.0.0.11/31
  ip ospf network point-to-point
  no ip ospf passive-interface
  ip router ospf UNDERLAY area 0.0.0.0
  no shutdown

interface Ethernet1/2
  switchport access vlan 10

interface loopback0
  ip address 192.168.2.3/32
  ip router ospf UNDERLAY area 0.0.0.0

cli alias name wr copy run s

router ospf UNDERLAY
  router-id 192.168.2.3
  passive-interface default
router bgp 65003
  router-id 192.168.2.3
  neighbor 192.168.2.2
    remote-as 65003
    update-source loopback0
    address-family l2vpn evpn
      send-community
      send-community extended

Belum ada skema IP yang didokumentasikan.

📦

VXLAN_EVPN_MULTISITE.zip

Topology file · 9.2 KB

⬇ Download

MPLS TRAFIC ENGINEERING

# MPLS Service Provider Backbone ## Overview Topologi ini merepresentasikan arsitektur **Service Provider (SP)** yang menyediakan layanan **MPLS Layer 3 VPN (L3VPN)** dengan dukungan **MPLS Traffic Engineering (RSVP-TE)** untuk optimasi jalur trafik di dalam core network. Desain jaringan dibangun menggunakan model berlapis (layered architecture) yang terdiri dari: - **Customer Edge (CE)** – Router milik pelanggan - **Provider Edge (PE)** – Router tepi milik provider - **Core (P Router)** – Backbone MPLS provider - **Route Reflector (RR)** – Kontrol distribusi route MP-BGP --- ## Tujuan Desain Arsitektur ini dirancang untuk: - Menyediakan konektivitas antar site customer secara private (VPN) - Mendukung multi-tenant dengan isolasi penuh antar customer - Memungkinkan overlapping IP address antar pelanggan - Mengoptimalkan jalur trafik menggunakan MPLS Traffic Engineering - Meningkatkan scalability control-plane dengan BGP Route Reflector - Menyediakan redundansi dan high availability di core network --- ## Teknologi yang Digunakan ### 1. MPLS L3VPN - Menggunakan **MP-BGP (vpnv4)** untuk distribusi route VPN - Implementasi **VRF (Virtual Routing and Forwarding)** pada router PE - Label stacking (Transport Label + VPN Label) ### 2. MPLS Traffic Engineering (RSVP-TE) - Explicit path control - Bandwidth reservation - Jalur tidak selalu mengikuti shortest path IGP - Mendukung load balancing dan optimasi utilisasi link ### 3. BGP Route Reflector - Mengurangi kebutuhan full-mesh iBGP antar PE - Meningkatkan efisiensi dan skalabilitas jaringan --- ## Karakteristik Arsitektur - Multi-customer (AS berbeda) - Multi-site per customer - Redundant MPLS core - Pemisahan control-plane dan data-plane - Backbone berbasis MPLS --- ## Ringkasan Topologi ini menggambarkan backbone Service Provider modern yang menggabungkan: - **Isolasi layanan (L3VPN)** - **Optimasi jalur trafik (Traffic Engineering)** - **Skalabilitas kontrol routing (Route Reflector)** Desain ini umum digunakan pada jaringan ISP, telco, dan enterprise skala besar yang membutuhkan segmentasi layanan dan kontrol trafik tingkat lanjut.

PE-1

!! IOS XR Configuration 6.0.1
!! Last configuration change at Fri Feb 20 14:39:05 2026 by admin
!
hostname PE-1
vrf CUST-1
 address-family ipv4 unicast
  import route-policy PASS_ALL_ROUTE
  import route-target
   65000:1
  !
  export route-target
   65000:1
  !
 !
!
vrf CUST-2
 address-family ipv4 unicast
  import route-target
   65000:2
  !
  export route-target
   65000:2
  !
 !
!
key chain LSP_ISIS
 key 1
  accept-lifetime 00:00:00 january 01 2025 infinite
  key-string password 073700797A21
  send-lifetime 00:00:00 january 01 2025 infinite
  cryptographic-algorithm HMAC-MD5
 !
!
key chain ISIS_HELLO
 key 1
  accept-lifetime 00:00:00 january 01 2025 infinite
  key-string password 142F333E382C
  send-lifetime 00:00:00 january 01 2025 infinite
  cryptographic-algorithm HMAC-MD5
 !
!
interface Loopback0
 no shutdown
 ipv4 address 10.1.1.1 255.255.255.255
!
interface tunnel-te1
 no shutdown
 bandwidth 200000
 ipv4 unnumbered Loopback0
 signalled-bandwidth 200000
 autoroute announce
 !
 destination 10.1.1.8
 path-option 1 dynamic
!
interface tunnel-te2
 no shutdown
 ipv4 unnumbered Loopback0
 signalled-bandwidth 100000
 autoroute announce
 !
 destination 10.1.1.7
 fast-reroute
 path-option 1 dynamic
!
interface MgmtEth0/0/CPU0/0
 no shutdown
 shutdown
!
interface GigabitEthernet0/0/0/0
 no shutdown
 ipv4 address 10.0.0.0 255.255.255.254
!
interface GigabitEthernet0/0/0/1
 no shutdown
 ipv4 address 10.0.0.2 255.255.255.254
!
interface GigabitEthernet0/0/0/2
 no shutdown
 vrf CUST-1
 ipv4 address 192.168.0.1 255.255.255.0
!
interface GigabitEthernet0/0/0/3
 no shutdown
 vrf CUST-2
 ipv4 address 172.16.0.1 255.255.255.0
!
interface GigabitEthernet0/0/0/4
 no shutdown
 shutdown
!
interface GigabitEthernet0/0/0/5
 no shutdown
 shutdown
!
route-policy PASS_ALL_ROUTE
  pass
end-policy
!
router isis 1
 is-type level-2-only
 net 49.0000.0100.0100.1001.00
 lsp-password keychain LSP_ISIS level 2
 address-family ipv4 unicast
  metric-style wide
  mpls traffic-eng level-2-only
  mpls traffic-eng router-id Loopback0
 !
 interface Loopback0
  passive
  circuit-type level-2-only
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/0
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/1
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
!
router bgp 65000
 bgp router-id 10.1.1.1
 address-family vpnv4 unicast
 !
 neighbor 10.1.1.9
  remote-as 65000
  password encrypted 063E2E1478662B3E35
  update-source Loopback0
  address-family vpnv4 unicast
   route-policy PASS_ALL_ROUTE in
   route-policy PASS_ALL_ROUTE out
  !
 !
 vrf CUST-1
  rd 10.1.1.1:1
  address-family ipv4 unicast
   maximum-paths ibgp 2
   redistribute connected route-policy PASS_ALL_ROUTE
  !
  neighbor 192.168.0.2
   remote-as 65001
   address-family ipv4 unicast
    route-policy PASS_ALL_ROUTE in
    route-policy PASS_ALL_ROUTE out
    as-override
   !
  !
 !
 vrf CUST-2
  rd 10.1.1.1:2
  address-family ipv4 unicast
   redistribute connected route-policy PASS_ALL_ROUTE
  !
  neighbor 172.16.0.2
   remote-as 65002
   address-family ipv4 unicast
    route-policy PASS_ALL_ROUTE in
    route-policy PASS_ALL_ROUTE out
    as-override
    site-of-origin 65000:2
   !
  !
 !
!
rsvp
 interface GigabitEthernet0/0/0/0
  bandwidth percentage 80
 !
 interface GigabitEthernet0/0/0/1
  bandwidth percentage 80
 !
!
mpls traffic-eng
 interface GigabitEthernet0/0/0/0
 !
 interface GigabitEthernet0/0/0/1
 !
!
mpls ldp
 neighbor
  password encrypted 073700797A2159
 !
 address-family ipv4
 !
 interface GigabitEthernet0/0/0/0
  address-family ipv4
  !
 !
 interface GigabitEthernet0/0/0/1
  address-family ipv4
  !
 !
!
!
end

