1 / 34

JARINGAN KOMPUTER Dengan MikroTikOS

JARINGAN KOMPUTER Dengan MikroTikOS. Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com. Membangun jaringan dengan MikroTikOS. Router & Proxy internet. Server DHCP BW Managemen. Ref:

eldon
Télécharger la présentation

JARINGAN KOMPUTER Dengan MikroTikOS

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com Slat Pertemua 1

  2. Membangun jaringan dengan MikroTikOS • Router & Proxy internet. • Server DHCP • BW Managemen. Ref: • Kustanto & Daniel, Membangun Server internet dengan MikroTikOS, Penerbit. Gava Media jogja. • WWW. Mikrotik.com Slat Pertemua 1

  3. Tanpa Strategi Proxy Slat Pertemua 1

  4. Dengan Strategi Proxy(Request dari client diteruskan ke real server dengan atasnama Proxy server) Slat Pertemua 1

  5. Pengalamatan IP pada Strategi Proxy Slat Pertemua 1

  6. Scaling Proxies Slat Pertemua 1

  7. Server 10.0.1.3 Internet Gateway 10.0.1.1 Public Network 10.0.1.0 /8 Interface Public Address : 10.0.1.200 /8 Interface bejo Address :192.168.0.1/24 Local Network 192.168.0.0/24 Laptop Address :192.168.0.3/24 Workstation Address :192.168.0.2 /24 Router Internet Slat Pertemua 1

  8. Konfigurasi Router Internet Slat Pertemua 1

  9. Konfigurasi MikroTikOS Bisa dilakukan : • Via console Mikrotik router board ataupun PC dapat diakses langsung via console/ shell maupun remote akses menggunakan putty (www.putty.nl) • Via winbox Mikrotik bisa juga diakses/remote menggunakan software tool winbox • Via web MikroTik juga dapat diakses via web/port 80 dengan menggunakan browser. Dalam konfigurasi ini, mikrotik diakses via konsole dan tool WinBox. Slat Pertemua 1

  10. Langkah 1 [admin@proxy]>/interface [admin@proxy]interface>enable 0 [admin@proxy]interface>enable 1 • Mengaktifkan ethernet • Untuk Melihat kedua ethernet Card yang terpasang (apakah • sudah komplit dua), ketikkan print atau pr : • [admin@proxy]interface>print Slat Pertemua 1

  11. Langkah 2 • Identitas ethernet. • Untuk merubah nama ethernet yang terpasang pada mesin MikroTik, ketikkan : [admin@proxy]>/interface [admin@proxy]interface>ethernet set ether1 name=Lan [admin@proxy]interface>ethernet set ether2 name=Public Atau[admin@proxy]interface>Set 0 name Lan [admin@proxy]interface>Set 1 name Public Slat Pertemua 1

  12. Langkah 3 • Set Ip Address: • [admin@proxy]ip address> • add interface=lan address=192.168.0.1/24 • [admin@proxy]ip address> • add interface=Public address=10.0.1.200/8 Slat Pertemua 1

  13. Langkah 4 . Set gateway: [admin@proxy]>/ip route [admin@proxy]ip route>add gateway=10.0.1.1 Slat Pertemua 1

  14. Langkah 5 • Seting DNS [admin@proxy]>/ip dns [admin@proxy]ip dns>set primary-dns=202.134.1.10 [admin@proxy]ip dns>set secondary-dns=202.134.0.155 Agar komputer Client dapat akses internet: [admin@proxy]ip dns>allow-remote-requests: yes Slat Pertemua 1

  15. Langkah 6 • Set NAT: [admin@proxy]>/ip firewall nat [admin@proxy]ip firewall nat> add chain=srcnat out-interface=public src-address=192.168.0.0/24 action=masquerade Slat Pertemua 1

  16. Proxy Internet Slat Pertemua 1

  17. Konfigurasi Proxy • Set Proxy: • [admin@proxy]ip web-proxy>set • enabled: yes • src-address: 0.0.0.0 • port: 8080 • hostname: " proxy.lab.ac.id " • transparent-proxy: yes • parent-proxy: 0.0.0.0:0 • cache-administrator: "webmaster" • max-object-size: 4096KiB • cache-drive: system • max-cache-size: unlimited • max-ram-cache-size: unlimited • status: running • reserved-for-cache: 4733952KiB • reserved-for-ram-cache: 2048KiB Slat Pertemua 1

  18. Transparant proxy • Set transparant proxy: • [admin@proxy]ip firewall nat> • Flags: X - disabled, I - invalid, D - dynamic • 0 add chain=srcnat out-interface=public src-address=192.168.0.0/24 • action=masquerade • 1 add chain=dstnat in-interface=lan protocol=tcp dst-port=80 • src-address-list=iplan dst-address-list=192.168.0.0/24 action=redirect to-ports=8080 • 2 add chain=dstnat in-interface=lan protocol=tcp dst-port=3128 • src-address-list=iplan dst-address-list=192.168.0.0/24 action=redirect to-ports=8080 • 3 add chain=dstnat in-interface=lan protocol=tcp dst-port=8080 • src-address-list=iplan dst-address-list=192.168.0.0/24 action=redirect to-ports=8080 • add chain=dstnat protocol=tcp dst-port=80 action=accept • add chain=dstnat protocol=tcp dst- port=3128 action=accept • 6 add chain=dstnat protocol=tcp dst-port=8080 action=accept Slat Pertemua 1

