Nama : Merlian Dipuang R

NIM : 42519061
Kelas : TKJ 1C

10.1.4.3 Lab - Using Wireshark to Examine Ethernet Frames

PART 1
Langkah 1 : mengecek default gateway dari perangkat internet yang digunakan dengan
menggunakan perintah ipconfig/all.

Langkah 2 : menghapus ARP dengan perintah arp –d lalu melakukan ping menuju default
gateway.
 Langkah 3 : melakukan perekaman aktivitas data dengan menggunakan wireshark. Dan
memfilter agar data yang ditampilkan hanya arp atau icmp.

Berikut adalah hasil dari perekaman data yang di lakukan

Langkah 4 : Tutup jendela perekaman dengan menekan ctrl + W, lakukan ping ke

cisco.com lalu lakukan perekaman data.
What is significant about the contents of the destination address field?
Jawab : Isi dari destination address field adalah semua host yang akan menerima broadcast
frame.

Why does the PC send out a broadcast ARP prior to sending the first ping request?
Jawab : Sebelum mengirim permintaan ping ke sebuah host, perlu di tentukan terlebih dahulu
MAC Address dari tujuan untuk bisa membangun frame header untuk permintaan ping
tersebut. Dan siaran ARP (ARP Broadcast) itu berfungsi untuk meminta MAC address dari
host dan sekaligus membawa IP address itu di dalam ARP itu sendiri.

What is the MAC address of the source in the first frame?

Jawab : 00:67:62:6a:ed:a8

What is the Vendor ID (OUI) of the Source’s NIC?

Jawab : Fiberhom

What portion of the MAC address is the OUI?

Jawab : 3 bilangan pertama dari octal, atau 6 bilangan hexadesimal, atau sejumlah 24 bits
MAC Address mengindikasikan OUI.

What is the Source’s NIC serial number?

Jawab : 6a:ed:a8. 3 angka oktal terakhir, atau 6 bilangan hexadecimal, atau 24 bit MAC
Address itu mengindikasikan serial number.
 Informasi dari ICMP yang mengindikasikan tujuan dan sumber :

PART 2
What is the IP Address of the PC Default Gateway?
Jawab : 192.168.1.1

What is the MAC address of the PC’s NIC?

Jawab : e0:ca:94:ef:1a:8b

What is the default gateway’s MAC address?

Jawab : 00:67:62:6a:ed:a8

What type of frame is displayed?

Jawab : IPv4 (0x0800)

What is the source IP address?

Jawab : 192.168.1.8

What is the destination IP address?

Jawab : 192.168.1.1

What do the last two highlighted octets spell?

Jawab : hi
 What device and MAC address is displayed as the destination address?
Jawab : 00:67:62:6a:ed:a8

In the first echo (ping) request frame, what are the source and destination MAC addresses?
Source: 00:67:62:6a:ed:a8
Destination: e0:ca:94:ef:1a:8b

What are the source and destination IP addresses contained in the data field of the frame?
Source: 192.168.1.6
Destination: 72.163.4.185

Compare these addresses to the addresses you received in Step 7. The only address that
changed is the destination IP address. Why has the destination IP address changed, while the
destination MAC address remained the same?
Jawab : Karena frame 2 tidak pernah meninggalkan LAN. Ketika host jarak jauh di ping,
sumber akan menggunakan MAC Address default gateway untuk frame tujuan. Lalu ketika
default Gateway menerima paket, informasi dari frame 2 akan di hapus dari paket lalu akan
membuat header frame yang baru dengan MAC Address berikutnya. Dan begitulah proses ini
berlajut dari router ke router hingga mencapai IP Address tujuan.

Reflection
Wireshark does not display the preamble field of a frame header. What does the preamble
contain?
Jawab : Field Preamble berisi 7 bilangan oktal yang bergantian dari urutan 1010. Dan satu
oktal itu menjadi tanda dari permulaan frame, 10101011.
10.1.3.6 Lab - Viewing Network Device MAC Addresses

Langkah 1 : lakukan percobaan dengan mengirim permintaan ping ke default gateway

dari PC.

Were the pings successful? Why or why not?

Jawab : belum berhasil, karena router belum di konfigurasi.

Langkah 2 : lakukan konfigurasi untuk router Cisco berdasarkan tabel yang tersedia di
file jobsheet.
a. Ping the default gateway address of R1 from PC-A.
Were the pings successful?
Jawab : Iya.
Dengan informasi dari perintah ipconfig/all, jawab pertanyaan berikut:

What is the OUI portion of the MAC address for this device?
Jawab : E0 - CA - 94
What is the serial number portion of the MAC address for this device?
Jawab : EF - 39 - CB
 Using the example above, find the name of the vendor that manufactured this NIC.
Jawab : Quanta Computer

b. From the command prompt on PC-A, issue the ipconfig /all command and identify the
OUI portion of the MAC address for the NIC of PC-A.