PE-2

!! IOS XR Configuration 6.0.1
!! Last configuration change at Wed Feb 18 17:26:47 2026 by admin
!
hostname PE-2
vrf CUST-2
 address-family ipv4 unicast
  import route-target
   65000:2
  !
  export route-target
   65000:2
  !
 !
!
key chain LSP_ISIS
 key 1
  accept-lifetime 00:00:00 january 01 2025 infinite
  key-string password 073700797A21
  send-lifetime 00:00:00 january 01 2025 infinite
  cryptographic-algorithm HMAC-MD5
 !
!
key chain ISIS_HELLO
 key 1
  accept-lifetime 00:00:00 january 01 2025 infinite
  key-string password 142F333E382C
  send-lifetime 00:00:00 january 01 2025 infinite
  cryptographic-algorithm HMAC-MD5
 !
!
interface Loopback0
 no shutdown
 ipv4 address 10.1.1.2 255.255.255.255
!
interface MgmtEth0/0/CPU0/0
 no shutdown
 shutdown
!
interface GigabitEthernet0/0/0/0
 no shutdown
 ipv4 address 10.0.0.6 255.255.255.254
!
interface GigabitEthernet0/0/0/1
 no shutdown
 ipv4 address 10.0.0.4 255.255.255.254
!
interface GigabitEthernet0/0/0/2
 no shutdown
 vrf CUST-2
 ipv4 address 172.16.1.1 255.255.255.0
!
interface GigabitEthernet0/0/0/3
 no shutdown
 shutdown
!
interface GigabitEthernet0/0/0/4
 no shutdown
 shutdown
!
interface GigabitEthernet0/0/0/5
 no shutdown
 shutdown
!
route-policy PASS_ALL_ROUTE
  pass
end-policy
!
router isis 1
 is-type level-2-only
 net 49.0000.0100.0100.1002.00
 lsp-password keychain LSP_ISIS level 2
 address-family ipv4 unicast
  metric-style wide
  mpls traffic-eng level-2-only
  mpls traffic-eng router-id Loopback0
 !
 interface Loopback0
  passive
  circuit-type level-2-only
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/0
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/1
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
!
router bgp 65000
 bgp router-id 10.1.1.2
 address-family vpnv4 unicast
 !
 neighbor 10.1.1.9
  remote-as 65000
  password encrypted 063E2E1478662B3E35
  update-source Loopback0
  address-family vpnv4 unicast
   route-policy PASS_ALL_ROUTE in
   route-policy PASS_ALL_ROUTE out
  !
 !
 vrf CUST-2
  rd 10.1.1.2:2
  address-family ipv4 unicast
   redistribute connected
  !
  neighbor 172.16.1.2
   remote-as 65002
   address-family ipv4 unicast
    route-policy PASS_ALL_ROUTE in
    route-policy PASS_ALL_ROUTE out
    as-override
    site-of-origin 65000:2
   !
  !
 !
!
rsvp
 interface GigabitEthernet0/0/0/0
  bandwidth percentage 80
 !
 interface GigabitEthernet0/0/0/1
  bandwidth percentage 80
 !
!
mpls traffic-eng
 interface GigabitEthernet0/0/0/0
 !
 interface GigabitEthernet0/0/0/1
 !
!
mpls ldp
 neighbor
  password encrypted 073700797A2159
 !
 address-family ipv4
 !
 interface GigabitEthernet0/0/0/0
  address-family ipv4
  !
 !
 interface GigabitEthernet0/0/0/1
  address-family ipv4
  !
 !
!
!
end

PE-3

!! IOS XR Configuration 6.0.1
!! Last configuration change at Fri Feb 20 14:52:18 2026 by admin
!
hostname PE-3
vrf CUST-1
 address-family ipv4 unicast
  import route-policy PASS_ALL_ROUTE
  import route-target
   65000:1
  !
  export route-target
   65000:1
  !
 !
!
vrf CUST-2
 address-family ipv4 unicast
  import route-target
   65000:2
  !
  export route-target
   65000:2
  !
 !
!
key chain LSP_ISIS
 key 1
  accept-lifetime 00:00:00 january 01 2025 infinite
  key-string password 073700797A21
  send-lifetime 00:00:00 january 01 2025 infinite
  cryptographic-algorithm HMAC-MD5
 !
!
key chain ISIS_HELLO
 key 1
  accept-lifetime 00:00:00 january 01 2025 infinite
  key-string password 142F333E382C
  send-lifetime 00:00:00 january 01 2025 infinite
  cryptographic-algorithm HMAC-MD5
 !
!
interface Loopback0
 no shutdown
 ipv4 address 10.1.1.7 255.255.255.255
!
interface tunnel-te1
 no shutdown
 ipv4 unnumbered Loopback0
 signalled-bandwidth 10000
 autoroute announce
 !
 destination 10.1.1.1
 fast-reroute
 path-option 1 dynamic
!
interface MgmtEth0/0/CPU0/0
 no shutdown
 shutdown
!
interface GigabitEthernet0/0/0/0
 no shutdown
 ipv4 address 10.0.0.21 255.255.255.254
!
interface GigabitEthernet0/0/0/1
 no shutdown
 ipv4 address 10.0.0.25 255.255.255.254
!
interface GigabitEthernet0/0/0/2
 no shutdown
 vrf CUST-2
 ipv4 address 172.16.2.1 255.255.255.0
!
interface GigabitEthernet0/0/0/3
 no shutdown
 vrf CUST-1
 ipv4 address 192.168.2.1 255.255.255.0
!
interface GigabitEthernet0/0/0/4
 no shutdown
 shutdown
!
interface GigabitEthernet0/0/0/5
 no shutdown
 shutdown
!
route-policy CUST-1
  pass
end-policy
!
route-policy PASS_ALL_ROUTE
  pass
end-policy
!
router isis 1
 is-type level-2-only
 net 49.0000.0100.0100.1007.00
 lsp-password keychain LSP_ISIS level 2
 address-family ipv4 unicast
  metric-style wide
  mpls traffic-eng level-2-only
  mpls traffic-eng router-id Loopback0
 !
 interface Loopback0
  passive
  circuit-type level-2-only
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/0
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/1
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
!
router bgp 65000
 bgp router-id 10.1.1.7
 address-family vpnv4 unicast
 !
 neighbor 10.1.1.9
  remote-as 65000
  password encrypted 063E2E1478662B3E35
  update-source Loopback0
  address-family vpnv4 unicast
   route-policy PASS_ALL_ROUTE in
   route-policy PASS_ALL_ROUTE out
  !
 !
 vrf CUST-1
  rd 10.1.1.7:1
  address-family ipv4 unicast
   redistribute connected route-policy PASS_ALL_ROUTE
  !
  neighbor 192.168.2.2
   remote-as 65001
   address-family ipv4 unicast
    route-policy CUST-1 in
    route-policy CUST-1 out
    as-override
    site-of-origin 65000:1
   !
  !
 !
 vrf CUST-2
  rd 10.1.1.7:2
  address-family ipv4 unicast
   maximum-paths ibgp 2
   redistribute connected
  !
  neighbor 172.16.2.2
   remote-as 65002
   address-family ipv4 unicast
    route-policy PASS_ALL_ROUTE in
    route-policy PASS_ALL_ROUTE out
    as-override
   !
  !
 !
!
rsvp
 interface GigabitEthernet0/0/0/0
  bandwidth percentage 80
 !
 interface GigabitEthernet0/0/0/1
  bandwidth percentage 80
 !
!
mpls traffic-eng
 interface GigabitEthernet0/0/0/0
 !
 interface GigabitEthernet0/0/0/1
 !
!
mpls ldp
 neighbor
  password encrypted 073700797A2159
 !
 address-family ipv4
 !
 interface GigabitEthernet0/0/0/0
  address-family ipv4
  !
 !
 interface GigabitEthernet0/0/0/1
  address-family ipv4
  !
 !
!
!
end