  19. Firewall Filter • 8. Protect situs: • Via URL: • [admin@proxy]ip web-proxy access> • add url=“http://www.sex.com” action deny • add url=“http://www.playboy.com” action deny • Via IP network: • [admin@proxy]>/ip firewall filter • [admin@proxy]ip firewall filter> • add chain=forward src-address=82.0.0.0/8 action=drop Slat Pertemua 1

  20. DHCP Slat Pertemua 1

  21. Langkah 1 • Setting IP address [admin@proxy]>/ip address [admin@proxy]ip address> add interface=public address=176.0.1.2/24 [admin@proxy]ip address> add interface=lan address=192.168.0.1/24 [admin@proxy]ip address>pr Slat Pertemua 1

  22. Langkah 2 • Konfigurasi IP Gateway. Untuk mengkonfigurasi gateway pada router internet ini, ketikan : [admin@proxy]>/ip route [admin@proxy]ip route>add gateway=176.0.1.1 Slat Pertemua 1

  23. Langkah 3 • Konfigurasi IP dns. Dalam mengisikan IP DNS, sesuaikan rekomendasi dari ISP Anda. misalkan : DNS1 : 202.134.1.10 DNS2 : 202.134.0.155 Maka untuk konfigurasinya, ketikan : [admin@proxy]>/ip dns [admin@proxy]ip dns>set primary-dns=202.134.1.10 [admin@proxy]ip dns> set secondary-dns=202.134.0.155 [admin@proxy]ip dns> set allow-remote-request=yes Slat Pertemua 1

  24. Langkah 4 [admin@Proxy]>/ip pool [admin@Proxy]ip pool> add name=dhcp-pool range=192.168.0.2-192.168.0.150 [admin@Proxy]>/ip dhcp-server [admin@Proxy]ip dhcp-server>/network add address=192.168.0.0/24 gateway=192.168.0.1 • Setting address pool. Slat Pertemua 1

  25. Langkag 5 • Menentukan interface lan dhcp dan mengaktifkan dhcp server. [admin@Proxy]ip dhcp-server> add interface=lan address-pool=dhcp-pool [admin@Proxy]ip dhcp-server>enable 0 Slat Pertemua 1

  26. Langkah 6 • Setting IP firewall nat. [admin@proxy]>/ip firewall nat [admin@proxy]ip firewall nat> add chain=srcnat out-interface=public action=masquerade src- address=192.168.0.0/24 Slat Pertemua 1

  27. Langkah 7 • Setting Komputer klien. Klik Start>Control Panel>Network Connections>Local Area Connection>Properties> Internet Protocol (TCP/IP)>IP address automatically>OK Slat Pertemua 1

  28. Slat Pertemua 1

  29. Manajemen bandwidth Internet Gateway 10.0.1.1 Interface Local Address :192.168.0.1/24 Interface Public Address : 10.0.1.200/24 Gambar : Topologi bandwidth kontrol limiter. Slat Pertemua 1

  30. Manajemen bandwidth dalam MikrotikOS: • Queue Tree • Queue Simple Slat Pertemua 1

  31. a. IP firewall mangle. • [admin@proxy]>/ip firewall mangle • [admin@proxy]ip firewall mangle> add chain=prerouting src-address=192.168.0.3 action=mark-connection new-connection-mark=laptop-con • [admin@proxy]ip firewall mangle> add chain=prerouting connection-mark=laptop-conaction=mark-packet new-packet-mark=laptop Slat Pertemua 1

  32. b. Konfigurasi Queue Tree • [admin@proxy]>/queue tree • [admin@Proxy] queue tree> add name="laptop-download" parent=lan packet-mark=laptop limit-at=64000 queue=default priority=8 max-limit=128000 burst-limit=0 burst-threshold=0 burst-time=0s • [admin@Proxy] queue tree> add name="laptop-upload" parent=public packet-mark=laptop limit-at=32000 queue=default priority=8 max-limit=64000burst-limit=0 burst-threshold=0 burst-time=0s Slat Pertemua 1

  33. Queue Simple • [admin@proxy]>/queue simple • [admin@Proxy]queue simple> add name=limit-lan interface=lan target-address=192.168.0.0/24 max-limit=64000/128000 • [admin@Proxy]queue simple> • add name=laptop target-addresses=192.168.0.4 interface=lan Slat Pertemua 1

  34. Thanks Terima Kasih Slat Pertemua 1

More Related