Jawab : 0060.70
Identify the serial number portion of the MAC address for the NIC of PC-A.
Jawab : 12.A115
Identify the name of the vendor that manufactured the NIC of PC-A.
Jawab : Cisco system

Berikutnya, menampilkan informasi MAC Address. Contoh terdapat pada gambar di

bawah. Gunakan output dari router untuk menjawab pertanyaan-pertanyaan berikut.
What is the MAC address for G0/1 on R1?
Jawab : 0060.47
What is the MAC serial number for G0/1?
Jawab : cl.b401
What is the OUI for G0/1?
Jawab : 0060.47
Based on this OUI, what is the name of the vendor?
Jawab : Cisco system
What does bia stand for?
Jawab : Burning in address
Why does the output show the same MAC address twice?
Jawab : Karena MAC Address dapat diubah dengan perintah perangkat lunak. Sementara
alamat aktualnya (BIA) akan tetapi berada di situ dan di tampilkan dalam tanda kurung.

What Layer 2 addresses are displayed on R1?

Jawab : MAC Address R1 Gig0
What Layer 3 addresses are displayed on R1?
Jawab : MAC Address PC-0
Why do you think there is no information showing for the switch with the show arp
command?
Jawab : Karena ARP Chache digunakan untuk menjaga hubungan antara MAC Address
dan IP Address. Maka yang ditampilkan dari perintah show ARP hanya IP Address dan
MAC Address.
 What is the MAC address for F0/5 on your switch?
Jawab : 0060.47
Issue the same command and write down the MAC address for F0/6.
Jawab : 00e0.f7
Are the OUIs shown on the switch the same as those that were displayed on the router?
Jawab : Iya

Berikutnya menampilkan tabel MAC Address di switch. Berdasarkan output dari switch,
jawablah pertanyaan-pertanyaan berikut.
 Did the switch display the MAC address of PC-A? If you answered yes, what port was it
on?
Jawab : Tidak
Did the switch display the MAC address of R1? If you answered yes, what port was it
on?
Jawab : Iya pada port Fa0/2

Reflection
1. Can you have broadcasts at the Layer 2 level? If so, what would the MAC address be?
Jawab : Saya bisa memiliki broadcasts pada layer 2 level. Dan ARP akan menggunakannya
untuk menemukan informasi MAC Address. Alamat siarannya adalah FF.FF.FF.FF.FF.FF
2. Why would you need to know the MAC address of a device?
Jawab : Untuk membuat fungsi jaringan Ethernet (WiFi) lokal.
10.1.4.4 Packet Tracer - Identify MAC and IP Addresses Instructions
Identify MAC Address and IP Address
Bagian 1: Kumpulkan Informasi PDU
Langkah 1: Mengumpulkan informasi PDU sebagai paket perjalanan dari 172.16.31.2 ke
10.10.10.3.

Langkah 1 : Klik 172.16.31.2 dan buka Command Prompt .

Langkah 2 : Masukkan perintah ping 10.10.10.3.
Langkah 3 : Beralih ke mode simulasi dan ulangi perintah ping 10.10.10.3 . PDU muncul di
sebelah 172.16.31.2.

Langkah 4 : Klik PDU dan n ote informasi berikut dari Out terikat PDU layer tab :
MAC Address Tujuan : 00D0: BA8E: 741A
Sumber MAC Address : 000C: 85CC: 1DA7
Sumber IP Address : 172.16.31.2
IP Address Tujuan : 10.10.10.3
Pada perangkat Perangkat: Komputer

Klik Capture / Forward untuk memindahkan PDU ke perangkat berikutnya. Kumpulkan

informasi yang sama dari Langkah 4. Ulangi proses ini sampai PDU mencapai tujuannya. Catat
informasi PDU yang Anda kumpulkan ke dalam spreadsheet menggunakan format seperti tabel
di bawah ini :
 Test At Device Dest. MAC Src MAC Src IPv4 Dest IPv4
Ping from 172.16.31.2 00D0.BA8E.741A 000C.85CC.1DA7 172.16.31.2 10.10.10.3
172.16.31.2 Hub -- -- -- --
to 10.10.10.3
Switch1 00D0.BA8E.741A 000C.85C.1DA7 -- --
Router 0060.4706.572B 00D0.588C.2401 172.16.31.2 10.10.10.3
Switch0 0060.4706.572B 00D0.588C.2401 -- --
Access Point -- -- -- --
10.10.10.3 0060.4706.572B 00D0.588C.2401 172.16.31.3 10.10.10.2