PE-4

!! IOS XR Configuration 6.0.1
!! Last configuration change at Fri Feb 20 15:15:34 2026 by admin
!
hostname PE-4
vrf CUST-1
 address-family ipv4 unicast
  import route-policy PASS_ALL_ROUTE
  import route-target
   65000:1
  !
  export route-target
   65000:1
  !
 !
!
bfd
 echo disable
!
key chain LSP_ISIS
 key 1
  accept-lifetime 00:00:00 january 01 2025 infinite
  key-string password 073700797A21
  send-lifetime 00:00:00 january 01 2025 infinite
  cryptographic-algorithm HMAC-MD5
 !
!
key chain ISIS_HELLO
 key 1
  accept-lifetime 00:00:00 january 01 2025 infinite
  key-string password 142F333E382C
  send-lifetime 00:00:00 january 01 2025 infinite
  cryptographic-algorithm HMAC-MD5
 !
!
interface Loopback0
 no shutdown
 ipv4 address 10.1.1.8 255.255.255.255
!
interface tunnel-te1
 no shutdown
 ipv4 unnumbered Loopback0
 signalled-bandwidth 10000
 autoroute announce
 !
 destination 10.1.1.1
 fast-reroute
 path-option 1 dynamic
!
interface MgmtEth0/0/CPU0/0
 no shutdown
 shutdown
!
interface GigabitEthernet0/0/0/0
 no shutdown
 ipv4 address 10.0.0.27 255.255.255.254
!
interface GigabitEthernet0/0/0/1
 no shutdown
 ipv4 address 10.0.0.23 255.255.255.254
!
interface GigabitEthernet0/0/0/2
 no shutdown
 vrf CUST-1
 ipv4 address 192.168.1.1 255.255.255.0
!
interface GigabitEthernet0/0/0/3
 no shutdown
 shutdown
!
interface GigabitEthernet0/0/0/4
 no shutdown
 shutdown
!
interface GigabitEthernet0/0/0/5
 no shutdown
 shutdown
!
route-policy CUST-1
  pass
end-policy
!
route-policy PASS_ALL_ROUTE
  pass
end-policy
!
router isis 1
 is-type level-2-only
 net 49.0000.0100.0100.1008.00
 lsp-password keychain LSP_ISIS level 2
 address-family ipv4 unicast
  metric-style wide
  mpls traffic-eng level-2-only
  mpls traffic-eng router-id Loopback0
 !
 interface Loopback0
  passive
  circuit-type level-2-only
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/0
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/1
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
!
router bgp 65000
 bgp router-id 10.1.1.8
 address-family vpnv4 unicast
 !
 neighbor 10.1.1.9
  remote-as 65000
  password encrypted 063E2E1478662B3E35
  update-source Loopback0
  address-family vpnv4 unicast
   route-policy PASS_ALL_ROUTE in
   route-policy PASS_ALL_ROUTE out
  !
 !
 vrf CUST-1
  rd 10.1.1.8:1
  address-family ipv4 unicast
   redistribute connected route-policy PASS_ALL_ROUTE
  !
  neighbor 192.168.1.2
   remote-as 65001
   bfd fast-detect
   address-family ipv4 unicast
    route-policy CUST-1 in
    route-policy CUST-1 out
    as-override
    site-of-origin 65000:1
   !
  !
 !
!
rsvp
 interface GigabitEthernet0/0/0/0
  bandwidth percentage 80
 !
 interface GigabitEthernet0/0/0/1
  bandwidth percentage 80
 !
!
mpls traffic-eng
 interface GigabitEthernet0/0/0/0
 !
 interface GigabitEthernet0/0/0/1
 !
!
mpls ldp
 neighbor
  password encrypted 073700797A2159
 !
 address-family ipv4
 !
 interface GigabitEthernet0/0/0/0
  address-family ipv4
  !
 !
 interface GigabitEthernet0/0/0/1
  address-family ipv4
  !
 !
!
!
end

RR

!! IOS XR Configuration 6.0.1
!! Last configuration change at Wed Feb 11 09:34:49 2026 by admin
!
hostname RR
key chain LSP_ISIS
 key 1
  accept-lifetime 00:00:00 january 01 2025 infinite
  key-string password 073700797A21
  send-lifetime 00:00:00 january 01 2025 infinite
  cryptographic-algorithm HMAC-MD5
 !
!
key chain ISIS_HELLO
 key 1
  accept-lifetime 00:00:00 january 01 2025 infinite
  key-string password 142F333E382C
  send-lifetime 00:00:00 january 01 2025 infinite
  cryptographic-algorithm HMAC-MD5
 !
!
interface Loopback0
 no shutdown
 ipv4 address 10.1.1.9 255.255.255.255
!
interface MgmtEth0/0/CPU0/0
 no shutdown
 shutdown
!
interface GigabitEthernet0/0/0/0
 no shutdown
 ipv4 address 10.0.0.29 255.255.255.254
!
interface GigabitEthernet0/0/0/1
 no shutdown
 ipv4 address 10.0.0.35 255.255.255.254
!
interface GigabitEthernet0/0/0/2
 no shutdown
 ipv4 address 10.0.0.31 255.255.255.254
!
interface GigabitEthernet0/0/0/3
 no shutdown
 ipv4 address 10.0.0.33 255.255.255.254
!
interface GigabitEthernet0/0/0/4
 no shutdown
 shutdown
!
route-policy PASS_ALL_ROUTE
  pass
end-policy
!
router isis 1
 is-type level-2-only
 net 49.0000.0100.0100.1009.00
 lsp-password keychain LSP_ISIS level 2
 address-family ipv4 unicast
  metric-style wide
 !
 interface Loopback0
  passive
  circuit-type level-2-only
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/0
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/1
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/2
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/3
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
!
router bgp 65000
 graceful-maintenance activate
 bgp router-id 10.1.1.9
 address-family vpnv4 unicast
 !
 neighbor-group ALL_PE
  remote-as 65000
  password encrypted 063E2E1478662B3E35
  update-source Loopback0
  address-family vpnv4 unicast
   route-policy PASS_ALL_ROUTE in
   route-reflector-client
   route-policy PASS_ALL_ROUTE out
  !
 !
 neighbor 10.1.1.1
  use neighbor-group ALL_PE
 !
 neighbor 10.1.1.2
  use neighbor-group ALL_PE
 !
 neighbor 10.1.1.7
  use neighbor-group ALL_PE
 !
 neighbor 10.1.1.8
  use neighbor-group ALL_PE
 !
!
mpls ldp
 neighbor
  password encrypted 073700797A2159
 !
 address-family ipv4
 !
 interface GigabitEthernet0/0/0/0
  address-family ipv4
  !
 !
 interface GigabitEthernet0/0/0/1
  address-family ipv4
  !
 !
 interface GigabitEthernet0/0/0/2
  address-family ipv4
  !
 !
 interface GigabitEthernet0/0/0/3
  address-family ipv4
  !
 !
!
!
end

P1

!! IOS XR Configuration 6.0.1
!! Last configuration change at Sun Feb 15 16:16:23 2026 by admin
!
hostname P1
key chain LSP_ISIS
 key 1
  accept-lifetime 00:00:00 january 01 2025 infinite
  key-string password 073700797A21
  send-lifetime 00:00:00 january 01 2025 infinite
  cryptographic-algorithm HMAC-MD5
 !
!
key chain ISIS_HELLO
 key 1
  accept-lifetime 00:00:00 january 01 2025 infinite
  key-string password 142F333E382C
  send-lifetime 00:00:00 january 01 2025 infinite
  cryptographic-algorithm HMAC-MD5
 !
!
interface Loopback0
 no shutdown
 ipv4 address 10.1.1.3 255.255.255.255
!
interface MgmtEth0/0/CPU0/0
 no shutdown
 shutdown
!
interface GigabitEthernet0/0/0/0
 no shutdown
 ipv4 address 10.0.0.1 255.255.255.254
!
interface GigabitEthernet0/0/0/1
 no shutdown
 ipv4 address 10.0.0.8 255.255.255.254
!
interface GigabitEthernet0/0/0/2
 no shutdown
 ipv4 address 10.0.0.5 255.255.255.254
!
interface GigabitEthernet0/0/0/3
 no shutdown
 ipv4 address 10.0.0.10 255.255.255.254
!
interface GigabitEthernet0/0/0/4
 no shutdown
 ipv4 address 10.0.0.12 255.255.255.254
!
interface GigabitEthernet0/0/0/5
 no shutdown
 ipv4 address 10.0.0.30 255.255.255.254
!
router isis 1
 is-type level-2-only
 net 49.0000.0100.0100.1003.00
 lsp-password keychain LSP_ISIS level 2
 address-family ipv4 unicast
  metric-style wide
  mpls traffic-eng level-2-only
  mpls traffic-eng router-id Loopback0
 !
 interface Loopback0
  passive
  circuit-type level-2-only
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/0
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/1
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/2
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/3
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/4
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/5
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
!
rsvp
 interface GigabitEthernet0/0/0/0
  bandwidth percentage 80
 !
 interface GigabitEthernet0/0/0/1
  bandwidth percentage 80
 !
 interface GigabitEthernet0/0/0/2
  bandwidth percentage 80
 !
 interface GigabitEthernet0/0/0/3
  bandwidth percentage 80
 !
 interface GigabitEthernet0/0/0/4
  bandwidth percentage 80
 !
!
mpls traffic-eng
 interface GigabitEthernet0/0/0/0
 !
 interface GigabitEthernet0/0/0/1
 !
 interface GigabitEthernet0/0/0/2
 !
 interface GigabitEthernet0/0/0/3
 !
 interface GigabitEthernet0/0/0/4
 !
!
mpls ldp
 neighbor
  password encrypted 073700797A2159
 !
 address-family ipv4
 !
 interface GigabitEthernet0/0/0/0
  address-family ipv4
  !
 !
 interface GigabitEthernet0/0/0/1
  address-family ipv4
  !
 !
 interface GigabitEthernet0/0/0/2
  address-family ipv4
  !
 !
 interface GigabitEthernet0/0/0/3
  address-family ipv4
  !
 !
 interface GigabitEthernet0/0/0/4
  address-family ipv4
  !
 !
 interface GigabitEthernet0/0/0/5
  address-family ipv4
  !
 !
!
!
end

P2

!! IOS XR Configuration 6.0.1
!! Last configuration change at Sun Feb 15 16:00:04 2026 by admin
!
hostname P2
key chain LSP_ISIS
 key 1
  accept-lifetime 00:00:00 january 01 2025 infinite
  key-string password 073700797A21
  send-lifetime 00:00:00 january 01 2025 infinite
  cryptographic-algorithm HMAC-MD5
 !
!
key chain ISIS_HELLO
 key 1
  accept-lifetime 00:00:00 january 01 2025 infinite
  key-string password 142F333E382C
  send-lifetime 00:00:00 january 01 2025 infinite
  cryptographic-algorithm HMAC-MD5
 !
!
interface Loopback0
 no shutdown
 ipv4 address 10.1.1.4 255.255.255.255
!
interface MgmtEth0/0/CPU0/0
 no shutdown
 shutdown
!
interface GigabitEthernet0/0/0/0
 no shutdown
 ipv4 address 10.0.0.7 255.255.255.254
!
interface GigabitEthernet0/0/0/1
 no shutdown
 ipv4 address 10.0.0.16 255.255.255.254
!
interface GigabitEthernet0/0/0/2
 no shutdown
 ipv4 address 10.0.0.3 255.255.255.254
!
interface GigabitEthernet0/0/0/3
 no shutdown
 ipv4 address 10.0.0.11 255.255.255.254
!
interface GigabitEthernet0/0/0/4
 no shutdown
 ipv4 address 10.0.0.14 255.255.255.254
!
interface GigabitEthernet0/0/0/5
 no shutdown
 ipv4 address 10.0.0.28 255.255.255.254
!
router isis 1
 is-type level-2-only
 net 49.0000.0100.0100.1004.00
 lsp-password keychain LSP_ISIS level 2
 address-family ipv4 unicast
  metric-style wide
  mpls traffic-eng level-2-only
  mpls traffic-eng router-id Loopback0
 !
 interface Loopback0
  passive
  circuit-type level-2-only
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/0
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/1
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/2
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/3
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/4
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/5
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
!
rsvp
 interface GigabitEthernet0/0/0/0
  bandwidth percentage 80
 !
 interface GigabitEthernet0/0/0/1
  bandwidth percentage 80
 !
 interface GigabitEthernet0/0/0/2
  bandwidth percentage 80
 !
 interface GigabitEthernet0/0/0/3
  bandwidth percentage 80
 !
 interface GigabitEthernet0/0/0/4
  bandwidth percentage 80
 !
!
mpls traffic-eng
 interface GigabitEthernet0/0/0/0
 !
 interface GigabitEthernet0/0/0/1
 !
 interface GigabitEthernet0/0/0/2
 !
 interface GigabitEthernet0/0/0/3
 !
 interface GigabitEthernet0/0/0/4
 !
!
mpls ldp
 neighbor
  password encrypted 073700797A2159
 !
 address-family ipv4
 !
 interface GigabitEthernet0/0/0/0
  address-family ipv4
  !
 !
 interface GigabitEthernet0/0/0/1
  address-family ipv4
  !
 !
 interface GigabitEthernet0/0/0/2
  address-family ipv4
  !
 !
 interface GigabitEthernet0/0/0/3
  address-family ipv4
  !
 !
 interface GigabitEthernet0/0/0/4
  address-family ipv4
  !
 !
 interface GigabitEthernet0/0/0/5
  address-family ipv4
  !
 !
!
!
end

P3

!! IOS XR Configuration 6.0.1
!! Last configuration change at Sun Feb 15 16:00:11 2026 by admin
!
hostname P3
key chain LSP_ISIS
 key 1
  accept-lifetime 00:00:00 january 01 2025 infinite
  key-string password 073700797A21
  send-lifetime 00:00:00 january 01 2025 infinite
  cryptographic-algorithm HMAC-MD5
 !
!
key chain ISIS_HELLO
 key 1
  accept-lifetime 00:00:00 january 01 2025 infinite
  key-string password 142F333E382C
  send-lifetime 00:00:00 january 01 2025 infinite
  cryptographic-algorithm HMAC-MD5
 !
!
interface Loopback0
 no shutdown
 ipv4 address 10.1.1.5 255.255.255.255
!
interface MgmtEth0/0/CPU0/0
 no shutdown
 shutdown
!
interface GigabitEthernet0/0/0/0
 no shutdown
 ipv4 address 10.0.0.20 255.255.255.254
!
interface GigabitEthernet0/0/0/1
 no shutdown
 ipv4 address 10.0.0.9 255.255.255.254
!
interface GigabitEthernet0/0/0/2
 no shutdown
 ipv4 address 10.0.0.22 255.255.255.254
!
interface GigabitEthernet0/0/0/3
 no shutdown
 ipv4 address 10.0.0.18 255.255.255.254
!
interface GigabitEthernet0/0/0/4
 no shutdown
 ipv4 address 10.0.0.15 255.255.255.254
!
interface GigabitEthernet0/0/0/5
 no shutdown
 ipv4 address 10.0.0.32 255.255.255.254
!
router isis 1
 is-type level-2-only
 net 49.0000.0100.0100.1005.00
 lsp-password keychain LSP_ISIS level 2
 address-family ipv4 unicast
  metric-style wide
  mpls traffic-eng level-2-only
  mpls traffic-eng router-id Loopback0
 !
 interface Loopback0
  passive
  circuit-type level-2-only
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/0
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/1
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/2
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/3
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/4
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/5
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
!
rsvp
 interface GigabitEthernet0/0/0/0
  bandwidth percentage 80
 !
 interface GigabitEthernet0/0/0/1
  bandwidth percentage 80
 !
 interface GigabitEthernet0/0/0/2
  bandwidth percentage 80
 !
 interface GigabitEthernet0/0/0/3
  bandwidth percentage 80
 !
 interface GigabitEthernet0/0/0/4
  bandwidth percentage 80
 !
!
mpls traffic-eng
 interface GigabitEthernet0/0/0/0
 !
 interface GigabitEthernet0/0/0/1
 !
 interface GigabitEthernet0/0/0/2
 !
 interface GigabitEthernet0/0/0/3
 !
 interface GigabitEthernet0/0/0/4
 !
!
mpls ldp
 neighbor
  password encrypted 073700797A2159
 !
 address-family ipv4
 !
 interface GigabitEthernet0/0/0/0
  address-family ipv4
  !
 !
 interface GigabitEthernet0/0/0/1
  address-family ipv4
  !
 !
 interface GigabitEthernet0/0/0/2
  address-family ipv4
  !
 !
 interface GigabitEthernet0/0/0/3
  address-family ipv4
  !
 !
 interface GigabitEthernet0/0/0/4
  address-family ipv4
  !
 !
 interface GigabitEthernet0/0/0/5
  address-family ipv4
  !
 !
!
!
end