Ping from 172.16.31.2 0060.7036.2849 000C.85CC.1DA7 172.16.31.2 172.16.31.3

172.16.31.2 Hub -- -- -- --
to
000C.85CC.1DA7 0060.7036.2849 172.16.31.3 172.16.31.2
172.16.31.3 172.16.31.3

Ping from 172.16.31.4 00D0.D311.C788 00C0.CF0B.BC80 172.16.31.4 172.16.31.5

172.16.31.4 Switch1 00D0.D311.C788 00C0.CF0B.BC80 -- --
to
00C0.CF0B.BC80 00D0.D311.C788 172.16.31.5 172.16.31.4
172.16.31.5 172.16.31.5

Ping from 10.10.10.2 0060.4706.572B 0060.2F84.4AB6 10.10.10.2 10.10.10.3

10.10.10.2 to Access Point -- -- -- --
10.10.10.3
10.10.10.3 0060.2F84.4AB6 0060.4706.572B 10.10.10.3 10.10.10.2

Ping from 172.16.31.4 00D0.BA8E.741A 000C.CF0B.BC80 172.16.31.4 10.10.10.2

172.16.31.4 Switch1 00D0.BA8E.741A 000C.CF0B.BC80 -- --
to 10.10.10.3
Router 0060.2F84.4AB6 00D0.588C.2401 172.16.31.4 10.10.10.2
Switch0 0060.2F84.4AB6 00D0.588C.2401 -- --
Access Point -- -- -- --
10.10.10.2 00D0.588C.2401 0060.2F84.4AB6 10.10.10.2 172.16.31.4

Ping from 172.16.31.3 00D0.BA8E.741A 0060.7036.2849 172.16.31.3 10.10.10.3

172.16.31.3 Hub -- -- -- --
to 10.10.10.2
Switch1 00D0.BA8E.741A 0060.7036.2849 -- --
Router 0060.2F84.4AB6 00D0.588C.2401 172.16.31.3 10.10.10.3
Switch0 0060.2F84.4AB6 00D0.588C.2401 -- --
Accsess Point -- -- -- --
10.10.10.2 00D0.588C.2401 0060.2F84.4AB6

Bagian 2: Pertanyaan Refleksi

Answer the following questions regarding the captured data:

1. Were there different types of wires used to connect devices? Iya, kabel Copper (tembaga)
dan Fiber.
2. Did the wires change the handling of the PDU in any way? Tidak
3. Did the Hub lose any of the information given to it? Tidak
4. What does the Hub do with MAC addresses and IP addresses? Tidak ada.
5. Did the wireless Access Point do anything with the information given to it? Iya.
Informasi itu di kemas ulang wireless 802.11
6. Was any MAC or IP address lost during the wireless transfer? Tidak
7. What was the highest OSI layer that the Hub and Access Point used? Layer 1
8. Did the Hub or Access Point ever replicate a PDU that was rejected with a red “X”? Iya
9. When examining the PDU Details tab, which MAC address appeared first, the source or
the destination? Destination (Tujuan)
10. Why would the MAC addresses appear in this order? Sebuah switch bisa mulai
meneruskan frame ke MAC Address yang dikenal lebih cepat jika tujuan terdaftar dulu.
11. Was there a pattern to the MAC addressing in the simulation? Tidak
12. Did the switches ever replicate a PDU that was rejected with a red “X”? Tidak
13. Every time that the PDU was sent between the 10 network and the 172 network, there
was a point where the MAC addresses suddenly changed. Where did that occur? Itu
terjadi di router.
14. Which device uses MAC addresses starting with 00D0? Router
15. To what devices did the other MAC addresses belong? Ke pengirim dan penerima
(sender and receiver)
16. Did the sending and receiving IPv4 addresses switch in any of the PDUs? Tidak
17. If you follow the reply to a ping, sometimes called a pong, do the sending and receiving
IPv4 addresses switch? Iya
18. What is the pattern to the IPv4 addressing in this simulation? Setiap port router
memerlukan satu set alamat yang tidak tumpang tindih.
19. Why do different IP networks need to be assigned to different ports of a router? Fungsi
dari sebuah router adalah untuk menghubungkan berbagai jaringan IP.
20. If this simulation was configured with IPv6 instead of IPv4, what would be
different? Alamat IPv4 akan diganti dengan alamat IPv6, tapi yang lainnya tetap sama.