P4

!! IOS XR Configuration 6.0.1
!! Last configuration change at Sun Feb 15 16:00:16 2026 by admin
!
hostname P4
key chain LSP_ISIS
 key 1
  accept-lifetime 00:00:00 january 01 2025 infinite
  key-string password 073700797A21
  send-lifetime 00:00:00 january 01 2025 infinite
  cryptographic-algorithm HMAC-MD5
 !
!
key chain ISIS_HELLO
 key 1
  accept-lifetime 00:00:00 january 01 2025 infinite
  key-string password 142F333E382C
  send-lifetime 00:00:00 january 01 2025 infinite
  cryptographic-algorithm HMAC-MD5
 !
!
interface Loopback0
 no shutdown
 ipv4 address 10.1.1.6 255.255.255.255
!
interface MgmtEth0/0/CPU0/0
 no shutdown
 shutdown
!
interface GigabitEthernet0/0/0/0
 no shutdown
 ipv4 address 10.0.0.26 255.255.255.254
!
interface GigabitEthernet0/0/0/1
 no shutdown
 ipv4 address 10.0.0.17 255.255.255.254
!
interface GigabitEthernet0/0/0/2
 no shutdown
 ipv4 address 10.0.0.24 255.255.255.254
!
interface GigabitEthernet0/0/0/3
 no shutdown
 ipv4 address 10.0.0.19 255.255.255.254
!
interface GigabitEthernet0/0/0/4
 no shutdown
 ipv4 address 10.0.0.13 255.255.255.254
!
interface GigabitEthernet0/0/0/5
 no shutdown
 ipv4 address 10.0.0.34 255.255.255.254
!
router isis 1
 is-type level-2-only
 net 49.0000.0100.0100.1006.00
 lsp-password keychain LSP_ISIS level 2
 address-family ipv4 unicast
  metric-style wide
  mpls traffic-eng level-2-only
  mpls traffic-eng router-id Loopback0
 !
 interface Loopback0
  passive
  circuit-type level-2-only
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/0
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/1
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/2
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/3
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/4
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
 interface GigabitEthernet0/0/0/5
  circuit-type level-2-only
  point-to-point
  hello-password keychain ISIS_HELLO
  address-family ipv4 unicast
  !
 !
!
rsvp
 interface GigabitEthernet0/0/0/0
  bandwidth percentage 80
 !
 interface GigabitEthernet0/0/0/1
  bandwidth percentage 80
 !
 interface GigabitEthernet0/0/0/2
  bandwidth percentage 80
 !
 interface GigabitEthernet0/0/0/3
  bandwidth percentage 80
 !
 interface GigabitEthernet0/0/0/4
  bandwidth percentage 80
 !
!
mpls traffic-eng
 interface GigabitEthernet0/0/0/0
 !
 interface GigabitEthernet0/0/0/1
 !
 interface GigabitEthernet0/0/0/2
 !
 interface GigabitEthernet0/0/0/3
 !
 interface GigabitEthernet0/0/0/4
 !
!
mpls ldp
 neighbor
  password encrypted 073700797A2159
 !
 address-family ipv4
 !
 interface GigabitEthernet0/0/0/0
  address-family ipv4
  !
 !
 interface GigabitEthernet0/0/0/1
  address-family ipv4
  !
 !
 interface GigabitEthernet0/0/0/2
  address-family ipv4
  !
 !
 interface GigabitEthernet0/0/0/3
  address-family ipv4
  !
 !
 interface GigabitEthernet0/0/0/4
  address-family ipv4
  !
 !
 interface GigabitEthernet0/0/0/5
  address-family ipv4
  !
 !
!
!
end

CUST1-SITE_A

!
! Last configuration change at 18:58:44 UTC Wed Feb 11 2026
upgrade fpd auto
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CUST1-SITE_A
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
!
!
!
!
!
!
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
redundancy
!
!
! 
!
!
!
!
!
!
!
!
!
interface Loopback0
 ip address 192.168.200.2 255.255.255.0
!
interface FastEthernet0/0
 ip address 192.168.0.2 255.255.255.0
 duplex half
!
router bgp 65001
 bgp log-neighbor-changes
 neighbor 192.168.0.1 remote-as 65000
 !
 address-family ipv4
  redistribute connected
  neighbor 192.168.0.1 activate
 exit-address-family
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
!
!
!
control-plane
!
!
!
mgcp profile default
!
!
!
gatekeeper
 shutdown
!
!
line con 0
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 login
 transport input all
!
!
end

CUST1-SITE_B

!
! Last configuration change at 15:16:32 UTC Fri Feb 20 2026
upgrade fpd auto
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CUST1-SITE_B
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
!
!
!
!
!
!
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
redundancy
!
!
! 
!
!
!
!
!
!
!
!
!
interface Loopback0
 ip address 192.168.100.1 255.255.255.255
!
interface FastEthernet0/0
 ip address 192.168.1.2 255.255.255.0
 ip ospf network point-to-point
 ip ospf 1 area 0
 duplex full
!
interface FastEthernet1/0
 ip address 192.168.2.2 255.255.255.0
 ip ospf network point-to-point
 ip ospf 1 area 0
 duplex half
!
router ospf 1
!
router bgp 65001
 bgp log-neighbor-changes
 neighbor 192.168.1.1 remote-as 65000
 neighbor 192.168.1.1 fall-over bfd
 neighbor 192.168.2.1 remote-as 65000
 !
 address-family ipv4
  redistribute connected
  neighbor 192.168.1.1 activate
  neighbor 192.168.2.1 activate
  maximum-paths 2
 exit-address-family
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
!
!
!
control-plane
!
!
!
mgcp profile default
!
!
!
gatekeeper
 shutdown
!
!
line con 0
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 login
 transport input all
!
!
end

CUST2-SITE_X

!
! Last configuration change at 18:01:13 UTC Wed Feb 18 2026
upgrade fpd auto
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CUST2-SITE_X
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
!
!
!
!
!
!
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
redundancy
!
!
! 
!
!
!
!
!
!
!
!
!
interface Loopback0
 ip address 172.16.4.1 255.255.255.255
!
interface FastEthernet0/0
 ip address 172.16.1.2 255.255.255.0
 duplex half
!
interface FastEthernet1/0
 ip address 172.16.0.2 255.255.255.0
 duplex half
!
router bgp 65002
 bgp log-neighbor-changes
 neighbor 172.16.0.1 remote-as 65000
 neighbor 172.16.1.1 remote-as 65000
 !
 address-family ipv4
  redistribute connected
  neighbor 172.16.0.1 activate
  neighbor 172.16.1.1 activate
  maximum-paths 2
 exit-address-family
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
!
!
!
control-plane
!
!
!
mgcp profile default
!
!
!
gatekeeper
 shutdown
!
!
line con 0
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 login
 transport input all
!
!
end

CUST2-SITE_Z

!
! Last configuration change at 17:34:10 UTC Wed Feb 18 2026
upgrade fpd auto
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CUST2-SITE_Z
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
!
!
!
!
!
!
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
redundancy
!
!
! 
!
!
!
!
!
!
!
!
!
interface Loopback0
 ip address 172.16.3.1 255.255.255.255
!
interface FastEthernet0/0
 ip address 172.16.2.2 255.255.255.0
 duplex half
!
router bgp 65002
 bgp log-neighbor-changes
 neighbor 172.16.2.1 remote-as 65000
 !
 address-family ipv4
  redistribute connected
  neighbor 172.16.2.1 activate
 exit-address-family
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
!
!
!
control-plane
!
!
!
mgcp profile default
!
!
!
gatekeeper
 shutdown
!
!
line con 0
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 login
 transport input all
!
!
end

Belum ada skema IP yang didokumentasikan.

BGP EVPN VXLAN

Arsitektur Spine-Leaf dengan VXLAN overlay menggunakan BGP EVPN sebagai control plane. Komponen Jaringan VLAN 10 → VNI 10010 (multicast 239.1.1.10) VLAN 20 → VNI 10020 (multicast 239.1.1.20) VRF xyz → VNI 90000 (L3VNI)

SPINE_1

!Command: show running-config
!Running configuration last done at: Tue Jan  6 22:44:13 2026
!Time: Tue Jan  6 22:44:14 2026

version 10.5(1) Bios:version  
hostname spine_1
vdc spine_1 id 1
  limit-resource vlan minimum 16 maximum 4094
  limit-resource vrf minimum 2 maximum 4096
  limit-resource port-channel minimum 0 maximum 511
  limit-resource m4route-mem minimum 58 maximum 58
  limit-resource m6route-mem minimum 8 maximum 8

nv overlay evpn
feature ospf
feature bgp
feature pim

username admin password 5 $5$BLJOHC$D5UtyOGrGP7RJMrwUiFmN7QEVjyKT3VSDpVAndYsXq0  role network-admin
ip domain-lookup
copp profile strict
snmp-server user admin network-admin auth md5 164AF8F2B998BB4B234BF73775AE6B6819F7 priv aes-128 205A8489DEA39A403204AC6170A5666F46A2 localizedV2key
rmon event 1 log trap public description FATAL(1) owner PMON@FATAL
rmon event 2 log trap public description CRITICAL(2) owner PMON@CRITICAL
rmon event 3 log trap public description ERROR(3) owner PMON@ERROR
rmon event 4 log trap public description WARNING(4) owner PMON@WARNING
rmon event 5 log trap public description INFORMATION(5) owner PMON@INFO

ip pim rp-address 192.168.100.1 group-list 239.0.0.0/8
ip pim ssm range 232.0.0.0/8
ip pim anycast-rp 192.168.100.1 192.168.1.1
ip pim anycast-rp 192.168.100.1 192.168.1.2
vlan 1

route-map AS_PERMIT permit 10
  match as-path 65001, 65002 
route-map UNCHANGE_NEXT_HOP permit 10
  set ip next-hop unchanged
vrf context management


interface Ethernet1/1
  mtu 9216
  ip address 10.0.0.0/31
  ip ospf network point-to-point
  no ip ospf passive-interface
  ip router ospf UNDERLAY area 0.0.0.0
  ip pim sparse-mode
  no shutdown

interface Ethernet1/2
  mtu 9216
  ip address 10.0.0.2/31
  ip ospf network point-to-point
  no ip ospf passive-interface
  ip router ospf UNDERLAY area 0.0.0.0
  ip pim sparse-mode
  no shutdown

interface Ethernet1/3

interface Ethernet1/4

interface Ethernet1/5

interface Ethernet1/6

interface Ethernet1/7

interface Ethernet1/8

interface Ethernet1/9

interface Ethernet1/10

interface Ethernet1/11

interface Ethernet1/12

interface Ethernet1/13

interface Ethernet1/14

interface Ethernet1/15

interface Ethernet1/16

interface Ethernet1/17

interface Ethernet1/18

interface Ethernet1/19

interface Ethernet1/20

interface Ethernet1/21

interface Ethernet1/22

interface Ethernet1/23

interface Ethernet1/24

interface Ethernet1/25

interface Ethernet1/26

interface Ethernet1/27

interface Ethernet1/28

interface Ethernet1/29

interface Ethernet1/30

interface Ethernet1/31

interface Ethernet1/32

interface Ethernet1/33

interface Ethernet1/34

interface Ethernet1/35

interface Ethernet1/36

interface Ethernet1/37

interface Ethernet1/38

interface Ethernet1/39

interface Ethernet1/40

interface Ethernet1/41

interface Ethernet1/42

interface Ethernet1/43

interface Ethernet1/44

interface Ethernet1/45

interface Ethernet1/46

interface Ethernet1/47

interface Ethernet1/48

interface Ethernet1/49

interface Ethernet1/50

interface Ethernet1/51

interface Ethernet1/52

interface Ethernet1/53

interface Ethernet1/54

interface Ethernet1/55

interface Ethernet1/56

interface Ethernet1/57

interface Ethernet1/58

interface Ethernet1/59

interface Ethernet1/60

interface Ethernet1/61

interface Ethernet1/62

interface Ethernet1/63

interface Ethernet1/64

interface mgmt0
  vrf member management

interface loopback0
  ip address 192.168.1.1/32
  ip router ospf UNDERLAY area 0.0.0.0
  ip pim sparse-mode

interface loopback1
  description ##anycast rp##
  ip address 192.168.100.1/32
  ip router ospf UNDERLAY area 0.0.0.0
  ip pim sparse-mode
icam monitor scale

line console
line vty
boot nxos bootflash:/nxos64-cs.10.5.1.F.bin 
router ospf UNDERLAY
  router-id 192.168.1.1
  passive-interface default
router bgp 65000
  router-id 192.168.1.1
  bestpath as-path multipath-relax
  address-family l2vpn evpn
    maximum-paths 8
    retain route-target all
  template peer LEAF
    update-source loopback0
    ebgp-multihop 2
    address-family l2vpn evpn
      send-community
      send-community extended
      route-map UNCHANGE_NEXT_HOP out
      rewrite-evpn-rt-asn
  neighbor 192.168.1.0/24 remote-as route-map AS_PERMIT
    inherit peer LEAF


!


!end

SPINE_2

!Command: show running-config
!Running configuration last done at: Tue Jan  6 22:44:13 2026
!Time: Tue Jan  6 22:44:13 2026

version 10.5(1) Bios:version  
hostname spine_2
vdc spine_2 id 1
  limit-resource vlan minimum 16 maximum 4094
  limit-resource vrf minimum 2 maximum 4096
  limit-resource port-channel minimum 0 maximum 511
  limit-resource m4route-mem minimum 58 maximum 58
  limit-resource m6route-mem minimum 8 maximum 8

nv overlay evpn
feature ospf
feature bgp
feature pim

username admin password 5 $5$HOGOHG$KsM/GHR8YYeyZ635Np8pWUkPCh4MXvnymOKJBqf3Ed/  role network-admin
ip domain-lookup
copp profile strict
snmp-server user admin network-admin auth md5 5310E7675A5D11FBD8C62755FE2FD2A9548C priv aes-128 205E8C0BC1E8A5406F6A8DE872B75B35CA45 localizedV2key
rmon event 1 log trap public description FATAL(1) owner PMON@FATAL
rmon event 2 log trap public description CRITICAL(2) owner PMON@CRITICAL
rmon event 3 log trap public description ERROR(3) owner PMON@ERROR
rmon event 4 log trap public description WARNING(4) owner PMON@WARNING
rmon event 5 log trap public description INFORMATION(5) owner PMON@INFO

ip pim rp-address 192.168.100.1 group-list 239.0.0.0/8
ip pim ssm range 232.0.0.0/8
ip pim anycast-rp 192.168.100.1 192.168.1.1
ip pim anycast-rp 192.168.100.1 192.168.1.2
vlan 1

route-map AS_PERMIT permit 10
  match as-path 65001, 65002 
route-map UNCHANGE_NEXT_HOP permit 10
  set ip next-hop unchanged
vrf context management


interface Ethernet1/1
  mtu 9216
  ip address 10.0.0.6/31
  ip ospf network point-to-point
  no ip ospf passive-interface
  ip router ospf UNDERLAY area 0.0.0.0
  ip pim sparse-mode
  no shutdown

interface Ethernet1/2
  mtu 9216
  ip address 10.0.0.4/31
  ip ospf network point-to-point
  no ip ospf passive-interface
  ip router ospf UNDERLAY area 0.0.0.0
  ip pim sparse-mode
  no shutdown

interface Ethernet1/3

interface Ethernet1/4

interface Ethernet1/5

interface Ethernet1/6

interface Ethernet1/7

interface Ethernet1/8

interface Ethernet1/9

interface Ethernet1/10

interface Ethernet1/11

interface Ethernet1/12

interface Ethernet1/13

interface Ethernet1/14

interface Ethernet1/15

interface Ethernet1/16

interface Ethernet1/17

interface Ethernet1/18

interface Ethernet1/19

interface Ethernet1/20

interface Ethernet1/21

interface Ethernet1/22

interface Ethernet1/23

interface Ethernet1/24

interface Ethernet1/25

interface Ethernet1/26

interface Ethernet1/27

interface Ethernet1/28

interface Ethernet1/29

interface Ethernet1/30

interface Ethernet1/31

interface Ethernet1/32

interface Ethernet1/33

interface Ethernet1/34

interface Ethernet1/35

interface Ethernet1/36

interface Ethernet1/37

interface Ethernet1/38

interface Ethernet1/39

interface Ethernet1/40

interface Ethernet1/41

interface Ethernet1/42

interface Ethernet1/43

interface Ethernet1/44

interface Ethernet1/45

interface Ethernet1/46

interface Ethernet1/47

interface Ethernet1/48

interface Ethernet1/49

interface Ethernet1/50

interface Ethernet1/51

interface Ethernet1/52

interface Ethernet1/53

interface Ethernet1/54

interface Ethernet1/55

interface Ethernet1/56

interface Ethernet1/57

interface Ethernet1/58

interface Ethernet1/59

interface Ethernet1/60

interface Ethernet1/61

interface Ethernet1/62

interface Ethernet1/63

interface Ethernet1/64

interface mgmt0
  vrf member management

interface loopback0
  ip address 192.168.1.2/32
  ip router ospf UNDERLAY area 0.0.0.0
  ip pim sparse-mode

interface loopback1
  description ##anycast rp##
  ip address 192.168.100.1/32
  ip router ospf UNDERLAY area 0.0.0.0
  ip pim sparse-mode
icam monitor scale

line console
line vty
boot nxos bootflash:/nxos64-cs.10.5.1.F.bin 
router ospf UNDERLAY
  router-id 192.168.1.2
  passive-interface default
router bgp 65000
  router-id 192.168.1.2
  bestpath as-path multipath-relax
  address-family l2vpn evpn
    maximum-paths 8
    retain route-target all
  template peer LEAF
    update-source loopback0
    ebgp-multihop 2
    address-family l2vpn evpn
      send-community
      send-community extended
      route-map UNCHANGE_NEXT_HOP out
      rewrite-evpn-rt-asn
  neighbor 192.168.1.0/24 remote-as route-map AS_PERMIT
    inherit peer LEAF


!


!end

LEAF_1

!Command: show running-config
!Running configuration last done at: Tue Jan  6 22:44:16 2026
!Time: Tue Jan  6 22:44:17 2026

version 10.5(1) Bios:version  
hostname leaf_1
vdc leaf_1 id 1
  limit-resource vlan minimum 16 maximum 4094
  limit-resource vrf minimum 2 maximum 4096
  limit-resource port-channel minimum 0 maximum 511
  limit-resource m4route-mem minimum 58 maximum 58
  limit-resource m6route-mem minimum 8 maximum 8

nv overlay evpn
feature ospf
feature bgp
feature pim
feature interface-vlan
feature vn-segment-vlan-based
feature nv overlay

username admin password 5 $5$GHOIBK$NNkQg7CwZTuJzUiSahQiAHbjhxObp/ITPRLKdSaDqI7  role network-admin
ip domain-lookup
copp profile strict
hardware access-list tcam region racl 512
hardware access-list tcam region arp-ether 256 double-wide
snmp-server user admin network-admin auth md5 480FC93C3F7BF1D5F7B727F7416D1287A590 priv aes-128 52368F2A7675A190F39B1EDF4C3C26C0EB97 localizedV2key
rmon event 1 log trap public description FATAL(1) owner PMON@FATAL
rmon event 2 log trap public description CRITICAL(2) owner PMON@CRITICAL
rmon event 3 log trap public description ERROR(3) owner PMON@ERROR
rmon event 4 log trap public description WARNING(4) owner PMON@WARNING
rmon event 5 log trap public description INFORMATION(5) owner PMON@INFO

fabric forwarding anycast-gateway-mac 0000.dc01.0000
ip pim rp-address 192.168.100.1 group-list 239.0.0.0/8
ip pim ssm range 232.0.0.0/8
vlan 1,10,20,900
vlan 10
  vn-segment 10010
vlan 20
  vn-segment 10020
vlan 900
  vn-segment 90000

vrf context management
vrf context xyz
  vni 90000
  address-family ipv4 unicast

interface Vlan1

interface Vlan10
  no shutdown
  vrf member xyz
  ip address 172.16.10.1/24
  fabric forwarding mode anycast-gateway

interface Vlan20
  no shutdown
  vrf member xyz
  ip address 172.16.20.1/24
  fabric forwarding mode anycast-gateway

interface Vlan900
  no shutdown
  vrf member xyz
  ip forward

interface nve1
  no shutdown
  host-reachability protocol bgp
  source-interface loopback0
  global suppress-arp
  member vni 10010
    mcast-group 239.1.1.10
  member vni 10020
    mcast-group 239.1.1.20
  member vni 90000 associate-vrf

interface Ethernet1/1
  mtu 9216
  ip address 10.0.0.1/31
  ip ospf network point-to-point
  no ip ospf passive-interface
  ip router ospf UNDERLAY area 0.0.0.0
  ip pim sparse-mode
  no shutdown

interface Ethernet1/2
  mtu 9216
  ip address 10.0.0.5/31
  ip ospf network point-to-point
  no ip ospf passive-interface
  ip router ospf UNDERLAY area 0.0.0.0
  ip pim sparse-mode
  no shutdown

interface Ethernet1/3
  switchport
  switchport access vlan 10
  no shutdown

interface Ethernet1/4
  switchport
  switchport access vlan 20
  no shutdown

interface Ethernet1/5

interface Ethernet1/6

interface Ethernet1/7

interface Ethernet1/8

interface Ethernet1/9

interface Ethernet1/10

interface Ethernet1/11

interface Ethernet1/12

interface Ethernet1/13

interface Ethernet1/14

interface Ethernet1/15

interface Ethernet1/16

interface Ethernet1/17

interface Ethernet1/18

interface Ethernet1/19

interface Ethernet1/20

interface Ethernet1/21

interface Ethernet1/22

interface Ethernet1/23

interface Ethernet1/24

interface Ethernet1/25

interface Ethernet1/26

interface Ethernet1/27

interface Ethernet1/28

interface Ethernet1/29

interface Ethernet1/30

interface Ethernet1/31

interface Ethernet1/32

interface Ethernet1/33

interface Ethernet1/34

interface Ethernet1/35

interface Ethernet1/36

interface Ethernet1/37

interface Ethernet1/38

interface Ethernet1/39

interface Ethernet1/40

interface Ethernet1/41

interface Ethernet1/42

interface Ethernet1/43

interface Ethernet1/44

interface Ethernet1/45

interface Ethernet1/46

interface Ethernet1/47

interface Ethernet1/48

interface Ethernet1/49

interface Ethernet1/50

interface Ethernet1/51

interface Ethernet1/52

interface Ethernet1/53

interface Ethernet1/54

interface Ethernet1/55

interface Ethernet1/56

interface Ethernet1/57

interface Ethernet1/58

interface Ethernet1/59

interface Ethernet1/60

interface Ethernet1/61

interface Ethernet1/62

interface Ethernet1/63

interface Ethernet1/64

interface mgmt0
  vrf member management

interface loopback0
  ip address 192.168.1.3/32
  ip router ospf UNDERLAY area 0.0.0.0
  ip pim sparse-mode
icam monitor scale

line console
line vty
boot nxos bootflash:/nxos64-cs.10.5.1.F.bin 
router ospf UNDERLAY
  router-id 192.168.1.3
  passive-interface default
router bgp 65001
  router-id 192.168.1.3
  address-family l2vpn evpn
    maximum-paths 8
  template peer SPINE
    remote-as 65000
    update-source loopback0
    ebgp-multihop 2
    address-family l2vpn evpn
      send-community
      send-community extended
      rewrite-evpn-rt-asn
  neighbor 192.168.1.1
    inherit peer SPINE
  neighbor 192.168.1.2
    inherit peer SPINE


!


!end

LEAF_2

!Command: show running-config
!Running configuration last done at: Tue Jan  6 22:44:17 2026
!Time: Tue Jan  6 22:44:17 2026

version 10.5(1) Bios:version  
hostname leaf_2
vdc leaf_2 id 1
  limit-resource vlan minimum 16 maximum 4094
  limit-resource vrf minimum 2 maximum 4096
  limit-resource port-channel minimum 0 maximum 511
  limit-resource m4route-mem minimum 58 maximum 58
  limit-resource m6route-mem minimum 8 maximum 8

nv overlay evpn
feature ospf
feature bgp
feature pim
feature interface-vlan
feature vn-segment-vlan-based
feature nv overlay

username admin password 5 $5$EFDEMP$n/6FnYSXEbAZHCPsQhfvWz.H/LkB8DxuTv67itgrIA1  role network-admin
ip domain-lookup
copp profile strict
hardware access-list tcam region racl 512
hardware access-list tcam region arp-ether 256 double-wide
snmp-server user admin network-admin auth md5 4973B9008490B1D48C648001AEDDC5FE309A priv aes-128 321CC13BA2F6DB8ECA228505AFAC82B03E81 localizedV2key
rmon event 1 log trap public description FATAL(1) owner PMON@FATAL
rmon event 2 log trap public description CRITICAL(2) owner PMON@CRITICAL
rmon event 3 log trap public description ERROR(3) owner PMON@ERROR
rmon event 4 log trap public description WARNING(4) owner PMON@WARNING
rmon event 5 log trap public description INFORMATION(5) owner PMON@INFO

fabric forwarding anycast-gateway-mac 0000.dc01.0000
ip pim rp-address 192.168.100.1 group-list 239.0.0.0/8
ip pim ssm range 232.0.0.0/8
vlan 1,10,20,900
vlan 10
  vn-segment 10010
vlan 20
  vn-segment 10020
vlan 900
  vn-segment 90000

vrf context management
vrf context xyz
  vni 90000
  address-family ipv4 unicast

interface Vlan1

interface Vlan10
  no shutdown
  vrf member xyz
  ip address 172.16.10.1/24
  fabric forwarding mode anycast-gateway

interface Vlan20
  no shutdown
  vrf member xyz
  ip address 172.16.20.1/24
  fabric forwarding mode anycast-gateway

interface Vlan900
  no shutdown
  vrf member xyz
  ip forward

interface nve1
  no shutdown
  host-reachability protocol bgp
  source-interface loopback0
  global suppress-arp
  member vni 10010
    mcast-group 239.1.1.10
  member vni 10020
    mcast-group 239.1.1.20
  member vni 90000 associate-vrf

interface Ethernet1/1
  mtu 9216
  ip address 10.0.0.7/31
  ip ospf network point-to-point
  no ip ospf passive-interface
  ip router ospf UNDERLAY area 0.0.0.0
  ip pim sparse-mode
  no shutdown

interface Ethernet1/2
  mtu 9216
  ip address 10.0.0.3/31
  ip ospf network point-to-point
  no ip ospf passive-interface
  ip router ospf UNDERLAY area 0.0.0.0
  ip pim sparse-mode
  no shutdown

interface Ethernet1/3
  switchport
  switchport access vlan 10
  no shutdown

interface Ethernet1/4
  switchport
  switchport access vlan 20
  no shutdown

interface Ethernet1/5

interface Ethernet1/6

interface Ethernet1/7

interface Ethernet1/8

interface Ethernet1/9

interface Ethernet1/10

interface Ethernet1/11

interface Ethernet1/12

interface Ethernet1/13

interface Ethernet1/14

interface Ethernet1/15

interface Ethernet1/16

interface Ethernet1/17

interface Ethernet1/18

interface Ethernet1/19

interface Ethernet1/20

interface Ethernet1/21

interface Ethernet1/22

interface Ethernet1/23

interface Ethernet1/24

interface Ethernet1/25

interface Ethernet1/26

interface Ethernet1/27

interface Ethernet1/28

interface Ethernet1/29

interface Ethernet1/30

interface Ethernet1/31

interface Ethernet1/32

interface Ethernet1/33

interface Ethernet1/34

interface Ethernet1/35

interface Ethernet1/36

interface Ethernet1/37

interface Ethernet1/38

interface Ethernet1/39

interface Ethernet1/40

interface Ethernet1/41

interface Ethernet1/42

interface Ethernet1/43

interface Ethernet1/44

interface Ethernet1/45

interface Ethernet1/46

interface Ethernet1/47

interface Ethernet1/48

interface Ethernet1/49

interface Ethernet1/50

interface Ethernet1/51

interface Ethernet1/52

interface Ethernet1/53

interface Ethernet1/54

interface Ethernet1/55

interface Ethernet1/56

interface Ethernet1/57

interface Ethernet1/58

interface Ethernet1/59

interface Ethernet1/60

interface Ethernet1/61

interface Ethernet1/62

interface Ethernet1/63

interface Ethernet1/64

interface mgmt0
  vrf member management

interface loopback0
  ip address 192.168.1.4/32
  ip router ospf UNDERLAY area 0.0.0.0
  ip pim sparse-mode
icam monitor scale

line console
line vty
boot nxos bootflash:/nxos64-cs.10.5.1.F.bin 
router ospf UNDERLAY
  router-id 192.168.1.4
  passive-interface default
router bgp 65002
  router-id 192.168.1.4
  address-family l2vpn evpn
    maximum-paths 8
  template peer SPINE
    remote-as 65000
    update-source loopback0
    ebgp-multihop 2
    address-family l2vpn evpn
      send-community
      send-community extended
      rewrite-evpn-rt-asn
  neighbor 192.168.1.1
    inherit peer SPINE
  neighbor 192.168.1.2
    inherit peer SPINE


!


!end

Device	Interface	IP Address	Purpose
SPINE_1	E1/1	10.0.0.0	UNDERLAY

ABOUT ME

Tentang Saya

Fresh Graduate Teknik Informatika dengan fokus pada jaringan dan infrastruktur IT. Memiliki pemahaman Cisco Network Infrastructure mencakup routing, switching, dan network services, serta konsep arsitektur jaringan modern seperti three-tier dan spine-leaf. Berpengalaman magang sebagai IT Support dalam instalasi dan maintenance sistem jaringan serta perangkat IT di lingkungan operasional perusahaan.

FUAT ANSHORI

TEKNIK INFORMATIKA

FUAT ANSHORI

Latar belakang Teknik Informatika dengan fokus pada Network Infrastructure dan IT Support, mencakup konfigurasi jaringan, VLAN, instalasi perangkat jaringan, serta dukungan sistem berbasis Linux dan Windows.

🎂

TANGGAL LAHIR

24 January 2003

🎓

UMUR

23 Tahun

📞

TELEPON

081271501013

🎓

PENDIDIKAN

S1 TEKNIK INFORMATIKA

📍

KOTA

BANJARMASIN, KALIMANTAN SELATAN

📧

[email protected]

Berpengalaman dalam pemasangan dan konfigurasi CCTV IP Camera, pembuatan dan implementasi VLAN untuk segmentasi jaringan, instalasi serta konfigurasi PowerBeam untuk konektivitas jarak jauh, serta maintenance perangkat IT seperti printer, komputer, dan perangkat jaringan pendukung.

CCTV POWER BEAM SWITCHING

RESUME

Professional Summary

Fresh Graduate Teknik Informatika dengan dasar kuat pada jaringan dan infrastruktur IT. Memiliki pemahaman routing dan switching Cisco, VLAN, serta teknologi data center seperti BGP EVPN VXLAN. Berpengalaman magang sebagai IT Support dengan keterlibatan langsung dalam instalasi jaringan, CCTV, dan perangkat wireless.

Ringkasan

FUAT ANSHORI

Memiliki pemahaman teknis pada Cisco Routing & Switching (OSPF, EIGRP, BGP, RIP), VLAN, STP, dan konsep arsitektur jaringan modern. Berpengalaman melakukan instalasi dan konfigurasi perangkat jaringan, CCTV, serta PowerBeam dalam lingkungan operasional perusahaan. Terbiasa menggunakan Linux OS, Windows Active Directory, serta containerization menggunakan Docker. Memiliki minat kuat untuk berkembang sebagai Network Engineer atau IT Infrastructure.

📍 BANJARMASIN, KALIMANTAN SELATAN

📞 081271501013

📧 [email protected]

Pendidikan

S1 TEKNIK INFORMATIKA

STMIK INDONESIA BANJARMASIN

Lulusan Teknik Informatika dengan pemahaman dasar jaringan dan infrastruktur IT.

Pengalaman

IT SUPPORT (INTERN)

2023 Augustus-2023 September

PT. PLN Nusantara Power UP Pulang Pisau

Instalasi dan konfigurasi CCTV IP Camera
Pembuatan dan implementasi VLAN untuk segmentasi jaringan
Instalasi dan konfigurasi PowerBeam untuk koneksi jaringan jarak jauh
Maintenance perangkat IT seperti komputer, printer, dan hardware pendukung
Dukungan operasional IT harian

ROUTING PROTOCOL

BGP 65%

OSPF 85%

EIGRP 86%

MPLS L3VPN

BGP VPNV4 86%

OSPF UNDERLAY 98%

MPLS 87%

SWITCHING

VLAN AND TRUNKING 95%

VTP 85%

LACP 86%

MICROSOFT SERVER

AD DS 87%

FILE SHARING MANAGEMENT 87%

REMOTE DESKTOP 76%

CONTACT

HUBUNGI SAYA

Ada proyek menarik? Mari diskusikan bagaimana saya bisa membantu.

IT Network & Support

Network Designs & Labs

EVPN VXLAN MULTISITE

MPLS TRAFIC ENGINEERING

BGP EVPN VXLAN

EVPN VXLAN MULTISITE

DCI

BGW-POD1

BGW-POD2

SPINE-POD1

SPINE-POD2

LEAF-POD1

LEAF-POD2

MPLS TRAFIC ENGINEERING

PE-1

PE-2

PE-3

PE-4

RR

P1

P2

P3

P4

CUST1-SITE_A

CUST1-SITE_B

CUST2-SITE_X

CUST2-SITE_Z

BGP EVPN VXLAN

SPINE_1

SPINE_2

LEAF_1

LEAF_2

Tentang Saya

FUAT ANSHORI

FUAT ANSHORI

Professional Summary

Ringkasan

FUAT ANSHORI

Pendidikan

S1 TEKNIK INFORMATIKA

Pengalaman

IT SUPPORT (INTERN)

ROUTING PROTOCOL

MPLS L3VPN

SWITCHING

MICROSOFT SERVER

ROUTING PROTOCOL - Detailed Skills

MPLS L3VPN - Detailed Skills

SWITCHING - Detailed Skills

MICROSOFT SERVER - Detailed Skills

HUBUNGI SAYA